Privacy Policy

Effective Date: September 4, 2023

RAPYD – FZCO (“we,” “us,” “our,” or “Rapyd”) is committed to protecting your privacy.

This Privacy Policy describes our privacy practices as to Personal Information that we collect through rapyd.cloud, my.rapyd.cloud, and rapydapps.cloud (“Websites”) and its sub-websites and/or associated domains, products, services, events, and experiences that refer to this Privacy Policy (altogether, the “Services”).

This Privacy Policy applies when we act as the data controller of the Personal Information of natural persons who use the Services (“you” or “your”); in other words, where we determine the purposes and means of the processing of that Personal Information.

Our Terms of Service, Service Level Agreement, Cookie Policy, Deprecation Policy, Beta Testing Policy, DMCA Copyright Policy, Trademark Notification Policy, Acceptable Use Policy, and Affiliate Program Policy are incorporated into this Privacy Policy whenever applicable. Together, they form a binding agreement between you and us. Any capitalized word used but not defined in this Privacy Policy have meanings as provided in the Terms of Service.

This Privacy Policy does not apply to the “content” collected and processed in the Services by our customers and users. This Privacy Policy also does not apply to any products, services, websites, or content that are offered by third parties.

If you are a legal or natural person seeking our services as a data processor, see our Data Processing Addendum.

PERSONAL INFORMATION WE COLLECT
1. “Personal Information” means any information relating to an identified or identifiable natural person.
2. We collect your Personal Information in the course of providing the Services to you. Depending on your use of Services, you might supply us with such information as:
  1. your name, email address, phone number, date of birth, and other optional information (“Account Information”);
  2. information about your location;
  3. information about your organization and your contacts, such as colleagues or people within your organization;
  4. usernames, aliases, roles, and other authentication and security credential information;
  5. content of feedback, testimonials, inquiries, support tickets, and any phone conversations, chat sessions and emails with or to us;
  6. your image (still, video, and in some cases 3-D), voice, and other identifiers that are personal to you when you attend our events or use certain Services;
  7. information regarding identity, including government-issued identification information;
  8. corporate and financial information; and
  9. VAT numbers and other tax identifiers.
COLLECTION OF INFORMATION
1. Information You Give to Us. We collect any information you provide to us in relation to the Services. You provide information to us when you:
  1. search for, subscribe to, or purchase Services;
  2. create or administer your Account;
  3. configure your settings for, provide data access permissions for, or otherwise interact with the Services;
  4. register for or attend any of our events;
  5. purchase or use content, products, or services from third-party providers through the Services (or other similar venues operated or provided by us);
  6. offer your content, products, or services on or through Services or the Services (or other similar venues operated or provided by us);
  7. communicate with us by phone, email, or otherwise;
  8. complete a questionnaire, a support ticket, or other information request forms;
  9. post on our websites or participate in community features; and
  10. employ notification services.
2. Automatic Information.
  1. We automatically collect certain types of information when you interact with the Services. We collect information automatically when you:
    1. visit, interact with, or use the Services (including when you use your computer or other device to interact with Services);
    2. download content from us;
    3. open emails or click on links in emails from us; and
    4. interact or communicate with us (such as when you attend our events or when you request customer support).
  2. Examples of the information we automatically collect include:
    1. network and connection information, such as the Internet protocol (IP) address used to connect your computer or other device to the Internet and information about your Internet service provider;
    2. computer and device information, such as device, application, or browser type and version, browser plug-in type and version, operating system, or time zone setting;
    3. the location of your device or computer;
    4. authentication and security credential information;
    5. content interaction information, such as content downloads, streams, and playback details, including duration and number of simultaneous streams and downloads;
  3. Services metrics, such as offering usage, occurrences of technical errors, diagnostic reports, your settings preferences, backup information, API calls, and other logs;
  4. the full Uniform Resource Locators (URL) clickstream to, through, and from our Websites (including date and time) and Services, content you viewed or searched for, page response times, download errors, and page interaction information (such as scrolling, clicks, and mouse-overs);
  5. email addresses and phone numbers used to contact us; and
  6. identifiers and information contained in cookies (see our Cookie Policy).
