Privacy Policy

Introduction

AZE ("we," "our," or "us") operates the AZE application and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, and protect information when you use the Service.

We are committed to protecting your personal data and are actively aligning our practices with internationally recognized data protection standards, including the principles of the General Data Protection Regulation (GDPR) and the UAE Personal Data Protection Law (PDPL).

By accessing or using the Service, you acknowledge and agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

Information We Collect

Account Information. When you create an account, we collect your name, email address, and authentication credentials necessary to operate your account.

Assessment Data. When you take an assessment, we collect your responses, including text input and audio recordings for speaking components, to generate your results and certificate.

Usage Data. We automatically collect information about how you interact with the Service, including device type, operating system version, app version, session duration, and general interaction patterns.

Payment Information. Payments are processed by third-party payment providers. We do not directly store your complete payment card information. We may retain transaction identifiers, purchase history, and billing details necessary for record-keeping.

Device and Technical Information. We may collect device identifiers, IP address, browser or app configuration, and approximate location (country or region level) to provide and improve the Service and for security purposes.

How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, maintain, and improve the Service
• To process assessments and deliver results and certificates
• To verify certificates through our verification system
• To process transactions and send related communications
• To communicate with you regarding your account, updates, and the Service
• To ensure platform security, detect fraud, and prevent misuse
• To comply with applicable legal obligations

Legal Basis for Processing

We process your personal data on one or more of the following legal grounds, depending on the context:

• Contractual Necessity: Processing required to provide the Service you have requested, including delivering assessments, generating results, and issuing certificates
• Consent: Where you have provided explicit consent for specific processing activities, such as receiving marketing communications. You may withdraw consent at any time
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the Service, ensuring security, and preventing fraud, provided these interests do not override your rights
• Legal Obligation: Processing necessary to comply with applicable laws and regulations

Data Sharing

We do not sell your personal data to third parties.

We may share information in the following circumstances:

• Service Providers: With third-party vendors who assist in operating the Service, processing payments, hosting infrastructure, or analytics, each bound by confidentiality and data protection obligations
• Certificate Verification: When you choose to share your certificate or verification link, limited assessment data may be accessible to the verifying party
• Legal Compliance: When required or permitted by applicable law, regulation, legal process, or governmental request
• Business Transfers: In connection with a merger, acquisition, or sale of assets, subject to appropriate protections

Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service and fulfill the purposes described in this Policy. Assessment results and certificates are retained as necessary for their verification purpose. You may request deletion of your account and associated personal data at any time by contacting us.

Data Security

We implement commercially reasonable technical and organizational measures designed to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights

We respect your rights over your personal data. In accordance with applicable data protection laws, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data, subject to legal retention obligations
• Restriction: Request that we limit the processing of your data in certain circumstances
• Portability: Request your data in a structured, commonly used, machine-readable format where technically feasible
• Objection: Object to processing based on legitimate interests or for direct marketing purposes
• Withdraw Consent: Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact us through the AZE app or website. We will acknowledge your request and respond within the timeframe required by applicable law. You also have the right to lodge a complaint with a relevant data protection authority if you believe your rights have not been adequately addressed.

Children's Privacy

The Service is not directed to individuals under the age of 13 (or the applicable minimum age in your jurisdiction). We do not knowingly collect personal data from children below this age. If we become aware that we have inadvertently collected such data, we will take reasonable steps to delete it promptly.

International Data Transfers

Your information may be transferred to and processed in jurisdictions outside your country of residence, including jurisdictions that may not provide the same level of data protection as your home country. Where such transfers occur, we implement appropriate safeguards, such as standard contractual clauses or equivalent mechanisms, to ensure your data receives an adequate level of protection in accordance with applicable data protection laws.

Third-Party Services

The Service may contain links to or integrate with third-party services. This Privacy Policy does not apply to the practices of third parties. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Service.

Cookies and Similar Technologies

The Service and our associated websites may use cookies and similar technologies to enhance your experience, analyze usage patterns, and support the functionality of the Service. Where required by law, we will obtain your consent before placing non-essential cookies. You can manage your cookie preferences through your browser or device settings.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Last Updated" date at the top of this page. Where required by law, we will provide additional notice such as in-app notification or email. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.