CloudQonnect

    Privacy Policy

    How we collect, use and protect your information.

    Last updated: June 2026

    This Privacy Policy explains how CloudQonnect — a SaaS platform developed and operated by Solid Automai Solutions – FZCO (trading as AutomAI) — collects, uses, stores, and protects personal data in connection with the CloudQonnect platform and its services.

    CloudQonnect is a B2B platform. Our direct customers are businesses ("Clients") who use CloudQonnect to manage their own contacts, leads, and customers ("End Users"). This policy governs how we handle both Client data and any personal data belonging to End Users that is processed through the platform.

    We are committed to handling all personal data responsibly and in compliance with applicable law, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) and, where applicable, the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).

    Questions? Contact us at info@automai.io.

    1. Who We Are (Data Controller & Processor)

    CloudQonnect is operated by:

    Solid Automai Solutions – FZCO (trading as AutomAI)
    IFZA Business Park, Unit 79964-001, Building A1
    Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE
    Email: info@automai.io
    Website: cloudqonnect.com

    Our role under data protection law depends on the context:

    • Data Controller: for data we collect directly from Clients (e.g. account registration data, billing information, and platform usage data), we act as the data controller and determine the purposes and means of processing.
    • Data Processor: for personal data that Clients import into CloudQonnect about their own End Users (e.g. CRM contacts, leads, customers), we act as a data processor, processing that data on the Client's behalf and only as instructed. In this case, the Client is the data controller and is responsible for ensuring they have the appropriate legal basis to process and share that data with us.

    Where required, we enter into a Data Processing Agreement (DPA) with Clients to formalise this relationship. Please contact info@automai.io to request a DPA.

    2. Scope of This Policy

    This policy applies to:

    • Businesses and individuals who register for or use CloudQonnect (Clients);
    • Authorised users within a Client's organisation who access the platform;
    • Personal data of End Users (contacts, leads, and customers) that Clients upload or process through the platform;
    • Visitors to cloudqonnect.com.

    This policy does not apply to the automai.io website, which is governed by the AutomAI Privacy Policy (available at automai.io/privacy-policy). Where CloudQonnect is used as part of an AutomAI service delivery engagement, both policies may apply.

    3. What Personal Data We Collect

    3.1 Client Account Data

    Data you provide when signing up and managing your account

    When you register for CloudQonnect or manage your account, we collect:

    • Full name and job title
    • Business name and address
    • Email address and phone number
    • Billing address and payment details (processed securely via our payment provider)
    • Login credentials (passwords are encrypted and never stored in plain text)
    • Subscription and plan information

    3.2 Platform Usage Data

    Data generated as you use CloudQonnect

    As you use the platform, we may collect:

    • Feature usage and activity logs (e.g. workflows created, emails sent, automations triggered)
    • Log data including IP address, browser type, device information, and session timestamps
    • Support communications and ticket history
    • Configuration settings and preferences

    This data is used to operate, maintain, and improve the platform, to provide technical support, and to analyse usage patterns in aggregate.

    3.3 End User Data (Processed on Behalf of Clients)

    Data about your contacts, leads, and customers stored in CloudQonnect

    CloudQonnect is a CRM and marketing platform. Clients use it to store and manage data about their own contacts, leads, and customers. This may include:

    • Names, email addresses, and phone numbers
    • Company information and job titles
    • Communication history (emails, SMS, WhatsApp, chat logs)
    • Notes, tags, and custom fields added by the Client
    • Behavioural data such as website visits, form submissions, and email engagement
    • Appointment and booking history
    • Invoice and transaction records

    We process this data solely on behalf of and as instructed by the Client. Clients are responsible for ensuring they have the appropriate legal basis (e.g. consent or legitimate interest) to collect and process their End Users' data, and to share it with CloudQonnect.

    3.4 AI-Generated & Automated Processing Data

    Data processed by AI features within the platform

    CloudQonnect includes AI agent and workflow automation features. These may process personal data (such as contact information or communication content) to execute automated tasks on behalf of the Client. All AI-assisted processing within CloudQonnect is governed by the Client's instructions and subject to human oversight. We do not use Client or End User data to train AI models without explicit consent.

