Privacy Policy

Effective Date: 1 January 2026

1. Introduction

Xverse Digital ("we", "us", or "our") is committed to protecting the privacy and personal data of every individual who interacts with our website and services. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have in relation to it.

This Policy applies to all visitors and users of our website at https://xverse.digital, including users of AiReady, our free AI readiness diagnostic tool. It has been prepared in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations, as well as other applicable laws of the United Arab Emirates.

By using our website or submitting information through any of our tools or forms, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein.

2. About AiReady

AiReady is a free, no-login AI readiness diagnostic tool offered by Xverse Digital. It consists of 25 structured questions designed to assess an organisation's current readiness to adopt and benefit from artificial intelligence. Upon completion, AiReady instantly generates a personalised report that summarises findings and highlights areas of strength and opportunity.

Because AiReady produces a personalised report, we collect certain information about you and your organisation in order to deliver a meaningful and relevant output. This Privacy Policy governs the collection and use of that information.

Please note: The results and reports generated by AiReady are indicative only. They are based solely on the responses you provide and are intended for general informational purposes. They do not constitute professional, technical, legal, financial, or strategic advice. You should not rely on AiReady results as a substitute for qualified professional guidance tailored to your specific circumstances.

3. Personal Data We Collect

We collect personal data that you voluntarily provide to us, as well as certain data collected automatically when you use our website. The categories of personal data we may collect include:

3.1 Information You Provide Directly

Full name: To personalise your report and any follow-up communications.
Email address: To deliver your AiReady report and, where you request it, to send follow-up information or respond to Deep Dive enquiries.
Phone number: If you choose to provide it, to facilitate follow-up contact in connection with a Deep Dive consultation enquiry.
Company name: To contextualise your diagnostic results and tailor our report to your organisational setting.
Job title: To better understand your role and ensure our communications are relevant and appropriately directed.
Industry: To benchmark your results and provide industry-relevant context within your personalised report.
Assessment responses: Your answers to the 25 AiReady diagnostic questions, which form the basis of your personalised AI readiness report.

3.2 Information Collected Automatically

Usage and analytics data: We use Google Analytics to collect anonymised data about how visitors interact with our website, including pages visited, time spent on site, device type, browser type, and general geographic region. This data does not identify you personally and is used solely to improve the performance and usability of our website.
Cookies and similar technologies: We use cookies to support website functionality and analytics. Please see Section 8 of this Policy for further details.

4. How We Use Your Personal Data

We use the personal data we collect only for the purposes set out below. We will not use your data in any manner that is incompatible with the purpose for which it was originally collected.

To provide the AiReady diagnostic service: We process your name, company name, job title, industry, and assessment responses to generate your personalised AI readiness report and deliver it to you.
To deliver your personalised report: We use your email address to send you your completed AiReady report promptly upon completion of the diagnostic questionnaire.
To follow up on Deep Dive enquiries: If you express interest in a more detailed consultation or a "Deep Dive" engagement with Xverse Digital, we will use your contact details, including your name, email address, and phone number where provided, to respond to and facilitate that enquiry.
To communicate with you: We may use your contact details to send you relevant information about our services, resources, or events where you have given your consent or where we have a legitimate interest in doing so. You may opt out of such communications at any time.
To improve our services: We use aggregated, anonymised usage data and analytics to understand how our tools and website are used, identify areas for improvement, and enhance the overall user experience.
To comply with legal obligations: We may process your data where necessary to comply with applicable UAE laws, regulations, or lawful requests from competent authorities.

5. Legal Basis for Processing

Under the UAE PDPL, we rely on the following legal bases for processing your personal data:

Consent: Where you voluntarily submit your personal data through the AiReady tool or any contact form on our website, you consent to its processing for the purposes described in this Policy. You may withdraw your consent at any time by contacting us using the details in Section 11.
Performance of a service: Processing is necessary to deliver the AiReady diagnostic service and produce your personalised report, which you have requested.
Legitimate interests: We process certain data, such as anonymised analytics, based on our legitimate interest in improving our website and services, provided this does not override your privacy rights.
Legal compliance: We may process data where required to meet our legal obligations under applicable UAE law.

6. Data Sharing and Third Parties

We respect the confidentiality of your personal data. We do not sell, rent, or trade your personal data to third parties. We may share your data in the following limited circumstances:

Google Analytics: We use Google Analytics, a web analytics service provided by Google LLC, to collect and analyse anonymised usage data about visitors to our website. Google Analytics does not receive information that directly identifies you. Data collected through Google Analytics is governed by Google's own privacy policy. You can learn more at https://policies.google.com/privacy.
Service providers: We may engage trusted third-party technology or platform providers who assist us in operating our website, delivering reports, or managing communications. Any such providers are contractually required to process your data only on our instructions and in accordance with applicable data protection laws.
Legal and regulatory requirements: We may disclose your personal data to competent authorities, courts, or regulators where required or permitted by UAE law, or where necessary to protect the legal rights or safety of Xverse Digital or others.

