Legal Notice Terms of Use Privacy Policy

Privacy Policy

Last updated: May 1, 2026

This Privacy Policy describes how ROCKETSEED TECHNOLOGY MANAGEMENT CONSULTANCIES - FZCO (“we,” “us,” “our,” or the “Company”), a company registered in the Dubai free zone under license number 76119, collects, uses, stores, and protects your personal data when you use the Winloop platform (the “Service”), available at https://www.winloop.ai.

This policy complies with the General Data Protection Regulation (GDPR - EU Regulation 2016/679), UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL), and any other applicable data protection legislation.

By using our Service, you accept the practices described in this Policy. If you do not agree, please do not use the Service.

1. Data Controller

The data controller is:

ROCKETSEED TECHNOLOGY MANAGEMENT CONSULTANCIES - FZCO
Building A1, Dubai Digital Park
Dubai Silicon Oasis
Dubai
United Arab Emirates

License number: 76119

For any questions regarding data protection, contact us at: dsi@rocketseed.ai.

2. Data Collected

a. Data Provided Directly by the User

When you create your account and use the Service, we collect:

  • Identification: last name, first name, business email, telephone number
  • Professional information: company name, job title, industry
  • Billing information: billing address, payment method (banking data is processed by Stripe, our PCI-DSS-certified payment provider, and is not stored on our servers)
  • Sales performance data: targets, results, commissions, team data
  • Communications: messages sent through the Service or to our support team

b. Data Collected Automatically

When you access the Service, we automatically collect:

  • IP address, browser type and version, operating system
  • Pages viewed, visit duration, browsing path
  • Cookie identifiers and similar technologies
  • Approximate geolocation (based on IP address)
  • Connection data: date, time, access frequency

c. Data from Third Parties

We may receive data about you from:

  • Your employer or account administrator, for Service configuration
  • Payment providers (Stripe), for transaction confirmation
  • Third-party authentication services (SSO, OAuth)

3. Purposes of Processing

a. Performance of a Contract (Art. 6(1)(b) GDPR)

  • Account creation and management
  • Provision and customization of the Service
  • Commission calculation and sales performance tracking
  • Generation of reports and dashboards
  • Billing and subscription management
  • Technical support and customer assistance

b. Legitimate Interests (Art. 6(1)(f) GDPR)

  • Improvement and optimization of the Service
  • Usage analysis and aggregated statistics
  • Detection and prevention of fraud and abuse
  • Platform security
  • Communications concerning Service updates

c. Consent (Art. 6(1)(a) GDPR)

  • Marketing communications and newsletters
  • Non-essential cookies and tracking technologies
  • Sharing data with partners for promotional purposes

You may withdraw your consent at any time by contacting dsi@rocketseed.ai or through your account settings.

d. Legal Obligation (Art. 6(1)(c) GDPR)

  • Tax and accounting compliance
  • Responding to requests from competent authorities
  • Retention of billing data as required by law

4. Data Sharing

We never sell your personal data. We may share your data in the following circumstances:

a. Service Providers

  • Cloud hosting and infrastructure
  • Payment processing: Stripe (PCI-DSS certified)
  • Analytics and performance measurement
  • Transactional email services
  • Customer support tools

These providers are contractually required to protect your data and use it only for the services they provide to us.

b. Legal Obligations

We may disclose your data where required by law, including in response to a court order, subpoena, or request from a competent government authority.

c. Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets, your data may be transferred to the successor entity. You would be informed in advance.

5. International Data Transfers

Our servers and providers may be located outside your country of residence, including in the UAE, the EU, and the United States.

For transfers from the EEA, we implement appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Adequacy decisions, where applicable
  • Supplementary technical and organizational measures

For transfers governed by the UAE PDPL, we comply with Article 22 of Federal Decree-Law No. 45 of 2021 concerning cross-border data transfers.

6. Data Retention

  • Account data: subscription term + 3 years after termination
  • Billing data: 10 years (UAE tax and accounting obligations)
  • Connection data and technical logs: 12 months
  • Sales performance data: subscription term, deleted within 90 days after termination
  • Cookies: no more than 13 months for audience measurement

Upon expiry, the data is deleted or irreversibly anonymized.

7. Data Security

We implement appropriate technical and organizational measures, including:

  • Encryption in transit (TLS/SSL) and at rest (AES-256)
  • Secure authentication and role-based access management
  • Regular backups and business continuity plans
  • Continuous monitoring and intrusion detection
  • Periodic security audits
  • Staff training and awareness

No method of transmission or storage is completely secure. If a data breach poses a risk to your rights, we will inform you promptly in accordance with applicable law.

8. Your Rights

a. Under the GDPR (EEA Residents)

  • Right of access (Art. 15)
  • Right to rectification (Art. 16)
  • Right to erasure (Art. 17)
  • Right to restriction of processing (Art. 18)
  • Right to data portability (Art. 20)
  • Right to object (Art. 21)
  • Right not to be subject to automated decision-making (Art. 22)
  • Right to withdraw consent (Art. 7)
  • Right to lodge a complaint with a supervisory authority

b. Under the UAE PDPL (UAE Residents)

  • Right of access and to information
  • Right to rectification and updating
  • Right to request that processing cease or that data be deleted
  • Right to withdraw consent
  • Right to lodge a complaint with the UAE Data Office

To exercise your rights, contact dsi@rocketseed.ai. We will respond within 30 days. Identity verification may be required.

9. Cookies

a. Essential Cookies

Required for the Service to operate (authentication, security, and session). No consent is required.

b. Analytics Cookies

Used for audience measurement. Subject to your consent.

c. Functional Cookies

Used to remember preferences and personalize your experience.

Manage your preferences through the consent banner or your browser settings. Refusing certain cookies may limit functionality.

10. Protection of Minors

The Service is strictly limited to persons aged 18 or older acting in a professional capacity. We do not knowingly collect data from minors. If such data is discovered, it will be deleted immediately.

11. Contact

ROCKETSEED TECHNOLOGY MANAGEMENT CONSULTANCIES - FZCO
Building A1, Dubai Digital Park
Dubai Silicon Oasis
Dubai
United Arab Emirates

License number: 76119
Website: https://www.winloop.ai

If you have any questions, contact us at: dsi@rocketseed.ai.