    3.5 Website Visitor Data (cloudqonnect.com)

    When you visit cloudqonnect.com, we may automatically collect technical data such as IP address, browser type, pages visited, and referring URL. This is used for website performance and analytics purposes only.

    4. How We Use Personal Data

    We use personal data for the following purposes:

    • Providing, operating, and maintaining the CloudQonnect platform;
    • Managing Client accounts, subscriptions, billing, and support;
    • Sending transactional communications (e.g. invoices, platform updates, security alerts);
    • Sending product and feature updates or marketing communications to Clients, where permitted;
    • Analysing platform usage in aggregate to improve performance and develop new features;
    • Complying with legal and regulatory obligations;
    • Processing End User data on behalf of Clients, strictly as instructed by the Client.

    We do not use End User data for our own marketing purposes, and we do not sell any personal data to third parties.

    5. Legal Basis for Processing

    Under the UAE PDPL and GDPR (where applicable), we rely on the following legal bases:

    • Performance of a contract: to provide CloudQonnect services to Clients under our subscription agreement;
    • Legitimate interests: for platform improvement, security monitoring, fraud prevention, and B2B marketing communications to Clients — balanced against Client rights;
    • Legal obligation: where processing is required to comply with applicable law (e.g. tax records, legal proceedings);
    • Consent: for optional communications or specific processing activities where we have requested and received your agreement.

    For End User data processed on behalf of Clients: the Client determines the legal basis. We process that data under contract (the Data Processing Agreement) at the Client's direction.

    6. Data Retention

    We retain personal data only for as long as necessary for the purpose it was collected, or as required by law:

    • Client account data: retained for the duration of the subscription and for 12 months following account closure, after which it is securely deleted or anonymised, unless a longer period is required by law;
    • Billing and financial records: retained for 7 years in accordance with UAE tax and accounting regulations;
    • End User data (Client CRM data): retained in line with the Client's instructions and subscription. Upon account termination, Clients have 30 days to export their data before it is permanently deleted from our systems;
    • Platform usage logs and analytics: retained for up to 24 months, then anonymised or deleted;
    • Support communications: retained for up to 3 years from the date of resolution.

    7. Who We Share Data With

    We do not sell personal data. We share it only as described below:

    7.1 Sub-processors

    Third-party providers who process data on our behalf

    CloudQonnect platform infrastructure relies on cloud technology providers who act as our technology sub-processors. Sub-processors include:

    • Core platform infrastructure, data hosting, and communication services;
    • Payment processors (for subscription billing — specific provider disclosed at checkout);
    • Email and SMS delivery providers (for transactional platform notifications);
    • Analytics and monitoring tools (for platform performance and error tracking, using anonymised or aggregated data where possible).

    All sub-processors are bound by data processing agreements and are required to maintain data protection standards equivalent to our own. A current list of sub-processors is available on request at info@automai.io.

    7.2 Clients

    Client users within the same account can access the data stored in that account in accordance with the roles and permissions set by the account administrator. We do not share one Client's data with another Client.

    7.3 Legal Requirements

    We may disclose personal data to authorities or third parties when required by law, court order, or to protect our legal rights and those of our Clients.

    7.4 Business Transfers

    In the event of a merger, acquisition, or sale of business assets, personal data held by CloudQonnect may be transferred as part of that transaction. Affected Clients will be notified in advance where required by law, and the new entity will be required to honour this policy or notify you of any changes.

    8. International Data Transfers

    CloudQonnect is operated from the UAE, and data may be processed by our sub-processors in various countries, including the United States and the EU. When personal data is transferred internationally, we ensure appropriate safeguards are in place:

    • For transfers from the EU/EEA: we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other appropriate transfer mechanisms;
    • For transfers out of the UAE: we comply with UAE PDPL transfer requirements, ensuring the destination country provides adequate protection or that appropriate contractual safeguards apply.

    Clients who have specific data residency requirements should contact us at info@automai.io before subscribing to confirm whether those requirements can be accommodated.

    9. Data Security

    We take the security of your data and your End Users' data seriously. Our security measures include:

    • HTTPS/TLS encryption for all data in transit;
    • Encryption of data at rest on platform infrastructure;
    • Role-based access controls limiting who can access data within the platform and within our team;
    • Regular security monitoring and vulnerability assessments;
    • Contractual security obligations on all sub-processors.

