Who is responsible
AI Nation operates the GCC Compliance Matrix customer experience. Mudakka Consulting FZ-LLC, licensed by RAKEZ in the United Arab Emirates, is the legal contracting entity, merchant of record, technology provider and data controller for this service.
Data we collect
- Account information such as name, email, sign-in method and protected password credentials
- The date and policy version accepted when an account is created
- Booking details, consultation notes, appointment status and rescheduling history
- Purchase status, amount, currency and Stripe transaction references
- Questions sent to Mira, recent conversation context, tool activity and security audit records
- Name, email address and message submitted through the contact request form
- Audio supplied during a live voice session and associated transcripts where enabled
- Technical records needed for security, reliability, rate limiting and fraud prevention
How and why data is used
We use personal data to perform the customer contract, provide accounts, answer support questions, record contact requests, execute requested agent tools, manage bookings, verify payments and deliver purchased research. We also use limited records for legitimate security and service-improvement purposes and where necessary to meet legal, accounting or regulatory obligations.
AI and service providers
Relevant data may be processed by Meta model services for text responses, Google Gemini for live audio, Google for optional account sign-in and consultation calendar events, Stripe for payments, Resend for transactional email when enabled, and the hosting and storage providers used to operate the website. Providers receive only the information needed for their function. Card details remain within Stripe and are not stored by this website.
International processing
Some providers may process information outside the country where a customer is located. Where required, appropriate contractual or organisational safeguards are used. Customers should review the separate AI and Data Use Policy for a clearer description of model processing.
Cookies and sessions
The website uses an essential, secure session cookie to keep an authenticated account signed in. It is not used for advertising. Signed-in conversation history is attached to the authenticated account. Before sign-in, limited chat continuity is kept only in the current browser tab and is removed when that tab is closed. Additional third-party cookies may be set by Google or Stripe when their sign-in or payment components are used, subject to their own policies.
Retention and security
Session tokens normally expire after 30 days. Account, purchase, consent and booking records are retained while needed to provide the service and meet legal or accounting obligations. Passwords are salted and derived with a one-way cryptographic function. Session and download tokens are stored only as hashes. Access checks and audit records help detect misuse.
Your choices and rights
You can use public website content without creating an account. Microphone access begins only after permission. Subject to applicable law, you may request access, correction or deletion of personal data and may object to or restrict certain processing. Some transaction records may need to be retained. Privacy requests can be sent to support@gccdatamatrix.com.
Children and changes
The service is intended for business users and is not directed to children. We may update this policy as providers or product features change. Material changes will be presented prospectively through the website or account experience.