Last Updated: September 9, 2025

1. Introduction

Vynta L.L.C-FZ (“Vynta,” “we,” “us,” or “our”) provides automation solutions, agent services, financial consultancy, and software development. This Privacy Policy outlines our practices concerning the collection, use, and disclosure of information in compliance with key data protection regulations, including:

  • General Data Protection Regulation (GDPR) for individuals in the European Union/European Economic Area.
  • UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
  • Other applicable international data protection laws.

This policy applies to data from our website visitors, our direct clients, and the end-users our clients interact with via our services.

2. Company Information

  • Registered Name: Vynta L.L.C-FZ
  • License Number: 2534068.01
  • Formation Number: 2534068
  • Address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.
  • Manager: Sergio Marques

3. Information We Handle

We handle three main categories of information:

  • Our Website Data: Information we collect from visitors to our website, https://vynta.ai/. This includes contact details submitted through forms, IP addresses, device identifiers, browser type, and usage data collected via cookies. In this capacity, we act as the Data Controller.
  • Client End-User Data: Data we process on behalf of our clients via the solutions we provide. For our “Agent Scale” real estate product, this includes names, phone numbers, email addresses, and real estate qualification data of our clients’ leads. In this capacity, we act as the Data Processor, and our client is the Data Controller.
  • Client Business Data: Confidential and proprietary business information shared by our clients to enable us to build, train, and customize our solutions. This includes business processes, workflows, and customer databases.

4. Legal Bases for Processing

We process your data based on the following legal grounds:

  • Consent: Where you have given us clear consent for a specific purpose (e.g., newsletter subscription).
  • Contract Performance: When processing is necessary for the performance of a contract with you (e.g., providing our services).
  • Legal Obligation: To comply with legal and regulatory requirements (e.g., tax and corporate law).
  • Legitimate Interests: For our legitimate business interests, such as improving our services, preventing fraud, and ensuring the security of our platform, provided these interests do not override your fundamental rights.

5. How We Use Information

Information is used to:

  • Provide, operate, and improve our services, including our “Agent Scale” product.
  • Respond to inquiries and fulfill contractual obligations with our clients.
  • Execute lead qualification, automated communication, and other solution-driven services.
  • Personalize user experience and conduct analytics for service optimization and security monitoring.
  • Comply with UAE and international regulatory requirements.

Client Business Data and Client End-User Data are used exclusively for providing services to that specific client and are treated as strictly confidential.

6. Automated Decision-Making

Some of our services may involve automated decision-making, such as AI-based lead qualification and scoring. Where legally required, individuals have the right to request human intervention, express their point of view, contest a decision made solely by automated means, or opt-out of such processing.

7. How We Share Information

We do not sell personal data. We are committed to transparency regarding how we share information. Data may be shared with the following parties:

  • Sub-Processors and Service Providers: We engage vetted third-party companies to facilitate our Service. They are contractually obligated to safeguard data and only process it for the purposes we specify. Our key sub-processors include:
    • Digital Ocean, LLC. (USA): For cloud infrastructure and data hosting.
    • OpenAI, L.L.C. (USA): For providing the foundational models and processing that power our solutions.
  • Business Partners: Where collaboration is necessary for service delivery, and only with our client’s explicit consent.
  • Legal Authorities: When required by a valid legal process, such as a court order or subpoena.

8. International Data Transfers

Your information may be transferred to and processed in countries outside of your residence, including the United Arab Emirates and the United States. We ensure such transfers are lawful and that your data is protected by implementing appropriate safeguards, such as:

  • EU Standard Contractual Clauses (SCCs).
  • Adequacy decisions from relevant authorities.
  • Other UAE PDPL-approved transfer mechanisms.

9. Data Security

We employ robust administrative, technical, and physical security measures to protect your information, including:

  • End-to-end encryption using SSL/TLS.
  • Secure cloud infrastructure with network firewalls.
  • Strict internal access controls on a need-to-know basis.
  • Regular security audits and vulnerability assessments.

10. Data Retention

Data is retained only for as long as necessary to fulfill the purposes outlined in this policy, satisfy our contractual obligations, or as required by law. All data related to a client, including End-User Data and Business Data, is securely and permanently deleted upon the termination of our service agreement with that client.

11. Your Data Rights

You have the right to:

  • Access your personal data.
  • Rectify inaccurate or incomplete data.
  • Erase your data (“right to be forgotten”).
  • Restrict the processing of your data.
  • Object to processing based on legitimate interests or for direct marketing.
  • Data Portability – receive your data in a structured, machine-readable format.
  • Withdraw Consent at any time where processing is based on consent.

For end-users of our clients’ solutions: Please contact the respective client (the business you were communicating with) directly to exercise your data rights, as they are the Data Controller. For our website visitors and direct clients: Please contact us using the information below.

12. Cookies and Tracking Technologies

We use cookies and similar technologies to track activity on our website, hold certain information, improve performance, and personalize content. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

13. Children’s Privacy

Our services are not directed at anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and become aware that your child has provided us with personal data, please contact us immediately.

14. Links to Other Websites

Our website may contain links to other sites not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the “Last Updated” date. You are advised to review this Privacy Policy periodically.

16. Government and Law Enforcement Requests

Vynta is committed to protecting user privacy. When we receive a request for user data from a government or law enforcement agency, we conduct a thorough review to ensure it is legally valid and complies with all applicable laws. Our formal process includes:

  • Required review of the legality of all requests.
  • Challenging requests that are overly broad, vague, or appear unlawful.
  • A data minimization policy to ensure we disclose only the minimum information necessary to comply with a valid request.
  • Documenting all requests, our responses, and the legal reasoning involved.

17. Contact Us

For any questions, concerns, or data rights requests, please contact us:

  • Email: team@vynta.ai
  • Phone: +971501852487
  • Address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.