Legal
Privacy Policy
Operated by AR MotionX LLC, registered in the SHAMS Free Zone, Sharjah, United Arab Emirates
Effective date: [●] · Version [●]
1. What This Policy Covers
This Privacy Policy explains how AR MotionX LLC ("MotionX", "we", "us") collects, uses, shares, and protects personal data when you use the MotionX platform, including our WhatsApp Business channel and website at armotionx.com (together, the "Platform"). It applies to Buyers, Suppliers, and visitors to the Platform.
By using the Platform, you acknowledge the collection and use of personal data as described in this Policy. Where we rely on your consent for a specific use (for example, Marketing Messages), we will ask for that consent separately, as described in Section 8.
2. Who We Are and How to Contact Us
MotionX (operated by AR MotionX LLC, a limited liability company registered in Sharjah Media City (SHAMS Free Zone), Sharjah, UAE, under license number 2646205.01) is the data controller responsible for your personal data under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
Contact: info@armotionx.com · +971 56 399 5665 · AR MotionX LLC, SHAMS Free Zone, Sharjah, UAE.
3. Personal Data We Collect
The table below sets out the categories of personal data MotionX collects directly from you through registration, verification, and use of the Platform.
| Category | What this includes |
|---|---|
| Identity Data | Business name, authorized contact person's name, business category/specialization, and role (Buyer or Supplier). |
| Verification Data | A copy of your UAE trade license, submitted to obtain Verified status. We use this to confirm you are a genuine registered business and to prevent fraud. |
| Contact Data | WhatsApp-registered phone number, and email address if provided. |
| Location Data | Emirate/city and business address, as provided during registration or within a Request. |
| Request and Lead Data | For Buyers: the details of a submitted Request (category, project description, estimated value, location). For Suppliers: Lead claim history, free-lead usage, and Lead feedback (e.g., replacement-Lead requests). |
| Communication Data | The content of messages exchanged with the MotionX WhatsApp assistant, including button/menu selections, free-text Requests, and (once a Lead is claimed) the contact details exchanged between a matched Buyer and Supplier. |
| Payment Data | Transaction records for registration renewal fees and Lead fees. Card and payment-method details are collected and processed directly by Stripe, our payment processor — MotionX does not store full card numbers. |
| Marketing Preference Data | Your opt-in or opt-out status for Marketing Messages, as described in Section 8. |
| Technical Data | WhatsApp delivery/read metadata (via Meta's WhatsApp Business Platform and our BSP, 360Dialog), and, for visitors to armotionx.com, standard web technical data (IP address, browser type, device information). |
Refusing to provide data: Some data is necessary for the Platform to function — for example, without a valid trade license, we cannot grant Verified status, and without a WhatsApp number, we cannot deliver Leads or match Requests.
4. Personal Data We Collect From Other Sources
| Source | Categories of data |
|---|---|
| WhatsApp Business Platform (Meta) and our BSP, 360Dialog | Message delivery status, read receipts, and technical metadata associated with your WhatsApp number. |
| Stripe (payment processor) | Confirmation of successful payment and transaction reference (not full card details). |
5. How We Use Your Data, and Our Legal Basis
UAE data protection law requires us to have a valid legal basis for each use of your personal data. We rely primarily on: performing our contract with you ("Contractual Necessity"), your consent ("Consent"), a legitimate business interest balanced against your rights ("Legitimate Interest"), or a legal obligation ("Compliance with Law").
| Purpose | Why we do this | Legal basis |
|---|---|---|
| Registration and verification | To confirm you are a genuine licensed UAE business and grant Verified status. | Contractual Necessity |
| AI-assisted Request matching | To route a Buyer's Request to relevant, verified Suppliers by category and location. | Contractual Necessity |
| Lead delivery and claiming | To notify matched Suppliers of a Lead and process claims (free or paid). | Contractual Necessity |
| Fraud and duplicate-account prevention | To detect false Requests, duplicate registrations, or attempts to circumvent Lead fees. | Legitimate Interest / Compliance with Law |
| Billing and renewal | To process the annual registration renewal fee and Lead payments, and to maintain records for UAE tax purposes. | Contractual Necessity / Compliance with Law |
| Marketing Messages | To send promotional content beyond standard Service Messages, only where you have separately opted in. | Consent |
| Platform improvement and analytics | To understand usage patterns and improve matching accuracy and category coverage. | Legitimate Interest |
5.1 Automated decision-making. Our AI-assisted category matching is an automated process. Under the PDPL, you have the right to object to automated decisions that produce legal or similarly significant effects on you; where matching materially affects your access to Leads, you may request human review by contacting us (Section 9).
