Who is responsible
GCC Data Matrix is operated under the AI Nation brand. The contracting entity, merchant and data controller is Mudakka Consulting FZ-LLC, licensed by RAKEZ in the United Arab Emirates. The technology was developed by Mudakka Consulting FZ-LLC.
Data we collect
- Account and business-profile information, including organisation and verified contact email
- Separately versioned legal acknowledgements and optional marketing permission
- Preview access, purchases, downloads, bookings and Calendar event metadata
- Text chats, live-voice transcripts, saved customer facts and agent tool audit records
- Contact requests, transactional email delivery logs and security records
How and why data is used
We use personal data to perform the customer contract, provide accounts, answer support questions, record contact requests, execute requested agent tools, manage bookings, verify payments and deliver purchased research. We also use limited records for legitimate security and service-improvement purposes and where necessary to meet legal, accounting or regulatory obligations.
AI and service providers
Relevant data may be processed by Cloudflare and OpenAI Sites for hosting, storage and delivery, Meta model services for text responses, Google for sign-in, Gemini Live and Calendar, Stripe for payments, and Resend for transactional email. Providers receive information needed for their function. Card details remain within Stripe and are not stored by this website.
International processing
These providers may process information outside the UAE or the customer’s location. Transfers are limited to the service purpose and handled through available contractual, organisational and technical safeguards. See the governance notice for the provider and retention map.
Cookies and sessions
The website uses an essential, secure session cookie to keep an authenticated account signed in. It is not used for advertising. Signed-in conversation history is attached to the authenticated account. Before sign-in, limited chat continuity is kept only in the current browser tab and is removed when that tab is closed. Additional third-party cookies may be set by Google or Stripe when their sign-in or payment components are used, subject to their own policies.
Retention and security
Session tokens normally expire after 30 days. Preview and download links expire after 15 minutes. Core transaction records are normally retained for five years; account and business-profile data for the active relationship and up to 24 months after closure; and conversations, voice transcripts, saved facts and agent audits for up to 12 months after last activity. Legal or security needs may require a longer or shorter period. Passwords use a salted one-way derivation and sensitive tokens are stored as hashes.
Your choices and rights
You can use public website content without creating an account, but the research preview requires a verified account email. Microphone access begins only after permission. Subject to applicable law, you may request access, correction or deletion and may object to or restrict certain processing. Marketing permission can be withdrawn at any time. Some transaction records must be retained. Requests can be sent to support@gccdatamatrix.com.
Children and changes
The service is intended for business users and is not directed to children. We may update this policy as providers or product features change. Material changes will be presented prospectively through the website or account experience.