3. Information from Other Sources: We might collect information about you from other sources, including service providers, partners, and publicly available sources. Examples of information we receive from other sources include:
  1. marketing, sales generation, and recruitment information, including your name, email address, physical address, phone number, and other similar contact information;
  2. subscription, purchase, support, or other information about your interactions with products and services offered by us, our affiliates (such as our training courses);
  3. search results and links, including paid listings; and
  4. credit history information from credit bureaus.
USE OF PERSONAL INFORMATION
1. Provide the Services. We use your Personal Information to provide and deliver the Services and process transactions related to the Services, including Account creation, registrations, subscriptions, purchases, and payments. The legal bases for this processing are contractual necessity and legitimate interest.
2. Measure, Support, and Improve the Services. We use your Personal Information to measure use of, analyze performance of, fix errors in, provide support for, improve, and develop the Services. The legal bases for this processing are contractual necessity and legitimate interest.
3. Recommendations and Personalization. We use your Personal Information to recommend the Services that might be of interest to you, identify your preferences, and personalize your experience with the Services. The legal basis for this processing is consent and legitimate interest.
4. Communicate with you. We use your Personal Information to communicate with you in relation to the Services via different channels (e.g., by phone, email, chat) and to respond to your requests. The legal bases for this processing are consent and legitimate interest.
5. Marketing. We use your Personal Information to market and promote the Services. The legal bases for this processing are consent and legitimate interest (where we do not need your consent).
6. Fraud and Abuse Prevention and Credit Risks. We use your Personal Information to prevent and detect fraud and abuse in order to protect our security, of our customers, and or others. We may also use scoring methods to assess and manage credit risks. The legal basis for this processing is legitimate interest (detection and prevention of fraud).
7. Comply with Legal Obligations. In certain cases, we have a legal obligation to collect, use, or retain your Personal Information. For example, we collect bank account information for identity verification.
8. With Your Consent. We may also ask for your consent to use your Personal Information for a specific purpose that we communicate to you. When you consent to our processing your Personal Information for a specified purpose, you may withdraw your consent at any time, and we will stop any further processing of your data for that purpose.
9. We never sell your Personal Information. We never share your Personal Information with third-parties for their marketing purposes, unless you consent thereto. The list of third parties to whom we may disclose to and/or share your Personal Information with is available on request.
10. Should we need to process your Personal Information for a new purpose entirely unrelated to the above, we will inform you of such processing in advance and you may exercise your applicable rights in relation to such processing. Please note that without certain Personal Information, we may not be able to provide some or all of the Services or even to guarantee the full functionalities of the Services.
MARKETING COMMUNICATIONS; OPTING OUT
1. We only send mail, messages and other communications relating to marketing where we are authorized to do so by law. In most cases, we rely on your consent to do so (especially where We use electronic communications). If, at any time, you no longer wish to receive direct marketing communications from us, you can exercise this right by clicking the “unsubscribe” or “opt-out” link in the marketing emails we send you, or contacting us, or updating your preferences on your Account and/or in our Services.
2. In the case of direct marketing sent by electronic communications (where we are legally authorized to do so), you will be given an easy way of opting out (or unsubscribing) from any such communications.
3. Even if you withdraw any consent you may have given us or if you object to receiving such direct marketing material from us (in those cases where we do not need your consent), we may still need to send you administration and transactional communications from which you cannot opt-out.
SHARING OF PERSONAL INFORMATION
1. Our Affiliates. We share Personal Information as described this Privacy Policy and with our affiliates that we control that are either subject to this Privacy Policy or follow practices at least as protective as those described in this Privacy Policy.
