Privacy Policy

1. Who We Are

This Privacy Policy explains how Meraki Designs F.Z.E. ("Meraki Designs," "we," "us," "our"), the operator of Roovideo (the "Service"), collects, uses, shares, and protects personal data. Meraki Designs F.Z.E. is the data controller responsible for your personal data in connection with the Service.

[Registered address and UAE Data Office contact details to be added once finalized.]

2. What Data We Collect

2.1 Account information. Name, email address, password (stored in encrypted/hashed form), account type (e.g., agent, brokerage, developer), and role within your team.

2.2 Content you upload. Property photographs, and the text descriptions you provide to guide video generation.

2.3 Billing information. Payment details are collected and processed directly by our payment processor, Stripe; we do not store your full card details ourselves. We retain records of your subscription plan, billing history, and transaction identifiers.

2.4 Usage data. Information about how you use the Service — such as videos generated, credits consumed, login activity, and general technical data (IP address, browser type, device information).

2.5 Cookies. We use cookies necessary to keep you signed in and to operate the Service securely. We do not currently use cookies for advertising purposes.

3. How We Use Your Data

We use personal data to:

• Provide, operate, and maintain the Service, including generating your requested videos;
• Process payments and manage your subscription;
• Communicate with you about your account, including service updates and support;
• Maintain the security and integrity of the Service, including detecting and preventing fraud or abuse;
• Comply with our legal obligations;
• Improve and develop the Service.

We do not sell your personal data.

4. Legal Basis for Processing

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), we process your personal data on the following bases: performance of our contract with you (providing the Service you signed up for), your consent (where applicable, such as for optional communications), and our legitimate interests in operating and securing the Service, balanced against your rights.

5. How We Share Your Data

We share personal data with the following categories of third-party service providers ("sub-processors"), solely as necessary to operate the Service:

We require our sub-processors to protect personal data consistent with this Policy and applicable law. We do not share your data with third parties for their own independent marketing purposes.

We may also disclose data where required by law, to protect our rights, or in connection with a business transaction (such as a merger or acquisition), subject to appropriate safeguards.

6. International Data Transfers

Some of our sub-processors listed in Section 5 store or process data outside the United Arab Emirates. Under the UAE Personal Data Protection Law, cross-border transfers of personal data are permitted where the receiving jurisdiction offers an adequate level of protection, or where appropriate contractual safeguards (such as Standard Contractual Clauses) are in place with the receiving party. We take steps to ensure our sub-processors provide appropriate safeguards for any personal data transferred outside the UAE.

[This section should be finalized in consultation with legal counsel to confirm the specific safeguard mechanism relied upon for each sub-processor, and to reflect any UAE PDPL Executive Regulations once issued.]

7. Data Retention

We retain your personal data for as long as your account remains active, and for a reasonable period afterward to comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data at any time, subject to Section 9.

8. Your Rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Request deletion of your personal data, subject to legal or legitimate business retention needs;
• Object to or restrict certain processing of your data;
• Data portability, where technically feasible;
• Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

We aim to respond to verified requests within 30 days, in line with UAE Personal Data Protection Law requirements. To exercise these rights, contact us using the details in Section 12.

9. Data Deletion

You may delete individual photographs, or your entire account, through the Service or by contacting us. Deleting your account will remove your personal data from active systems within a reasonable period, except where we are required to retain certain records (such as billing records) for legal or accounting purposes.

10. Security

We use reasonable technical and organizational measures designed to protect your personal data, including encrypted storage of credentials and secure transmission of data. No system is completely secure, and we cannot guarantee absolute security.

11. Children's Privacy

The Service is not directed to, and should not be used by, anyone under the age of 18. We do not knowingly collect personal data from children.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

[PRIVACY/LEGAL EMAIL TO BE ADDED]

Meraki Designs F.Z.E.
United Arab Emirates

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top of this Policy indicates when it was last revised.