Privacy Policy
Last updated: 18 August 2026
1. Who we are
This Privacy Policy explains how Opperator AI FZCO, trading as PAPS AI (“PAPS AI”, “we”, “us”), IFZA Business Park, Dubai Silicon Oasis, Dubai, United Arab Emirates, collects, uses, shares and protects personal data when you visit www.paps.ai, use our platform and applications, or engage PAPS Studio services. We are the data controller for the data described here. Contact: support@paps.ai.
2. Data we collect
Account and contact data — name, business name, email address, phone number and billing details you provide when creating an account, submitting a form or purchasing a service.
Service and content data — the knowledge, documents, product information, conversation content and settings you provide so our AI agents can answer on your behalf, and the conversations those agents hold (calls, WhatsApp, website chat, emails, social comments and direct messages), which are logged to your CRM.
Usage and device data — log files, IP address, browser type, pages visited, approximate location and interaction events, collected to operate, secure and improve the service.
Communications — messages you send us by email, WhatsApp or through our forms.
3. Data from social media platforms (platform APIs)
When you connect a social account to PAPS AI or engage PAPS Studio, we access your accounts only through the official APIs and developer platforms of the relevant services — Meta (Facebook, Instagram, WhatsApp Business), TikTok, YouTube (Google), X and LinkedIn — and only after you explicitly authorize that access through the platform’s own consent flow. Depending on the platform and the permissions you grant, this data may include: your page or account identifiers, access tokens, profile information of your business account, the content we publish for you, and the comments and direct messages received by your accounts, which our AI answers on your behalf. We use this data solely to provide the services you contracted — publishing content, answering comments and messages, and reporting performance to you. We do not sell this data, we do not use it for advertising to third parties, and we access only the minimum scopes required. Our use of information received from each platform adheres to that platform’s developer and data policies, including the Meta Platform Terms and Developer Policies, the TikTok Developer Terms, the LinkedIn API Terms of Use and the X Developer Agreement and Policy.
4. YouTube API Services
Our service uses YouTube API Services. By using features connected to YouTube you agree to be bound by the YouTube Terms of Service, and you acknowledge the Google Privacy Policy. In addition to our own deletion process, you can revoke PAPS AI’s access to your YouTube data at any time via the Google security settings page at myaccount.google.com/permissions. We use, store and process YouTube API data in accordance with the YouTube API Services Developer Policies, including its Limited Use requirements, and we refresh or delete stored YouTube data as those policies require.
5. Why we process data (purposes and legal bases)
We process personal data to: provide and operate the contracted services (performance of a contract); publish content and answer conversations on your connected accounts (performance of a contract); bill and administer your subscription (contract and legal obligation); secure, debug and improve the platform (legitimate interest); respond to your enquiries (legitimate interest or pre-contractual steps); and comply with law (legal obligation). Where consent is the applicable basis — for example, platform authorizations or optional cookies — you can withdraw it at any time.
6. AI processing and disclosure
Our services use artificial intelligence to generate content and to hold conversations. AI-run conversations are always disclosed as AI. Conversation content is processed to generate answers, to log the interaction in your CRM and to produce reporting. We do not use your private conversation data to train foundation models for other customers.
7. Sharing
We share personal data only with: (a) service providers that host and support our platform (cloud hosting, telephony, messaging, AI model providers and analytics), bound by data-processing agreements; (b) the social platforms you connect, as necessary to publish and answer on your accounts; (c) authorities where required by law; and (d) a successor entity in a corporate transaction. We do not sell personal data.
8. International transfers
We are based in the United Arab Emirates and use service providers in other jurisdictions, including the EU and the US. Where data protected by the GDPR is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
9. Retention
We keep personal data only as long as needed for the purposes above: account data for the life of the account; conversation logs and CRM records while your subscription is active and for up to 12 months after termination unless you request earlier deletion; billing records as required by law. Data obtained from platform APIs is kept no longer than each platform’s developer policy permits and is deleted when you disconnect the integration or delete your account.
10. Your rights
Depending on your jurisdiction (including under the GDPR and the UAE PDPL), you have the right to access, rectify, delete and receive a copy of your personal data, to restrict or object to processing, and to withdraw consent. To exercise any right, email support@paps.ai. We respond within 30 days. You may also lodge a complaint with your local supervisory authority.
11. Data deletion — how to delete your data
You can request deletion of your personal data at any time, in any of these ways: (1) email support@paps.ai with the subject “Data deletion request” from the email associated with your account; (2) disconnect any connected social account from its platform settings — for Facebook, Instagram or WhatsApp via your Meta account’s Settings → Apps and Websites (removing PAPS AI there also triggers deletion of the data we received from Meta); for YouTube via myaccount.google.com/permissions; for TikTok, X and LinkedIn via each platform’s connected-apps settings; or (3) delete your PAPS AI account from the platform. Upon a verified request we delete or irreversibly anonymize your personal data within 30 days, except data we must retain by law, and we confirm completion to you in writing.
12. Cookies
We use strictly necessary cookies to run the website and, where enabled, analytics cookies to understand aggregate usage. You can control cookies through your browser settings; the site works with non-essential cookies disabled.
13. Security
We apply industry-standard technical and organizational measures — encryption in transit, access controls, least-privilege permissions and audit logging — to protect personal data. No method of transmission or storage is 100% secure, but we work continuously to protect your information and will notify you and the competent authorities of a breach where required by law.
14. Children
Our services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal data from children; if you believe a child provided us data, contact us and we will delete it.
15. Changes and contact
We may update this Privacy Policy from time to time; the date above reflects the latest version, and material changes will be announced on this page. Questions and requests: support@paps.ai · Opperator AI FZCO, IFZA Business Park, Dubai Silicon Oasis, Dubai, United Arab Emirates.