Where we transfer personal data to third parties located outside the UAE, we take appropriate measures to ensure that such transfers comply with the requirements of the UAE PDPL, including ensuring adequate safeguards are in place.

7. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, as described in this Privacy Policy, or as required by applicable law.

AiReady data: Personal data collected through the AiReady tool, including your name, contact details, company information, and assessment responses, will be retained for a period of 24 months from the date of collection, unless you request earlier deletion or we are required by law to retain it for a longer period.
Communication data: Data related to follow-up enquiries and correspondence will be retained for as long as necessary to manage the relationship or enquiry, and for a reasonable period thereafter for record-keeping purposes.
Analytics data: Anonymised usage data collected via Google Analytics is retained in accordance with Google's own data retention policies.

When personal data is no longer required, we will securely delete or anonymise it in accordance with applicable UAE data protection requirements.

8. Cookies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, support website functionality, and gather anonymised analytics data.

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit a website. They help the website recognise your device on subsequent visits and can store certain preferences or information.

8.2 Types of Cookies We Use

Essential cookies: These are necessary for the basic operation of our website. They enable core functions such as page navigation and access to secure areas. The website cannot function properly without these cookies.
Analytics cookies: We use Google Analytics cookies to collect anonymised information about how visitors use our website. These cookies help us understand which pages are most popular, how users navigate the site, and how we can improve the overall experience. The information collected is aggregated and does not identify any individual.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please be aware that disabling certain cookies may affect the functionality of our website. For information on how to manage cookies in your specific browser, please refer to your browser's help documentation.

To opt out of Google Analytics tracking specifically, you may install the Google Analytics Opt-out Browser Add-on, available at https://tools.google.com/dlpage/gaoptout.

9. Data Security

We take the security of your personal data seriously. Xverse Digital implements appropriate technical and organisational measures designed to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction.

Our security measures include, but are not limited to:

Encryption of data in transit using Secure Socket Layer (SSL) / Transport Layer Security (TLS) protocols.
Access controls that restrict personal data to authorised personnel only, on a need-to-know basis.
Regular review of our data handling practices and IT security measures.
Use of reputable, security-compliant third-party service providers.

While we take every reasonable precaution to safeguard your data, no method of transmission over the internet or electronic storage is entirely secure. In the event of a personal data breach that is likely to result in risk to your rights and interests, we will notify you and the relevant UAE regulatory authority as required by the UAE PDPL.

10. Your Rights Under the UAE PDPL

As a data subject under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, you have the following rights in relation to your personal data:

Right of access: You have the right to request a copy of the personal data we hold about you and to receive information about how it is processed.
Right to correction: You have the right to request that we correct any personal data we hold about you that is inaccurate, incomplete, or out of date.
Right to deletion: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is otherwise unlawful, subject to any legal obligations we may have to retain certain data.
Right to withdraw consent: Where our processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to restrict processing: In certain circumstances, you may have the right to request that we limit the way we process your personal data.
Right to object: You may object to our processing of your personal data where we rely on legitimate interests as our legal basis, subject to our demonstrating compelling legitimate grounds that override your interests.
Right to data portability: Where technically feasible and required by applicable law, you may request that we provide your personal data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us using the details provided in Section 11 below. We will respond to all valid requests within a reasonable timeframe and in accordance with our obligations under the UAE PDPL. We may need to verify your identity before processing your request.

If you are not satisfied with our response, you have the right to lodge a complaint with the relevant UAE data protection authority.

11. Disclaimer: AiReady Results Are Indicative Only

The personalised reports and diagnostic outputs generated by AiReady are based entirely on the responses you submit during the 25-question assessment. These results are intended to provide a general, high-level indication of your organisation's AI readiness and are for informational purposes only.

AiReady results do not constitute professional advice of any kind, including but not limited to strategic, technical, operational, legal, or financial advice. Xverse Digital makes no representations or warranties, express or implied, as to the accuracy, completeness, or fitness for purpose of any report generated by AiReady.

You should always seek the advice of qualified professionals before making decisions based on any assessment or diagnostic result. Xverse Digital accepts no liability for any decisions made or actions taken in reliance on the outputs of the AiReady tool.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or applicable law. When we make material changes, we will update the Effective Date at the top of this page and, where appropriate, notify you by email or through a notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data. Your continued use of our website or services following any update constitutes your acceptance of the revised Policy.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please do not hesitate to contact us. We are committed to addressing your enquiries promptly and transparently.

Company: Xverse Digital
Website: https://xverse.digital
Email: hello@xverse.digital
Jurisdiction: Dubai, United Arab Emirates

All privacy-related requests, including requests to access, correct, or delete your personal data, should be submitted in writing to the email address above. Please include sufficient detail to allow us to identify you and respond to your request effectively.