2. Third-Party Service Providers. We employ other companies and individuals to perform functions on our behalf. Examples include delivering hardware, sending communications, processing payments, assessing credit and compliance risks, analyzing data, providing marketing and sales assistance (including advertising and event management), conducting customer relationship management, and providing training. These third-party service providers have access to Personal Information needed to perform their functions, but may not use it for other purposes. Further, they must process that information in accordance with this Privacy Policy and as permitted by applicable data protection law.
3. Business Transfers. As we continue to develop our business, we might sell or buy businesses or services. In such transactions, Personal Information generally is one of the transferred business assets but remains subject to the promises made in any pre-existing Privacy Policy (unless, of course, the individual consents otherwise). Also, in the unlikely event that we or substantially all of our assets are acquired, your information will of course be one of the transferred assets.
4. Our and Others’ Protection. We release Account Information and other Personal Information when we believe release is appropriate to comply with the law, enforce or apply our terms and other agreements, or protect the rights, property, or security of us, our customers, or others. This includes exchanging information with other companies and organizations for fraud prevention and detection and credit risk reduction.
5. With Your Consent. Other than as set out above, you will receive notice when Personal Information about you might be shared with third parties, and you will have an opportunity to choose not to share the information.
STORING PERSONAL INFORMATION
1. RAPYD – FZCO is located in Dubai, United Arab Emirates, and our affiliated companies are located throughout the world. Depending on the scope of your interactions with the Services, your Personal Information may be stored in or accessed from multiple countries, including the United Arab Emirates. For the complete list of potential regions and countries where your Personal Information may be transferred to or from, please see the our Cloud Provider’s Global Infrastructure list of regions and availability zones here: https://aws.amazon.com/about-aws/global-infrastructure/.
PAYMENT INFORMATION
1. We use Paddle to process your payment for the Fees. Paddle is Payment Card Industry Data Security Standard (PCI DSS) SAQ A Compliant, which means that Paddle does not directly store card information and are PCI Compliant for web transactions only. As a result, we cannot store, process and transmit cardholder data either physically or virtually. Paddle is also compliant with the Service Organization Control (SOC) 2, one of the industry’s most rigorous security and compliance certifications. To pay for the Fees, you may need to share your information with Paddle in a manner which enables Paddle to process your payments. Any information you share with Paddle will be governed by its Paddle’s Security and Privacy Policy.
SECURITY MEASURES
1. Security is our highest priority. We design our systems with your security and privacy in mind. We maintain physical, electronic, and procedural safeguards in connection with the collection, storage, and disclosure of Personal Information.
2. We restrict access to personal data collected about you to our employees, contractors, and certain third-party service providers as discussed above. Our security procedures mean that we may request proof of identity before we disclose Personal Information to you.
3. We maintain reasonable administrative, technical, and organizational safeguards designed to protect against loss, misuse, or unauthorized access, disclosure, alteration, or destruction of the personal data that we collect from you. We protect the security of your information during transmission to or from our Services by using encryption protocols and software. Please note, however, that no website or storage mechanism, including the Services, can guarantee 100% security.
RETENTION OF PERSONAL INFORMATION
1. We keep your Personal Information to enable your continued use of the Services, for as long as it is required in order to fulfill the relevant purposes described in this Privacy Policy, as may be required by law (including for tax and accounting purposes), or as otherwise communicated to you. How long we retain specific Personal Information varies depending on the purpose for its use, and we will delete your Personal Information in accordance with applicable law.
2. When you cancel your Account, we take reasonable steps to delete your personal data within a reasonable period of time. Sometimes, we may retain your information for a period of time after account cancellation to allow you to efficiently reinstate your Account, if you so choose. We also may retain certain personal data after you cancel your account to the extent necessary to comply with our legal and regulatory obligations, for the purpose of fraud monitoring, detection and prevention, and for our tax, accounting, and financial reporting obligations.
