Privacy Policy

1. Introduction

Plainsurf LLC FZ (“we”, “us”, or “our”) operates the SecureLens platform accessible at app.securelens.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We may collect the following types of information:

• Account Information: Name, email address, company name, and role when you register.
• Usage Data: Log files, IP addresses, browser type, pages visited, and actions taken within the platform.
• Customer Data: Data you upload or connect to the Service for governance purposes. We process this data solely on your behalf.
• Payment Information: Processed securely via third-party payment processors; we do not store card details.
• Communication Data: Emails, support tickets, and feedback you send us.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process transactions and send related communications.
• Send technical notices, updates, and security alerts.
• Respond to support requests and answer questions.
• Monitor usage patterns and analyze platform performance.
• Comply with legal obligations and enforce our Terms of Service.

4. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to maintain sessions, remember preferences, and analyze usage. You can control cookie settings through your browser. Essential cookies required for the Service to function cannot be disabled.

Types of cookies we use:

• Strictly Necessary: Required for authentication and security.
• Analytics: Help us understand how the Service is used (anonymized).
• Preferences: Remember your settings like theme and language.

5. Data Sharing & Disclosure

We do not sell your personal data. We may share information with:

• Service Providers: Third parties who assist in operating the platform (cloud infrastructure, payment processing, analytics).
• Legal Requirements: When required by law, court order, or governmental authority.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.

6. GDPR & Your Rights (EEA/UK Residents)

If you are located in the European Economic Area or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your personal data.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request restriction of processing in certain circumstances.

To exercise these rights, contact us at privacy@securelens.ai.

7. CCPA (California Residents)

California residents have the right to know what personal information we collect, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@securelens.ai.

8. UAE PDPL

As a UAE-based company, we comply with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Data subjects in the UAE may contact us to exercise their rights under the PDPL at privacy@securelens.ai.

9. Data Retention

We retain personal data for as long as necessary to provide the Service and comply with legal obligations. Account data is retained until your account is deleted or for a maximum of 5 years after account termination, unless a longer period is required by law.

10. Data Security

We implement industry-standard security measures including encryption at rest and in transit, access controls, regular security audits, and SOC 2-aligned infrastructure. However, no method of transmission or storage is 100% secure.

11. International Data Transfers

We operate with multi-region infrastructure in the EU, US, and GCC. Data transfers outside your region are conducted using appropriate safeguards including Standard Contractual Clauses (SCCs) and adequacy decisions.

12. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Service at least 30 days before the changes take effect.

14. Contact Us

For privacy-related inquiries, please contact our Data Protection Officer at: