Privacy Policy

In force from 2 Nov 2026

Updated 2 Nov 2026: what changed. Section 2 adds your answers to the questions on our booking form, and two emails we do not track: the one that sends your report link again and the one that confirms a new account. Section 6 adds that our server tells Meta when you book a call.

Updated 1 Nov 2026: what changed. Section 6 says Meta may use the pages you opened and the buttons you pressed on named.ae to decide whether to show you our adverts.

Updated 29 Oct 2026: what changed. Section 6 adds that our server also tells Google and Meta when you go to the payment page, only if you allowed analytics and ads.

Updated 28 Oct 2026: what changed. Section 2 adds what you and our team see when you share your report, the optional name of someone who ticks a move on a shared report, and that a shared link shows your score unless you switch it off, and section 6 says our team uses email opens to choose which enquiries to answer first.

Updated 26 Oct 2026: what changed. Section 2 adds WhatsApp, share links, saved reports and the free-scan limit. Sections 3, 4, 5 and 6 add adverts shown again on Facebook and Instagram to people who visited us. Section 4 adds WhatsApp. Section 5 says who else can see a saved report. Section 6 adds the device type and advert in our own step counts. Section 7 says where our team works. Section 10 adds WhatsApp chats. Section 12: we now tell you about changes by email or with a notice on our website.

1.Who is responsible

named.ae is operated by DIVINE API LABS - FZCO, a free zone company registered in Dubai, United Arab Emirates. We are the controller of the personal data described here. Reach us at support@named.ae.

2.What we collect

  • Account data: your email address, your name if you give it, and a password hash (never the password itself).
  • Your website domain and publicly available content we crawl from it to build your brand profile.
  • Scan results: the questions asked, the AI platforms' responses, and the scores and mentions we derive from them.
  • Billing records: your plan, invoices and payment status. Card details go directly to our payment provider and never touch our servers.
  • Billing details: the legal name, street address, city, postal code, country, tax number and invoice email you give us on the billing details page. We keep them and send them to our payment provider, which prints them on your invoices.
  • What you type in our forms: when you book a call, ask for a service or send us a message, we keep your name, email, your phone number if you give it, your company or website, and the text of your message, and your answers to the questions on the form.
  • Call recordings: if you agree at the start of a demo or service call, we record it (sound and video) in the meeting tool you chose, to keep notes of what we agreed. If you say no, we do not record.
  • Free scans: the website you enter, the questions asked, your email address if you give it, and how you found us: the campaign tags in the link, the advert's click id, the site that linked to us and the first page you opened. We keep the same for your account, so we know which advert or post brought you.
  • If a site was scanned in the last 30 days and someone types it again, we show them the same saved report, and they can open its moves with their own email. Nothing about the person who ran it first is shown. A paying customer's own Action Plan is never shown to anyone else.
  • Share links: if you press Share on your report, your messaging app or LinkedIn opens with a link and a short text we wrote. The app you chose may read the page's title and a one-line summary (your website's name and your score, unless you switched the score off; a task link for your web person shows no score) to show a preview. We record which share button was pressed, never who you sent it to. A private share link ends after 90 days; a plain report link does not.
  • Shared reports: if you share your report, you see how often your link was opened (never who opened it) and which moves were ticked on it, and our team sees the same counts on your account. If someone shares their report with you and you tick a move, you may give your name; it is optional, it is shown only to the person who shared the link, and we use it for nothing else.
  • Your cookie choice: when you are logged in, or when you keep a report with your email address, we record whether you allowed analytics and ads, and when. If you allowed them, we also keep the Google Analytics identifier that your browser already has.
  • Email activity: whether an email we sent was delivered, and any reply you send us. We record when you open an email from us and which links in it you click. Our email provider does this with a small image in the email and by sending each link through its own address first. Emails with a log-in code, a password code, an invitation link, a booking link or a payment link are not tracked. These emails are not tracked either: the email that confirms a message you sent us from our website, the email that sends your report link again, the email that confirms a new account, a personal note from us, and the email that says your account is closed or your data is deleted.
  • WhatsApp: if you choose to message us on WhatsApp, we receive your phone number, your WhatsApp name and picture, and the messages you send. A person from our team reads them and writes every reply by hand. We never add you to a list, send you broadcasts or call you on WhatsApp.
  • IP address: we store your IP address with each free scan, each email code we send you and each new account, and in the free-scan event log (for example when a report is unlocked), so that we can limit scans and sign-ups and stop abuse. These IP addresses are kept as long as those records are kept (section 10).
  • To stop misuse, we count free scans per browser and per internet connection (IP address), and allow 3 a day.
  • Technical logs: IP address, browser type and the pages requested, in our server logs, for security and to keep the service working.

3.Why we use it

  • To provide the service you signed up for: running scans, building reports, billing you. This is performance of our contract with you.
  • To keep the service safe and working: preventing abuse, fixing errors, enforcing scan limits. This is our legitimate interest.
  • To measure our own advertising, and to show our adverts again on Facebook and Instagram to people who visited our website. If you visit from the United Kingdom, the European Union, Iceland, Liechtenstein, Norway or Switzerland, we do this only with your consent. Everywhere else, we do it from your first page as our legitimate interest in reaching businesses that already looked at named.ae, and you can say no at any time (section 6).
  • To send you product and marketing emails, only with your consent, which you can withdraw at any time. Transactional emails (codes, receipts, password resets, your requested reports and one personal email from our team about your report) are sent regardless, because the service cannot work without them.

4.Who processes data for us

To run the service we use these providers. Most process data only on our instructions and only for the purpose shown. WhatsApp, Google and Meta also use it under their own terms, as each row says.

OpenAI · Anthropic · Google · Perplexity · xAIthe AI platforms we measure; receive your brand profile and questions
Anthropic · OpenAIalso help our team write replies and account emails: they receive the text of the message you sent us and the facts the reply needs (your report: the website, the AI answers and the moves; and for an account, the plan, invoices and renewal date), never your password or card. When our team answers a message you send us, a person checks the answer before it goes out. Some short emails can go out automatically, from templates we have approved and without a person checking each one: the note about your report after you give us your email, one reminder about your report about a week later if you have not replied, and the note telling you when we will answer a message sent outside working hours. The main text of our other emails (your report emails, account emails and, if you agreed to them, tips emails) may be written by AI for you from your report, inside a fixed layout, and is checked by our software, not by a person.
SerperGoogle search results: your questions in Google, and which pages of your website Google lists; receives your questions, your market and your website address
Railwayhosting and database, servers in Singapore
Google Meet · Zoom · Microsoft Teamsthe video call tool you choose for a demo or service call; it holds the recording if you agreed to one
Stripepayments, invoices, card storage; receives your billing details (legal name, address, tax number and invoice email)
Postmark (ActiveCampaign)sending our emails, recording opens and clicks, and receiving your replies
WhatsApp (Meta)carries the chat if you choose to message us on WhatsApp. WhatsApp handles this under its own terms and privacy policy (whatsapp.com/legal); messages are end-to-end encrypted between your phone and ours.
Cloudflaredomain, network security, forwarding of mail sent to support@named.ae
Sentryerror reports when something breaks: the technical fault, the values in our code at that moment and your account id. Those values can include your website, your questions, your scores and your billing details; never your password or card
Google Tag Manager · Google Analyticsanalytics: from your first page outside the UK, the EU and Switzerland unless you choose "Essential only"; inside them only after you allow it (section 6)
Meta Platformsmeasurement of our own ads on Facebook and Instagram, and showing our adverts again to people who visited us: the Meta Pixel in your browser and the started-scan message from our server, from your first page outside the UK, the EU and Switzerland unless you choose "Essential only"; the purchase message, and everything inside the UK, the EU and Switzerland, only after you allow it (section 6)
LinkedInmeasurement of our own ads on LinkedIn, loaded only after you allow it (section 6)
Microsoft Clarityrecordings of how our public pages are used, loaded only after you allow it (section 6); never in the product after you log in

Only what is needed for each job is shared. The AI platforms receive your brand profile and buyer questions when we scan; they never receive your password or card details.

5.Our promises

✓We never train AI models on your data.

✓We never sell your data to advertisers or data brokers. Google and Meta learn that a visit happened and which of our own ads brought it, so we can measure our advertising and, for Meta, show our adverts again to people who visited us: outside the UK, the EU and Switzerland unless you choose "Essential only", and inside them only if you allow it. LinkedIn learns this only if you allow analytics and ads. They never receive your scan results or billing details. The only account details they can receive are the hashed account number and the hashed email address described in section 6, and only with your permission.

✓Your scan results are yours. A report about a website can also be seen by anyone who types that website within 30 days of the scan (section 2).

6.Cookies and analytics

Essential cookies and browser storage keep you logged in, remember your theme, record your cookie choice and count your free scans; they are always set. What happens depends on where you visit from.

In the United Kingdom, the European Union, Iceland, Liechtenstein, Norway and Switzerland: analytics and ad measurement (Google Analytics, the Meta Pixel and the LinkedIn Insight Tag through Google Tag Manager, and Microsoft Clarity) load only after you press "Allow analytics and ads" on the cookie bar. Before that, no analytics or advertising script is loaded and no analytics or advertising cookie is set.

Everywhere else: Google Analytics and the Meta Pixel load from your first page and set their cookies, and a short notice tells you so. Press "Essential only" on the notice, or in "Cookie settings" at the bottom of any page, and they stop from the next page you open; if you chose "Essential only" before, that choice stays. The LinkedIn Insight Tag and Microsoft Clarity still load only after you press "Allow analytics and ads" in Cookie settings.

We decide where you visit from by the time zone your browser reports. If we cannot tell, we treat you as a visitor from the United Kingdom or the European Union.

Microsoft Clarity records how our public pages are used; your report's numbers are masked, and it never runs in the product after you log in. The fonts on our pages come from our own server. Declining keeps the site fully functional. Your choice is stored in your browser and, when you are logged in or keep a report, with your account or your report. To change it, press "Cookie settings" at the bottom of this page; the cookie bar then asks you again. The new choice applies from the next page you open.

Our emails record whether they were opened and which link was pressed, so we send fewer of them and our team can see which enquiries to answer first. Our server keeps the campaign and the referring site in the essential session cookie. On our home page, the scan pages and the free report, our own server also records the steps visitors take: which page was opened, how far down it was read, how long it stayed open, which button or section was pressed, whether you use a phone, a tablet or a computer, and, on the home page, which of our adverts brought you. It does this without any cookie, without storing anything in your browser, and without keeping your IP address, the name or version of your browser, any number that follows you, or anything you type. We keep these records for 13 months and use them only to count which steps work, never to identify you. We never send them to Google, Meta, LinkedIn or anyone else. If you choose "Essential only", we do not record your steps.

Our server also tells Meta when a scan is started and when you book a call: outside the UK, the EU and Switzerland unless you chose "Essential only", inside them only if you allowed analytics and ads. If you allow analytics and ads, it also tells Google Analytics and Meta when you go to the payment page for a plan and when a purchase is made. This way an advert that led to a scan or a sale is counted even when your browser blocked the tag. When you start a scan, Meta receives the time, the page address, the Meta identifiers your browser already has (including the advert click number if you came from one of our adverts), your IP address and your browser type, and whether you pressed “Allow analytics and ads”; never your email, your website or your score. When you book a call, Meta receives the same, and never your name, your email or your answers to the form. When you go to the payment page or buy, Google receives the amount, the plan and the Google Analytics identifier that your browser already has, and Meta receives the amount, the plan and a one-way hash of your account number. We never send any of them if you chose "Essential only". Inside the UK, the EU and Switzerland we also never send them if you did not answer, and we never send the payment-page or purchase messages anywhere without "Allow analytics and ads".

Meta may also use the named.ae pages you opened and the buttons you pressed there (for example that you ran a scan, opened your report, started to book a call or pressed "Chat on WhatsApp") to show you our adverts later on Facebook and Instagram, or to stop showing them once you have booked a call or bought: outside the UK, the EU and Switzerland unless you choose "Essential only", and inside them only if you allowed analytics and ads. These adverts never name a website or a score, Meta never receives your score, and we never give Meta your email or any list of people for this. If you choose "Essential only", we stop telling Meta about your visits, and Meta drops you from these audiences within 180 days at most.

If you allowed analytics and ads and also agreed to marketing emails, we may give Google, Meta and LinkedIn a one-way hash (SHA-256) of your email address, never the address itself. They match it with their own users for our advertising: to show our adverts to you, or to stop showing them to you once you pay. Without both answers we never do this. To stop it, press "Cookie settings" and choose "Essential only", turn off marketing emails in Settings, or write to support@named.ae; you are left out of the next list we send.

7.Where your data is kept

Your account and scan data are stored on servers in Singapore, which is outside the UAE and the European Union. The other providers in section 4 process the data described there in the United States or in other countries outside the UAE and the European Union. They are the AI platforms we measure, Serper, Stripe, Postmark, Cloudflare, Sentry, Google, Meta, LinkedIn and Microsoft (Google and Meta from your first page outside the UK, the EU and Switzerland unless you choose "Essential only"; otherwise these four only if you allow analytics and ads). They do this under their standard data-processing terms. Our hosting provider, Railway, processes this data under its data-processing terms, which include the standard contractual clauses. Where the law of your country requires safeguards for such transfers, we rely on the providers' standard contractual clauses. Our team can work from any country. Today they work from India. When they answer your email or WhatsApp message, or look at your report or account to help you, they see your data from there.

8.Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and under the GDPR or UK GDPR if you are in the European Economic Area or the United Kingdom, you can:

  • Export your account, brands, questions, scans, answers, moves and invoices yourself from Settings. For your messages to us and your bookings, email support@named.ae.
  • Close your account yourself from Settings. Closing keeps your data (see section 10). To have your data deleted, email support@named.ae.
  • Correct inaccurate data, restrict or object to processing, and withdraw consent for marketing at any time, by writing to us or using the unsubscribe link.
  • Complain to the data protection authority where you live if you believe we have handled your data wrongly. We would rather hear from you first.

9.Email preferences

Every marketing email includes an unsubscribe link: open it and press Unsubscribe, no login required. You can turn the scan digest and the payment reminders on or off from Settings or the unsubscribe page. Transactional emails (codes, receipts, password resets) are always delivered.

10.Retention

We keep your account data until you ask us to delete it. This is the same if your plan lapses, if you cancel, or if you close your account. Closing your account from Settings stops billing, scans, emails and shared report links at once; the data is kept. To have your data deleted, email support@named.ae. When we delete an account, we keep only its invoices, for 24 months, and then we delete them too. Our payment provider, Stripe, keeps its own copy of your billing record. Free-scan records, email codes, sign-up records and the free-scan event log, each with the IP address it came from, are kept until you ask us to delete them. Our email provider keeps delivery logs for 45 days. WhatsApp chats stay on our business phone for as long as we keep your other data (see above). To have a chat deleted, ask us in the chat or at support@named.ae.

11.Children

named.ae is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.

12.Changes and contact

If we change this policy in a way that matters, we tell you before it takes effect, by email or with a notice on our website. Privacy questions, requests, or complaints: support@named.ae. We reply within 24 hours on working days (Monday to Friday, Dubai time, except public holidays), and complete privacy requests within 30 days.
DIVINE API LABS - FZCO · Dubai, United Arab Emirates