This Privacy Policy explains how The Blueprint AI Edition (“The Blueprint”, “we”, “us”, or “our”) collects, uses, discloses, and safeguards personal data when you visit theblueprint.ae or use our platform, tools, and services (the “Service”). We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and its implementing regulations.
By using the Service you acknowledge this Policy. If you do not agree with it, please do not use the Service.
1. Who we are (Data Controller)
The Blueprint AI Edition is the data controller responsible for your personal data. For any privacy-related request or question, contact us at blueprint-team@theaitech.ae.
2. Personal data we collect
Data you provide
- Account data — name, email address, password (stored encrypted), and profile details when you register.
- Inquiry & lead data — name, work email, company, role, company size, and any message you send through our “Become a Client” or contact forms.
- Newsletter data — the email address you use to subscribe to the Intel Brief.
- Assessment & usage inputs — responses you enter into our tools, assessments, and workspace features.
- Payment data — handled by our payment processor (Stripe). We do not store full card numbers; we retain a customer reference and subscription status.
Data collected automatically
- Technical data — IP address, browser type, device information, and pages visited.
- Cookies and similar technologies — see “Cookies” below.
3. How we use your data and our legal basis
Under the PDPL, we rely on one or more of the following bases to process your data:
- Performance of a contract — to create and manage your account, deliver the Service, and process subscriptions.
- Your consent — to send you the newsletter, set non-essential cookies, and for optional communications. You may withdraw consent at any time.
- Legitimate interests — to secure, maintain, and improve the Service, and to respond to inquiries — provided these interests are not overridden by your rights.
- Legal obligation — to comply with applicable law and lawful requests from authorities.
4. Where your data is stored and how we share it
We do not sell your personal data. Your data — including your account, the content you create, and platform records — is stored on our own infrastructure, hosted on servers we control. We do not hand your data to a third-party cloud database or hosting provider to run the Service.
We share personal data with a third party only where it is necessary to operate a specific feature you use, and only under contracts that require them to protect it. Where enabled, this may include a transactional email provider (to send account and newsletter emails) and a privacy-respecting analytics tool (to understand aggregate usage). We do not otherwise disclose your data except where required by law, to protect our rights, or in connection with a business transfer.
5. International transfers
Some of our service providers may store or process data outside the United Arab Emirates. Where personal data is transferred outside the UAE, we take steps to ensure it receives an adequate level of protection consistent with the PDPL, including appropriate contractual safeguards.
6. Data retention
We keep personal data only for as long as necessary for the purposes described in this Policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymise it.
7. Your rights under the PDPL
Subject to applicable conditions and exceptions, you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request deletion of your data;
- restrict or object to certain processing;
- request that your data be transferred to you or another controller (portability);
- withdraw consent at any time, without affecting prior lawful processing; and
- lodge a complaint with the UAE Data Office if you believe your rights have been infringed.
To exercise any of these rights, email blueprint-team@theaitech.ae. We will respond within the timeframe required by law.
8. Cookies
We use cookies and similar technologies in two broad categories:
- Strictly necessary — required for the Service to function (for example, authentication and session management). These cannot be switched off.
- Analytics & optional — help us understand aggregate usage and improve the Service. These are set only where you accept them via our cookie banner.
You can accept or decline non-essential cookies using the banner shown on your first visit, and you can clear cookies at any time through your browser settings.
9. Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse — including encryption in transit, access controls, and least-privilege practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children
The Service is intended for professional use by individuals aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, by additional notice.
12. Contact us
Questions or requests about this Policy or your personal data: blueprint-team@theaitech.ae. See also our Terms of Service and Acceptable Use Policy.