DE-IDENTIFICATION OF PERSONAL INFORMATION
1. When allowed by applicable law, we will take reasonable steps to de-identify and store your Personal Information after the retention period. We may use de-identified data in some instances. We either maintain such data without attempting to re-identify it or treat such data as personal data subject to applicable law.
COOKIE POLICY
1. To enable our systems to recognize your browser or device and to provide, market, and improve the Services, we and approved third parties use cookies and other identifiers. For more information about cookies and how we use them, please read our Cookie Policy.
YOUR RIGHTS
1. Subject to applicable laws, the following are your rights pertaining to your Personal Information:
  1. Right to Information. You have the right to be informed whether we collect and process your Personal Information.
  2. Right to Access. You have the right to request copies of your Personal Information that we collect and process. You have the right to know the purposes, categories of personal data, recipients, retention period, and your rights, with regard to the collection and processing of your Personal Information.
  3. Right to Rectify. You have the right to request that inaccurate Personal Information that we hold about you be corrected, or completed if it is incomplete; except when restricted for important objectives of public interest or protection of the right of freedom of expression and information.
  4. Right to Erasure. You have the right to request deletion of your Personal Information where it is no longer necessary for the purposes or to comply with a legal obligation, and to withdraw your consent where there is no lawful basis for processing.
  5. Right to Data Portability. You have the right to obtain your Personal Information in a format that makes it easier to reuse it in another context, and to transmit this data to another data controller. This right only applies where processing of the Personal Information that you supplied by the data subject is carried out by automated means, and where you have either consented to processing, or where processing is conducted on the basis of a contract between you and the data controller. This right does not affect the rights and freedoms of others.
  6. Right to Object. You have the right to object to the processing of your Personal Information where there are no overriding legitimate grounds for the processing, where it is processed for direct marketing purposes, where it is unlawfully processed, where it is processed for research purposes. You have the right to object to certain types of processing of your Personal Information where this processing is carried out in the public interest, under official authority, or in the legitimate interests of others.
  7. Right to Restrict. You have the right to request us to restrict the processing of your Personal Information where you have contested the accuracy of your data, where the processing is unlawful, or where you require data for the purpose of a legal claim. Where processing of your Personal Data is restricted, it can be stored by us, but most other processing actions, such as deletion, will require your permission.
2. If you want to exercise any of your rights, please contact us. Additionally, you may have the right to appeal the denial of any of these rights by submitting a form that will be provided to you if we deny a data request. We will not discriminate against any consumer for exercising their rights.
THIRD PARTY SITES AND SERVICES
1. The Services may embed content provided by others or include links to other websites and applications. These companies may collect information about you when you interact with their content or services. Please be aware that we do not control and are not responsible for their information collection, use, and disclosure practices. Please review and understand their privacy practices and policies, if any, before providing any personal data to them or using any of their services. We are not responsible for the content or information of these third-party sites, any products or services that may be offered through them, or any other use of the sites.
CHILDREN’S PERSONAL INFORMATION
1. We do not collect Personal Information of children. If we learn that we have collected any Personal Information from a child, we will take reasonable steps to delete such information. Parents or guardians who believe that their child has submitted Personal Information to us and would like to have it deleted should contact us at [email protected].
ADDITIONAL TERMS FOR EU CITIZENS
1. Controller Information. We, RAPYD – FZCO, are the data controller of your Personal Information that we collect through the Services.
2. Data Transfer. In some cases, it may be necessary for us to transfer your Personal Information to countries outside the European Union (EU)/European Economic Area (EEA) or any other non-EEA country not considered by the European Commission to offer an adequate level of protection. In such cases, apart from all appropriate safeguards that we implement, in any case, to protect your Personal Information, we have put in place additional adequate measures. For example, we have ensured that the recipient is bound by the EU Standard Contractual Clauses (the EU Model Clauses) designed to protect your Personal Information as though it were an intra-EEA transfer. You are entitled to obtain a copy of these measures by contacting us.
3. Data Deletion. If you decide to terminate your agreement and close your Account, we will retain your content for a period of up to 90 days after Account closure to retrieve your billing documents and to contact customer support. During this period, you may also decide to reopen your Account. At the end of this period, we will delete any content remaining in your Account.
4. Data Retention. After Account closure, we may need to keep certain information for an additional period of time for legal and legitimate business purposes. For example, we may retain Personal Information such as your contact information (e.g., name, email address, physical address) and any invoices that we have sent to you (e.g., record of purchases, applicable discounts, and tax information) for tax and accounting purposes. If applicable, we may also retain records of communications with you, as well as relevant logs (e.g., a log of your account closure) for dispute resolution purposes. We further may keep records for preventing fraud and ensuring security, for example in case of misuse of our services or violation of our terms.
ADDITIONAL TERMS FOR US CITIZENS
1. The Personal Information that we may collect, or may have collected from consumers in the preceding twelve months, fall into the following categories established by the California Privacy Rights Act, depending on how you engage with the Services:
  1. Identifiers, such as your name, alias, address, phone numbers, or IP address, your Account log-in information, or a government-issued identifier (e.g., a state-issued ID number, which may be required to verify your identity when completing certain certification courses);
  2. Personal Information as described in subdivision (e) of Section 1798.80 of the California Civil Code, such as a credit card number or other payment information;
  3. characteristics of protected classifications under California or US federal law, such as age, race, or gender, for example if we conduct user surveys or analysis;
  4. commercial information, such as purchase activity;
  5. internet or other electronic network activity information, including content interaction information, such as content downloads, streams, and playback details;
  6. biometric information, such as your voice or appearance, for example if you choose to participate in a demonstration of a speech or image recognition service;
  7. geolocation data, which may in some cases constitute precise geolocation information, such as the location of your device or computer, for example if you enable location services to enhance your experience through event applications we offer;
  8. audio, visual, electronic, or other similar information, including when you communicate with us by phone or otherwise;
  9. professional or employment-related information, for example data you may provide about your business; and
  10. inference data, such as information about your preferences.
2. Profiling Disclosure. We do not engage in profiling of consumers in furtherance of automated decisions that produce legal or similarly significant effects, as those terms are defined under the Colorado Privacy Act.
INQUIRIES AND COMPLAINTS
1. If you interact with the Services on behalf of or through your organization, then your Personal Information may also be subject to your organization’s privacy practices, and you should direct privacy inquiries to your organization.
2. If you have any privacy complaints, please contact us. We try to reply to all legitimate requests within one month from receiving them. In some particular cases (for example, if the matter is particularly complex or if you send us multiple requests), it may take us longer than a month. In such cases, we will notify you accordingly and keep you updated.
3. If you are not satisfied with the outcome of a complaint, or if you are concerned about a potential violation, you also have the option to report the issue or make a complaint to the data protection authority in your jurisdiction.
REVISIONS
1. Our Services change constantly, and so our Privacy Policy may also change. You can see the date on which the latest version of this Cookie Policy was posted. We reserve the right, at our complete discretion, to change, modify, add and/or remove portions of this Privacy Policy at any time. You should check our Websites frequently to see recent changes. You can see the date on which the latest version of this Privacy Policy was posted. Unless stated otherwise, our current Privacy Policy applies to all Personal Information we have about you and your Account. We stand behind the promises we make, however, and will never materially change our policies and practices to make them less protective of Personal Information collected in the past without informing affected customers and giving them a choice.
CONTACT INFORMATION
1. The Services are owned and operated by RAPYD – FZCO, with business address at Premises No: DSO-THUB-G-D-FLEX-G032C, Building Name: THUB, Area Name: Dubai Silicon Oasis, Dubai, UAE. You may contact us by sending correspondence to the foregoing address or by emailing us at [email protected].