1. Who we are
samsoom.ai is operated by Adoomi Limited, a company established in the United Arab Emirates and trading as Samsoom AI. Adoomi Limited trading as Samsoom AI is the controller responsible for the personal information described in this notice.
Business and service location:Abu Dhabi, United Arab Emirates
Privacy contact: [email protected]
2. Information we handle
Project enquiries
The enquiry form can send your name, email address, company or website, support type, timeline, project context and budget range to our Cloudflare Pages Function. The function validates the request and uses Resend to deliver it to our Google Workspace inbox. If online sending is unavailable, you can contact us directly by email instead.
Website delivery and security
Cloudflare may process ordinary connection and security information needed to deliver and protect the site, such as an IP address, request time, requested URL, browser information and security signals.
Privacy-safe conversion measurement
Cloudflare Web Analytics helps us understand aggregate production-site traffic and performance without using cookies or collecting personal data for this service. It does not receive your enquiry form answers.
We also offer optional Google Analytics measurement on the production website. Google Analytics is not loaded unless you select Accept analytics. If accepted, our integration sends an approved event name, limited categorical context and the page pathname without query parameters or form content. Advertising features and Google signals are disabled. Preview and local-review sites do not send analytics events.
To reduce automated abuse, Cloudflare KV holds a short-lived counter keyed by a hashed combination of connection and browser information. It does not contain your enquiry. The counter expires within 11 minutes.
Information from later conversations
If you continue a discussion, we may receive the information you put in emails, documents, meeting notes or an agreed proposal. Please avoid sending special-category or confidential personal information unless it is necessary and we have agreed an appropriate way to receive it.
Payments and billing
When a business customer uses a Stripe-hosted checkout, invoice or billing portal, Stripe collects the payment method, billing address and any tax identification details entered there. We receive the customer and transaction identifiers, business and billing details, subscription or invoice status, currency, amounts and payment outcome needed to administer the service. We do not receive the full card number.
3. Why we use information
| Purpose | Information | Lawful basis |
|---|---|---|
| Assess and respond to a project enquiry | Your enquiry and follow-up communications | Your request and, where applicable, processing needed to take steps before entering or performing a contract |
| Manage business communications and decide whether a project is a suitable fit | Your enquiry, correspondence and relevant project context | Our legitimate business interests in responding to genuine enquiries, where recognised by applicable law |
| Deliver, secure and troubleshoot the website | Connection, request and security information | Processing needed to provide, protect and troubleshoot the website you requested |
| Administer a customer order, payment, subscription or invoice | Business, billing, transaction and service records | Processing needed to enter or perform the business contract and meet applicable legal obligations |
We do not use enquiry information for automated decisions that have legal or similarly significant effects. We do not add an enquirer to a marketing list merely because they contacted us.
4. Providers, disclosures and international transfers
We use the following providers for the current website and enquiry flow:
- Cloudflare for static website hosting, delivery, security and privacy-first aggregate Web Analytics.
- Resend for transactional delivery of an accepted enquiry email.
- Google Workspace for receiving and managing email.
- Google Analytics for consented production-site page and conversion measurement.
- Stripe for hosted checkout, invoicing, payment processing, subscriptions and billing support.
These providers may process information in more than one country. Where a cross-border transfer requires protection, we use the safeguards available under applicable law and the provider's data-processing terms. You can ask us for further information about safeguards relevant to your information.
We may also disclose information where required by law or where reasonably necessary to establish, exercise or defend legal claims. We do not sell personal information.
5. How long we keep information
If an enquiry does not proceed, we normally delete its content within 30 days of the last meaningful contact. You may ask us to delete it sooner, subject to any reason we must keep it.
The hashed rate-limit counter expires within 11 minutes. It is kept separately from enquiry content and is used only for abuse prevention.
If an enquiry becomes an active proposal or contract, necessary contractual, service, accounting, tax or dispute records may be kept separately for the applicable legal and operational period. We remove or anonymise information when it is no longer needed for those purposes.
6. Your rights and complaints
The UAE Personal Data Protection Law and other laws that apply to you may provide rights to obtain information about processing, access or receive a copy of personal data, correct inaccurate data, request deletion or restriction, object to certain processing, withdraw consent where consent is used, and ask for certain data in a portable form. These rights can depend on the circumstances and lawful exceptions.
Your right to object: you may object to processing based on legitimate interests. Tell us why you object and we will review whether there are overriding grounds to continue.
To exercise a right or raise a concern, email [email protected]. You may also contact the competent data-protection authority where applicable.
7. Cookies, children and changes
Cloudflare Web Analytics does not set analytics cookies. Google Analytics
may set _ga and related _ga_* cookies only after
you accept optional analytics. We store your choice in browser storage so
we can respect it. Select Analytics settings in the footer
at any time to change or withdraw your choice. Declining does not affect
access to the site.
Google Analytics advertising storage, ad personalisation and Google signals remain disabled. We do not enable advertising tracking, remarketing, session replay or form-content capture. Preview and local-review builds keep optional analytics disabled.
Our services are intended for business enquiries and are not directed at children. We may update this notice when the website, providers or legal requirements change. The date at the top shows the latest review.