Privacy Policy
Privacy Policy
Last updated: 18 October 2025 (Africa/Cairo)
Who we are
Digisoul (“we,” “us”) runs digisoul.io and related services. We are a business that helps clients use AI and digital tools. This policy explains how we handle your information on our website and when you interact with us.
What this covers
This policy covers personal data we collect on our site, through forms, emails, proposals, support, and sales. It does not cover third-party sites we link to. Those have their own policies.
Data we collect
We only collect what we need to run our services, answer requests, and improve the site.
| Type | Examples | Source |
|---|---|---|
| Identity & contact | Name, company, role, email, phone | You (forms, email), public business profiles |
| Account & transaction | Service history, proposals, invoices, support notes | You; our systems |
| Usage & device | Pages viewed, clicks, approximate location, device/browser, IP (anonymized where possible) | Automatic via cookies or similar (see Cookies) |
| Communication | Emails, messages, meeting notes | You; our team |
| Marketing preferences | Opt-in/opt-out choices, topics of interest | You; cookie banner settings |
| Client content | Files, prompts, data you send to deliver a project | You (under NDA/contract where applicable) |
How we use data
- Provide our site, proposals, and services.
- Respond to messages and support requests.
- Improve site performance and fix issues.
- Personalize content only where you have given consent (where required by law).
- Meet legal, tax, and security obligations.
Legal reasons (in simple terms)
We only use your data when we have a good reason to do so:
- Consent: you asked us to (you can withdraw it).
- Contract: to deliver something you requested or bought.
- Legal duty: we must keep certain records.
- Legitimate interests: run and protect our business in ways that do not unfairly impact your privacy (for example, basic analytics, fraud prevention). Where the law requires consent, we will rely on consent instead.
- Vital/public interests: very rarely, to prevent harm or comply with public rules.
Sharing
We do not sell your personal information. We share data only with:
- Service providers (processors) that help us run the site, email, analytics, storage, billing—under contracts that limit how they use your data.
- Professional advisers (legal, accounting) under duty of confidentiality.
- Legal and safety when required by law or to protect rights, safety, or security.
- Business transfers if we reorganize, merge, or sell parts of the business. We will continue to protect your data and inform you where required.
Cookies & tracking
Cookies are small files used to remember settings and understand how the site is used. You can control cookies in your browser and via our preferences link below.
- Essential: required for the site to work (cannot be turned off).
- Functional: remember choices (e.g., language).
- Analytics: help us improve the site by measuring use.
- Advertising: personalize or measure ads (used only with your consent where required).
To change choices, use your browser settings or this link: Cookie Preferences.
AI & model training policy
We do not use your client data to train our or third-party AI models unless you give us explicit written consent or it is clearly covered in a signed contract. By default, project data is used only to deliver the agreed work, provide support, and meet legal obligations.
Security
We use reasonable administrative, technical, and physical safeguards to protect personal data (for example: role-based access, encryption in transit, least-privilege access, and logging). No method is perfect, and we cannot guarantee absolute security.
Retention
We keep data only as long as needed for the purpose we collected it for, including to meet legal, tax, or accounting requirements. Typical examples:
- Account, contract, and invoice records: kept for required legal periods.
- Analytics data: kept in aggregate or deleted after a set period.
- Project files: retained per contract or deleted on request unless we must keep them by law.
International transfers
We may move data to countries where we or our providers operate. When we do, we use legally recognized safeguards. Examples include EU/UK Standard Contractual Clauses, adequacy decisions, and other approved mechanisms. For local laws that require permits or conditions for transfers (e.g., Egypt and UAE), we follow those rules as they apply to the specific transfer.
Your rights & how to use them
Depending on where you live, you may be able to:
- Access a copy of your data.
- Ask us to correct inaccurate data.
- Ask us to delete data (in some cases) or limit how it is used.
- Object to certain uses (e.g., direct marketing).
- Ask for a portable copy in a usable format.
- Opt out of “sale” or “sharing” for cross-context behavioral advertising where those concepts apply.
- Ask for a human review of certain automated decisions (where applicable).
How to submit a request: Email privacy@digisoul.io or use our form at digisoul.io/contact-us. We may need to verify your identity and country/region so we send the right data to the right person.
Regional notices
EU/UK
If EU/UK laws apply to you: you have rights of access, correction, deletion, restriction, portability, and objection, plus protections regarding automated decisions. Transfers outside the EU/UK use mechanisms such as adequacy decisions or Standard Contractual Clauses, as required.
California (CCPA/CPRA)
California residents can request to know, access, correct, or delete personal information; opt out of “sale” or “sharing” (for cross-context behavioral advertising); and limit the use of sensitive personal information (where applicable). To exercise these rights, email privacy@digisoul.io and include “California request” in the subject, or visit our contact page.
Egypt (PDPL)
Egypt’s Personal Data Protection Law (No. 151 of 2020) grants rights such as access, correction, deletion, and objection, and sets conditions for processing and cross-border transfers. Where the PDPL requires permits or approvals for certain processing or transfers, we follow those requirements for applicable activities.
United Arab Emirates (PDPL)
Under the UAE Federal Decree-Law No. 45 of 2021, you may have rights to access, correction/erasure, restriction, portability, and to stop processing in certain cases (including direct marketing). Cross-border transfers are allowed under conditions set by the law and its regulations.
Children
Our services are not directed to children. If you believe a child provided us personal data without proper authorization, contact us and we will take appropriate steps.
Changes to this policy
We will update this page when our practices change. If changes are significant, we will provide a clear notice (for example, on the site or by email when appropriate).
Contact
Questions or requests: privacy@digisoul.io. Business inquiries: bd@digisoul.io. You can also use our form at digisoul.io/contact-us.
FAQs
Do you sell my personal information? No. If “sale” or “sharing” under local law includes advertising cookies, you can opt out via Cookie Preferences or by emailing us.
Can I delete my data? Often yes, unless we must keep it for legal or security reasons. Write to privacy@digisoul.io.
Do you train AI on my data? Not without your explicit consent or a signed contract that says so.
How do I stop marketing emails? Use the unsubscribe link in the email or contact us.