Your data, clearly explained

Privacy Policy

Last updated: June 30, 2026

1. Introduction

Construct Flow Information Technology FZCO ("Company", "we", "us") operates the Soloist platform ("Platform") at soloist.ae. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our Platform.

We are committed to protecting your privacy in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and applicable data protection regulations.

2. Data We Collect

From Service Providers:

  • Account information: name, email address, phone number
  • Business information: business name, category, location, service descriptions
  • Payment information: processed securely through Stripe (we do not store card details)
  • Communication preferences and notification settings
  • Usage data: login times, feature usage, booking activity

From Clients (Booking Visitors):

  • Booking information: name, phone number, email address
  • Appointment details: selected service, date, time, notes
  • Payment information: processed securely through Stripe when applicable
  • Communication data: messages sent through integrated channels (WhatsApp, Instagram, Messenger)

Automatically Collected:

  • Device information: browser type, operating system, screen resolution
  • Usage data: pages visited, features used, session duration
  • IP address and approximate geographic location

3. How We Use Your Data

We use collected data for the following purposes:

  • Providing and operating the Platform services
  • Processing bookings and facilitating communication between providers and clients
  • Processing subscription payments and client transactions
  • Sending transactional notifications (booking confirmations, reminders, cancellations)
  • Operating the AI agent to assist with booking conversations on behalf of providers
  • Improving Platform features, performance, and user experience
  • Preventing fraud, abuse, and ensuring platform security
  • Complying with legal obligations

4. Legal Basis for Processing

We process personal data based on:

  • Contract performance: Processing necessary to provide Platform services you have subscribed to.
  • Legitimate interest: Platform improvement, security, and fraud prevention.
  • Consent: Marketing communications and optional data processing (you may withdraw consent at any time).
  • Legal obligation: Compliance with UAE laws, tax regulations, and court orders.

5. Data Sharing

We share personal data only in the following circumstances:

  • Between providers and clients: Booking details are shared between the service provider and the client who made the booking.
  • Payment processors: Stripe processes payment data under their own privacy policy.
  • Messaging platforms: Meta (WhatsApp, Instagram, Messenger) processes messages under their data policies when providers enable these channels.
  • AI services: Conversation data is processed by our AI provider to generate responses on behalf of providers.
  • Legal requirements: When required by UAE law, court order, or regulatory authority.

We do not sell personal data to third parties. We do not share data for advertising purposes.

6. Data Storage and Security

Your data is stored on secure cloud infrastructure. We implement appropriate technical and organizational measures to protect personal data, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Access controls and authentication requirements
  • Regular security assessments and monitoring
  • Secure payment processing through PCI-DSS compliant providers (Stripe)

7. Data Retention

We retain personal data for the following periods:

  • Active accounts: Data is retained while your account is active and for 30 days after account deletion.
  • Booking records: Retained for 2 years after the booking date for dispute resolution and business records.
  • Payment records: Retained for 5 years as required by UAE financial regulations.
  • Communication logs: Retained for 1 year after the last interaction.

8. Your Rights

Under the UAE PDPL, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data (subject to legal retention requirements).
  • Restriction: Request restriction of processing in certain circumstances.
  • Data portability: Request your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interest.
  • Withdraw consent: Withdraw previously given consent at any time.

To exercise any of these rights, contact us at hello@soloist.ae. We will respond within 30 days.

9. How to Delete Your Data

You can request deletion of your account and personal data at any time:

  • By email: send a request to hello@soloist.ae from your registered email address with the subject "Data deletion request". We will confirm receipt and complete the deletion within 30 days.
  • Providers: you may also request account closure from your dashboard settings; your data is deleted 30 days after closure per our retention schedule above.
  • Clients: if your data was collected through a provider's booking page, we will process your request and notify the provider where required.
  • What is retained: records we must keep under UAE law (for example payment records, retained 5 years) are excluded from deletion until their legal retention period ends.

You can request an export of your data before deletion.

10. Cookies and Tracking

The Platform uses essential cookies for authentication and session management. These are strictly necessary for the Platform to function and cannot be disabled.

We may use analytics tools to understand how the Platform is used. These tools collect anonymized usage data and do not track individual users across other websites.

11. International Data Transfers

Your data may be processed on servers located outside the UAE. When data is transferred internationally, we ensure appropriate safeguards are in place in accordance with UAE data protection requirements, including contractual protections with our service providers.

12. Children's Privacy

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Platform. The "Last updated" date at the top of this page indicates when the policy was last revised.

14. Contact Us

For questions about this Privacy Policy or to exercise your data rights, contact us at:

Construct Flow Information Technology FZCO
Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
Phone: +971 50 149 3663
Email: hello@soloist.ae