Skip to content
Book a consultation

Privacy policy

EliteStack Technologies LLC collects only the personal data it needs to answer enquiries, run its software for clients and meet UAE law. We do not sell personal data. This policy explains what we collect, why, who we share it with, how long we keep it and how to use your rights under the UAE PDPL.

Last updated: 29 October 2026.

Who are we?

EliteStack Technologies LLC ("EliteStack", "we") is a software company at Rag Tower Business Center, Al Barsha 1, Dubai, United Arab Emirates. You can reach us at info@elitestack.ae or +971 56 121 1011.

This policy follows the UAE Personal Data Protection Law, Federal Decree-Law No. 45 of 2021 (the "PDPL").

Who does this policy cover?

  • Visitors to www.elitestack.ae and people who contact us by form, email, phone or WhatsApp.
  • Clients who use our products and services, and their staff who sign in to them.
  • Customers of our clients, such as people who message a business through Zapelite or apply for a visa through an agency on TA247.

For the website and our own client relationships we decide how personal data is used (we are the controller). When a client uses our software to process its own customers' data, the client is the controller and we process that data on its instructions. If you are a customer of a business that uses our software, contact that business first about your data.

What do we collect?

  • Enquiries: your name, company, work email, WhatsApp number if you give it, what you want AI to do, your industry and how you heard of us.
  • Messages you send us by email, phone or WhatsApp.
  • Client accounts: names, work contact details, roles, sign-in records and billing details of the people who use our products.
  • Client data: whatever a client puts into our products, such as messages, documents, quotations, passport scans or payroll records. We process it only to run the service.
  • Technical data: IP address, browser, pages requested and time, kept in server logs for security and fault-finding.

Why do we use it?

  • To reply to you and to provide a service you asked for (contract and pre-contract steps).
  • To keep our systems secure, prevent fraud and fix faults (legitimate interests).
  • To improve our products, using usage data that does not identify you where we can (legitimate interests).
  • To meet the law, for example UAE tax and accounting records (legal obligation).
  • To send you updates about our products, only if you agreed; you can stop them at any time (consent).

How do we use AI on personal data?

Some of our products use AI models to read documents and messages. In client products these features are optional and switched on by the client. We do not send personal data to a third-party AI model, or use it to train one, without that choice being made. A person reviews any result the AI is unsure of, and we do not make decisions with legal or similarly significant effects about you by automated means alone.

Who do we share it with?

We do not sell personal data. We share it only with:

  • Service providers who host our systems, deliver email and messages, and process payments, under contracts that limit their use of the data.
  • Meta, when a business sends or receives WhatsApp, Messenger or Instagram messages through Zapelite.
  • AI model providers such as Anthropic, OpenAI or Google, when an AI feature has been switched on.
  • Authorities, when UAE law or a court order requires it. Where the law allows, we tell you first.

Is data transferred outside the UAE?

Some of our providers store or process data outside the UAE. We transfer personal data only as the PDPL allows: to countries with adequate protection, or under contractual safeguards. We store client data in a UAE cloud region by default. Text sent to an AI model for a task is processed by that model provider, which may be outside the UAE. You can ask us for details.

How long do we keep it?

  • Enquiries that do not become a project: 24 months from the last contact.
  • Client account and billing records: for the length of the contract, then for five years after it ends, or longer where UAE tax or commercial law requires.
  • Client data: for the length of the contract, then returned or deleted on the client's instructions.
  • Server logs: 12 months.

When we no longer need data we delete it or make it anonymous.

How do we protect it?

Data is encrypted in transit, access is limited to the people who need it, each client's data is kept separate from other clients', and we keep backups. No system is perfectly secure; if a breach puts your rights at risk, we will tell you and the UAE Data Office as the PDPL requires.

What are your rights?

Under the PDPL you can ask us to:

  • tell you what personal data we hold about you and give you a copy;
  • correct data that is wrong or incomplete;
  • delete your data, where we have no legal reason to keep it;
  • restrict or stop processing, including direct marketing;
  • move your data to another provider in a usable format;
  • review a decision made about you by automated means alone.

Where we rely on your consent you can withdraw it at any time. Email info@elitestack.ae from the address we hold for you; we may ask you to prove who you are and delete that proof once we have checked it. If you are not satisfied with our answer you can complain to the UAE Data Office.

Google sign-in and Google Sheets

Some of our products let you sign in with Google or connect a Google account, for example to read a Gmail mailbox or to send WhatsApp chatbot data to a Google Sheet. When you connect:

  • we ask only for the permissions the feature needs;
  • we use Google user data only to provide and secure that feature;
  • we do not sell Google user data, use it for advertising, or transfer it to others except as needed to provide the feature, for security, or to meet the law;
  • people at EliteStack do not read it unless you agree, it is needed for security, or the law requires it.

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Payments

Card payments are handled by our payment providers. We do not store full card numbers, and we do not sell or share payment details except with the providers that process the payment.

Cookies

See our cookie policy.

Children

Our website and products are for businesses. They are not meant for anyone under 18, and we do not knowingly collect children's data except where a client processes it, for example a child's passport in a family visa application.

Changes to this policy

We will post any change on this page with a new date. For significant changes we will also tell clients by email or in the product.

Contact

EliteStack Technologies LLC, Rag Tower Business Center, Al Barsha 1, Dubai, United Arab Emirates. info@elitestack.ae · +971 56 121 1011.

Last reviewed 29 October 2026