    In the event of a data breach affecting Client or End User data, we will notify affected Clients without undue delay and, where required by law, within 72 hours of becoming aware of the breach. Clients are responsible for notifying their own End Users where required.

    10. Your Rights

    10.1 Client Rights

    As a Client (data subject under your own account), you have the following rights under the UAE PDPL and GDPR (where applicable):

    • Right to access: request a copy of the personal data we hold about your account;
    • Right to rectification: request correction of inaccurate account data;
    • Right to erasure: request deletion of your account data (subject to legal retention obligations);
    • Right to restriction: request we limit processing in certain circumstances;
    • Right to data portability: receive your account data in a structured, machine-readable format;
    • Right to object: object to processing based on legitimate interests;
    • Right to withdraw consent: where processing is consent-based, withdraw at any time.

    To exercise these rights, contact us at info@automai.io. We will respond within 30 days.

    10.2 End User Rights

    If you are an End User (a contact stored in a Client's CloudQonnect account) and wish to exercise your data rights, you should contact the Client directly, as they are the data controller for your data. If you cannot reach the Client or believe your rights are being violated, you may contact us at info@automai.io and we will do our best to assist or direct you to the appropriate party.

    11. Cookies

    The cloudqonnect.com website uses strictly necessary cookies to function, and may use analytics cookies to understand website usage. You can manage cookie preferences through your browser settings. The CloudQonnect platform application may also use session cookies required for authentication and platform functionality.

    12. Children's Privacy

    CloudQonnect is a B2B platform intended solely for use by businesses and business professionals. It is not directed at, and should not be used to process data belonging to, children under the age of 16. If we become aware that a child's personal data has been processed through the platform, we will take steps to delete it promptly. Clients are responsible for ensuring they do not use CloudQonnect to process data about children without the appropriate legal safeguards in place.

    13. Client Responsibilities

    As the data controller for End User data processed through CloudQonnect, Clients are responsible for:

    • Ensuring they have a valid legal basis (e.g. consent or legitimate interest) for collecting and processing End User data;
    • Providing their End Users with appropriate privacy notices explaining how their data will be used, including its processing via CloudQonnect;
    • Complying with applicable data protection law in their jurisdiction, including GDPR where relevant;
    • Ensuring that any data imported into CloudQonnect has been collected lawfully;
    • Promptly notifying their End Users of any data breaches that affect them, as required by law.

    AutomAI is not responsible for Clients' compliance with their own data protection obligations. We provide the platform; Clients are accountable for how they use it.

    14. Automated Decision-Making

    CloudQonnect includes workflow automation and AI agent features that may take automated actions based on predefined rules set by the Client (e.g. sending a follow-up email when a lead fills in a form). These automations are configured and controlled by the Client. AutomAI does not make independent automated decisions about End Users that produce legal or similarly significant effects. Any AI-assisted features within the platform are tools that operate under the Client's instructions and configuration.

    15. Relationship with the AutomAI Privacy Policy

    CloudQonnect is a product of AutomAI (Solid Automai Solutions – FZCO). If you are also a client of AutomAI's agency services (e.g. marketing automation builds, consultancy, or Creative AI Studio), the AutomAI Privacy Policy at automai.io/privacy-policy also applies to personal data processed in that context. Where both policies apply, this CloudQonnect Privacy Policy governs data processed specifically within the CloudQonnect platform.

    16. Changes to This Policy

    We may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or our data practices. When we make material changes, we will update the date at the top of this page and notify active Clients by email or via an in-platform notification where required.

    The current version is always available at cloudqonnect.com. Continued use of CloudQonnect after updated Terms are posted constitutes acceptance of the revised policy.

    17. Contact Us & Supervisory Authorities

    For any questions, requests, or complaints relating to this Privacy Policy or how we handle data in CloudQonnect, please contact us first:

    AutomAI — Solid Automai Solutions – FZCO
    IFZA Business Park, Unit 79964-001, Building A1
    Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE
    Email: info@automai.io
    Website: cloudqonnect.com

    If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority: