Tajiro Privacy Policy

This Privacy Policy explains how Tajiro Technologies FZCO (“Tajiro”, “we”, “us”, “our”) collects, uses, shares and protects personal data when you visit tajiro.com or the Tajiro app, subscribe to Tajiro PRO, earn Commission, or buy a toolkit from a store on the Tajiro platform or on Tajiro Mall.

We process personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and the data protection laws of the other countries where we operate. Tajiro also complies with the General Data Protection Regulation (GDPR) (EU) 2016/679 where it applies.

This Policy forms part of the Tajiro Terms of Service. Words with capital letters, such as Store, Storefront, Commission and End-customer, have the meaning given in the Terms of Service.

Below you can read what personal data we collect and why. It differs for website and app visitors, Tajiro PRO subscribers, subscribers who earn Commission, and End-customers.

1. Who we are

Tajiro Technologies FZCO
Unit No. 807, Saba 1 Tower, Plot No. JLT-PH1-E3A
Jumeirah Lakes Towers, Dubai, United Arab Emirates
Licence number: DMCC-1039612

Tajiro is the controller of the personal data described in this Policy, which means we decide how and why it is used. The only exception is described in Section 7. You can contact our data protection team at privacy@tajiro.com.

2. I am a Tajiro website or app visitor

Visitors are people who browse tajiro.com or use the Tajiro app without subscribing to Tajiro PRO or buying a toolkit.

What personal data we collect from visitors

• Your email address and phone number, if you give them to us, for example to download a guide, subscribe to our emails, leave a comment or contact support.
• Data about the browser, device and operating system you use, and your IP address.
• How you navigate and interact with the website or app.

Why we collect it

• Email address – to give you access to the materials you asked for and, if you agreed, to send you news and offers. You can unsubscribe at any time using the link in each email.
• Phone number – to send you the messages you asked for and, if you agreed, promotional offers by SMS. Message and data rates may apply. You can stop promotional SMS at any time by replying “STOP”.
• Browser and device data – to display the website or app correctly on your device and keep it secure.
• Navigation data – to understand how the website and app are used and improve them. We use analytics cookies only with your consent (Section 10).

Who we share it with

• Our email and SMS service provider, Aweber, to manage our mailing list and send messages.
• Our analytics provider, Google Analytics, to measure how the website and app are used.

3. I am a Tajiro PRO subscriber

A subscriber is a person or business that has signed up for Tajiro PRO, including during the free trial.

What personal data we collect from subscribers

• Your first and last name, email address, phone number and country of residence, and your business details if you subscribe as a business.
• Payment details. Card payments are processed by our payment provider; we receive only limited card information, such as the last four digits and expiry date, and we do not store full card numbers. Where the card scheme allows, our payment provider may obtain updated card details, such as a new expiry date, from your card issuer (Terms of Service, Section 11.11).
• Your subscription, orders, Paid Services, fees, invoices and refunds.
• Your onboarding answers, Store settings and the content you upload to your Store.
• Your activity in the Dashboard, and messages and notes from support and your Growth Manager.
• Browser, device and IP data, including data we use to detect linked accounts (Section 8).
• A record of your acceptance of the Terms of Service: the version you accepted, and the date and time.

Why we collect it and on what basis

Who we share it with

• Our payment provider, Stripe, to take payments and prevent payment fraud (see Section 11).
• Our email and SMS service provider, Aweber, to send service and marketing messages.
• Our analytics provider, Google Analytics.
• Our hosting, cloud and customer support providers, to run the Service and answer your requests.
• Our professional advisers, such as accountants, auditors and lawyers.
• Tax authorities and other public authorities, where the law requires.

4. I earn Commission

This Section applies if you receive Commission under Section 15 of the Terms of Service, including through your Partner Account.

What personal data we collect

• Your phone number and the result of phone verification.
• Identity documents and the results of identity verification.
• Your bank account details, such as the account holder’s name, bank name and IBAN.
• Tax information, where the law requires it.
• Your Commission history and payout requests.

Why we collect it and on what basis

• To verify your identity before a payout (Terms of Service, Section 15.6) – performance of the contract and our legal obligations.
• To carry out anti-money-laundering, sanctions and fraud checks (Terms of Service, Sections 15.7 and 25) – our legal obligations.
• To make payouts to your bank account – performance of the contract.
• To keep payout records and meet tax reporting requirements – our legal obligations.

Who we share it with

• Our identity verification provider.
• The payment providers and banks that make payouts.
• Public authorities, where the law requires.

5. I am an End-customer

An End-customer is a person who buys a toolkit from a Store on the Tajiro platform or on Tajiro Mall. Where the Store operates as a Storefront, or you buy on Tajiro Mall, Tajiro is the seller and the controller of your data. If you bought from a Store that uses its own payment system, see Section 7.

What personal data we collect from End-customers

• Your name, email address, country and billing address.
• Payment details, processed by our payment provider. We do not store full card numbers.
• Your order, including the toolkit you bought and the date.
• The answers you enter into a toolkit and the result it generates (Section 6).
• Your IP address and location data, which we use to determine your country for tax purposes and to prevent fraud.
• Your messages to support, and information about refunds and chargebacks.

Why we collect it and on what basis

• To sell and deliver the toolkit and generate your result – performance of our contract with you.
• To issue your invoice and apply the correct tax for your country – our legal obligations under tax law.
• To handle refunds, chargebacks and support requests – performance of the contract and the protection of our legal rights.
• To prevent fraud – our legal obligations and the protection of our legal rights.
• To send you marketing messages – only with your consent.

Who we share it with

• Our payment provider, Stripe, to take payments and prevent payment fraud (see Section 11).
• Our AI provider, to generate your result (Section 6).
• The subscriber whose Store you bought from. We share only limited order information, such as the toolkit bought and the order date, so that they can operate their Store. They may use it only for that purpose and in line with data protection law.
• Tax authorities and other public authorities, where the law requires.

6. Toolkit answers and AI processing

Toolkits generate content from the answers you enter, using artificial intelligence models provided by third-party AI providers. Your answers and the result are sent to the provider only to generate the result for you.

Please do not enter sensitive personal data, such as information about health, religion, ethnic origin or criminal records, or financial account details and identity numbers, unless the toolkit needs it to produce your result. Where a toolkit asks for sensitive personal data, we use it only with your explicit consent and only to generate the result.

Results are identified as AI-generated. We keep your answers and results for 30 days after delivery, so that you can download your result again, and then delete them.

7. Stores that use their own payment system

If a subscriber connects their own payment system to their Store (Terms of Service, Section 12.4), the subscriber is the seller and the controller of their customers’ personal data. Tajiro processes that data on the subscriber’s behalf, only to deliver the toolkits and run the Store, and only on the subscriber’s instructions.

The same applies to contact details that a subscriber collects on their Store, for example through the Lead Generation Pop-up (Terms of Service, Annex B12.13).

If you are a customer of such a Store, please contact the subscriber to exercise your rights. If you contact us instead, we will pass your request to the subscriber.

8. Fraud prevention, account security and chargebacks

To protect subscribers, End-customers and the platform, we:

• identify linked accounts using shared attributes such as email domain, IP address, device, payment details and usage patterns (Terms of Service, Section 5.4), and may limit new registrations from email domains linked to high-risk activity;
• review transactions for signs of fraud, repeated chargebacks and abuse of our refund policy;
• when a payment is disputed, give the payment processor the evidence it needs, such as your acceptance of the Terms of Service, the reminders we sent and your use of the Service;
• where we detect fraud or abuse, share relevant information with payment processors and competent authorities (Terms of Service, Section 17).

We do this to meet our legal obligations and protect our legal rights, as the law allows.

9. Marketing messages

We send marketing emails, SMS or other messages only if you have agreed to receive them. Your consent is separate from accepting the Terms of Service and is not a condition of subscribing or buying.

You can withdraw your consent at any time by using the unsubscribe link in any email, replying “STOP” to any SMS, or contacting privacy@tajiro.com. You will still receive service messages about your account, billing and orders, because we need to send them to provide the Service. We send marketing messages only at times allowed by law.

10. Cookies and similar technologies

On the website

Cookies are small files stored on your device by your browser. We use:

• Essential cookies – to keep you signed in, run checkout and keep the Service secure, including cookies set by Stripe to prevent payment fraud (Section 11). The website cannot work without them.
• Preference cookies – to remember your settings, such as language and currency.
• Analytics cookies – to understand how the website is used and improve it.
• Advertising cookies – to measure and improve advertising, including promotion of toolkits on Tajiro Mall under the Promotion Service, and to show relevant offers to people who have visited our website.

We use essential cookies without consent. We use all other cookies only if you agree to them in our cookie banner. You can change your choice at any time in the cookie settings on the website, or block cookies in your browser; if you block essential cookies, parts of the website may not work.

In the app

The app does not use traditional cookies, but it may use device identifiers and analytics tools for the same purposes: to keep you signed in, save your preferences, adapt the app to your device and measure its performance. We use non-essential identifiers only with your consent.

Our analytics provider deletes user-level analytics data 14 months after your last activity.

11. Who we share personal data with

In summary, we share personal data only with:

• payment providers and banks;
• AI providers;
• identity verification providers;
• email and SMS service providers;
• analytics and advertising providers, where you have consented;
• hosting, cloud and customer support providers;
• the subscriber whose Store an End-customer bought from, limited as described in Section 5;
• professional advisers, such as accountants, auditors and lawyers;
• public authorities, regulators and courts, where the law requires or to protect our legal rights;
• a buyer or successor of our business, if we transfer our business or these Terms (Terms of Service, Section 34.4).

Our service providers may use personal data only to provide their services to us and must keep it secure and confidential. We do not sell personal data.

Payments processed by Stripe. We use Stripe for payment, analytics and other business services. Stripe collects transaction and personal identifying information, which it analyses and uses to operate and improve the services it provides to us, including for fraud detection. To help detect fraud, Stripe also collects information about your device and how you interact with our checkout pages, such as your IP address, browser and language settings, the pages you visit and your mouse movements, including information you enter into the checkout form even if you do not complete the purchase. For its own purposes, such as preventing fraud, keeping its services secure and complying with the law, Stripe acts as an independent controller. You can learn more about Stripe and read its privacy policy at Stripe Privacy Policy.

12. International transfers

Some of our service providers process personal data outside your country, for example on cloud servers. We transfer personal data outside the UAE, or outside your country, only where the law allows it: to countries that provide an adequate level of protection, under contractual safeguards that require the recipient to protect the data, or on another basis permitted by law, such as your consent where it is required.

13. How we protect personal data

• Personal data is accessible only to a limited number of authorised Tajiro employees and service providers who need it for their work and are bound by confidentiality.
• We store personal data on secure servers managed by us and our service providers, protected by access controls such as username and password authentication.
• Data is encrypted in transit. Card payments are handled by Stripe, which is certified as a PCI DSS Level 1 Service Provider, the highest level of certification in the payments industry.
• No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach puts your rights at risk, we will notify the competent authority and, where required, you.

14. How long we keep personal data

We keep personal data only for as long as we need it for the purposes in this Policy, unless the law requires or allows us to keep it longer.

15. Your rights

Under the PDPL and the other laws that apply to you, you have the right to:

• be informed about how we use your personal data – this Policy does that;
• access your personal data and receive a copy of it;
• receive your data in a structured, machine-readable format and ask us to send it to another organisation, where technically possible;
• correct inaccurate or incomplete data;
• ask us to delete your data;
• ask us to restrict how we use your data;
• object to the use of your data for marketing, and to decisions based solely on automated processing that significantly affect you;
• withdraw your consent at any time, without affecting what we did before you withdrew it.

To exercise any of these rights, email privacy@tajiro.com. We may ask you to confirm your identity. We will respond within 30 days; if we need more time, we will tell you why and how long. We usually do not charge for this.

Some rights have limits. For example, we cannot delete data that we must keep by law (Section 14), and deleting your account data will end your Subscription.

If you are not satisfied with our response, you can complain to the data protection authority in your country (Annex A). In the UAE, this is the UAE Data Office.

16. Children

The Service is for people aged 18 or over, or the age of legal majority in their country of residence if that is higher (Terms of Service, Section 4.1). It is not directed at children, and we do not knowingly collect personal data from them. If we learn that we have collected personal data from a child, we will delete it.

17. Changes to this Policy

We may update this Policy. We will publish the updated version on this page with a new “Last updated” date. If we make a material change, we will tell you by email or in your Dashboard before it takes effect.

18. Contact us

If you have any questions about this Policy or how we use personal data, contact us:

Email: privacy@tajiro.com
Phone: +971 52 875 0725
Post: Tajiro Technologies FZCO, Unit No. 807, Saba 1 Tower, Plot No. JLT-PH1-E3A, Jumeirah Lakes Towers, Dubai, United Arab Emirates

Annex A – Country-specific information

This Annex adds to this Policy for people in the countries below.