6. Who We Share Your Data With
| Recipient | Why we share it |
|---|---|
| Matched Buyer or Supplier | Once a Supplier claims a Lead (free or paid), the relevant Buyer's contact details are released to that Supplier so they can follow up directly, in line with Section 4 of our Terms and Conditions. |
| Meta / WhatsApp Business Platform and 360Dialog (our BSP) | To deliver and receive WhatsApp messages that make the Platform work. These providers process message data under their own platform terms in addition to our instructions. |
| Supabase (database hosting) and n8n (workflow automation) | Our technology infrastructure providers, who store and process Platform data on our behalf, under our instructions and appropriate confidentiality and security terms. |
| Stripe (payment processor) | To securely process registration and Lead fee payments. Stripe handles your card details directly under its own PCI-compliant systems and its own terms and privacy policy for the payment step. |
| Professional advisers | Our lawyers, accountants, and auditors, where they need limited access to provide their services to us. |
| Public authorities | Where required by UAE law, court order, or a valid request from a regulator such as the UAE Data Office, SHAMS, or law enforcement. |
| A future acquirer | In the event of a merger, acquisition, or sale of all or part of MotionX's business, subject to the recipient continuing to honor this Policy. |
We do not sell your personal data to third parties for their own independent marketing use. Any Marketing Messages sent on behalf of a partner are sent by MotionX through our own channel, under the separate consent described in Section 8 and Section 10.2 of our Terms and Conditions.
7. Cross-Border Data Transfers
Where our infrastructure providers (including Supabase) store or process data outside the UAE, we take steps to ensure such transfers comply with the UAE PDPL's requirements for cross-border data transfer, including using providers with appropriate data protection safeguards. [To be confirmed: state the specific server region(s) used and the safeguard relied upon, once finalized with your infrastructure team.]
8. How Long We Keep Your Data
8.1 We retain your registration and verification data for as long as your account remains active, and for a reasonable period after closure or non-renewal to handle disputes, comply with legal obligations, and prevent re-registration by suspended Users.
8.2 Financial and invoicing records (registration and Lead payments) are retained for the minimum period required under UAE tax and commercial law (currently five (5) years under UAE VAT legislation — to be confirmed with your tax advisor as regulations evolve).
8.3 Where data is no longer needed, we delete it or anonymize it so it can no longer identify you.
9. Marketing Communications and Consent
Section 10 of our Terms and Conditions sets out in full how we handle Service Messages (operational, required) and Marketing Messages (promotional, opt-in only). In summary: you may opt in to Marketing Messages separately from registration, and you may withdraw that consent at any time, free of charge, by replying "STOP" on WhatsApp or through your account settings.
10. Your Rights
Subject to applicable law and any exemptions, you may have the right to:
| Right | What it means |
|---|---|
| Access | Find out what data we hold on you and get a copy of it. |
| Correction | Flag anything on your record that's wrong or out of date so we can fix it. |
| Erasure | Have your data deleted once we no longer have a valid reason to keep it. |
| Restriction / objection | Push back on a specific way we're using your data, including the automated matching covered in Section 5.1. |
| Portability | Get your data handed over in a machine-readable format you (or another provider) can actually use. |
| Withdraw consent | For anything we do on the basis of your consent (Marketing Messages being the main example), pull that consent at any point going forward. |
To exercise these rights, contact us at info@armotionx.com. We may ask for information to verify your identity, and we aim to respond within one month. If you are unsatisfied with our response, you may have the right to complain to the UAE Data Office once its complaints mechanism is operational, or to the relevant SHAMS regulatory authority.
11. Data Security
We apply appropriate technical and organizational measures to protect your data against accidental loss, unauthorized access, alteration, or disclosure, and access to your data is limited to personnel and processors who need it to operate the Platform.
12. Our Policy on Minors
The Platform is intended for use by authorized representatives of licensed UAE businesses and is not directed at, or intended for use by, minors. We do not knowingly collect data about minors. If you believe a minor has registered on the Platform, please contact us so we can remove the relevant data.
13. Third-Party Links
The Platform may contain links to third-party websites (for example, a Supplier's own website). We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies before sharing your data with them.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. Material changes will be notified via WhatsApp or on the Platform in advance of taking effect.
Questions about this document? Contact info@armotionx.com or message us on WhatsApp.
© 2026 AR MotionX LLC · SHAMS Free Zone, Sharjah, UAE · Licence No. 2646205.01