Introduction
Welcome to Casabot!
CASABOT FZCO DMCC (“Casabot”, “we”, “our” or “us”) is an AI powered intelligent infrastructure and smart environment technology company focused on building connected systems that make homes, buildings and operational environments more responsive, efficient and intelligently orchestrated. Through a combination of artificial intelligence, automation infrastructure, connected device integrations, edge processing environments and cloud technologies, Casabot enables Users to manage and interact with intelligent environments across residential, hospitality, enterprise and commercial deployments.
This Privacy Policy explains how Casabot collects, uses, processes, stores, transfers, secures and otherwise handles Personal Data and related information in connection with the Casabot platform, website, applications, APIs, connected device ecosystems, automation infrastructure and related services (collectively, the “Services”).
Acceptance
By accessing, registering for, onboarding into, integrating with, deploying or otherwise using the Services, each User acknowledges that they have reviewed, understood and accepted the processing activities, governance practices and operational controls described in this Privacy Policy.
This Privacy Policy forms part of the broader legal, operational and platform governance framework governing access to and use of the Services, together with any applicable Terms of Use, clickwrap agreements, onboarding flows, enterprise deployment agreements, integration documentation, API terms, operational policies and related governance materials made available by Casabot from time to time.
Where the Services are deployed within enterprise, hospitality, smart infrastructure or connected operational environments, additional operational processing structures, deployment specific governance controls, security procedures, enterprise compliance obligations and contractual data governance arrangements may apply depending on the nature of the deployment environment and the Services being provided
The Law
This Privacy Policy has been developed to align with internationally recognized privacy and data governance standards, including the EU General Data Protection Regulation (“GDPR”), UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data (“UAE PDPL”), the ADGM Data Protection Regulations 2021 and evolving global frameworks relating to AI governance, intelligent automation systems, connected infrastructure and operational security.
Who We Are
Casabot is: CASABOT FZCO a free zone company incorporated in the Dubai Multi Commodities Centre ("DMCC") under license No. DMC-982216 with office address at Unit RET-R5-189, Detached Retail R5, Plot No. JLT PH2 RET R5, Jumeirah Lakes Towers, Dubai, United Arab Emirates.
Casabot operates an intelligent automation and connected infrastructure platform integrating AI Systems, automation environments, cloud infrastructure, APIs, connected devices and smart orchestration technologies.
Depending on the nature of the Services, deployment model and contractual structure involved, Casabot may act as:
- a data controller, where Casabot determines the purposes and means of processing Personal Data; or
- a processor, where Casabot processes Personal Data on behalf of enterprise customers deploying Casabot infrastructure within their own operational environments; or
- in limited circumstances, a joint controller alongside enterprise customers, integration partners or infrastructure operators where operational decision making and processing purposes are jointly determined.
Casabot may also engage carefully selected sub processors, cloud infrastructure providers, security vendors, operational service providers and enterprise integration partners in connection with the provision of the Services. Casabot maintains governance procedures designed to oversee such relationships through contractual safeguards, operational reviews, confidentiality obligations, security assessments and vendor governance controls.
For purposes of this Privacy Policy:
- “AI Systems” means machine learning models, intelligent automation technologies, orchestration systems and related computational infrastructure deployed through the Services.
- “Automation Signals” means automated triggers, orchestration instructions, optimization commands or system generated operational directives processed through the Services.
- “Device Data” means telemetry, environmental signals, operational information, automation data or connected device information generated through smart environments, connected infrastructure or integrations.
- “Input” means prompts, instructions, commands, files, content or data submitted to the Services.
- “Output” means AI generated responses, orchestration decisions, automation actions, recommendations or system generated results produced through the Services.
- “Personal Data” means information relating to an identified or identifiable individual.
- “User” means any individual or entity accessing, integrating with or using the Services.
Questions relating to this Privacy Policy or Casabot’s privacy and governance practices may be directed to legal@casabot.com (mailto:legal@casabot.com).
Scope of This Privacy Policy
This Privacy Policy applies to information processed through the Casabot ecosystem, including through [www.casabot.com](http://www.casabot.com), mobile applications, APIs, cloud environments, connected device integrations, AI Systems, enterprise deployment environments, edge processing infrastructure, customer support channels and related digital or operational environments associated with the Services.
This Privacy Policy does not apply to third party platforms, applications, websites, devices or services operated independently by third parties, even where such services may integrate with Casabot.
Information Casabot Collects
The information Casabot collects depends on how Users interact with the Services, the operational environment involved and the functionality enabled within a deployment.
Casabot may collect information provided directly by Users, including names, contact details, account credentials, enterprise onboarding information, authentication information, professional information, subscription details, customer support communications and other information reasonably necessary to provide the Services.
Because the Services are designed around intelligent automation and connected infrastructure, Casabot may also process Device Data generated through connected devices, sensors, smart systems, automation environments and integrations. This may include telemetry data, environmental readings, operational diagnostics, automation triggers, energy usage information, occupancy related signals, infrastructure logs, device identifiers, performance analytics and connected environment information.
Where Users interact directly with AI enabled functionality, Casabot may process Inputs, Outputs, interaction history, behavioral preferences, optimization requests, orchestration instructions and AI interaction data in order to operate, improve and support intelligent automation functionality across the platform.
Casabot also collects technical and operational information associated with website usage, platform interactions, browser sessions, application performance monitoring, analytics environments, device identifiers, IP addresses, infrastructure diagnostics, network information and security related monitoring systems.
Enterprise deployments may additionally involve processing associated with hospitality systems, smart building infrastructure, enterprise automation environments, telecom systems, authorized user management and connected commercial infrastructure.
How Casabot Uses Information
Casabot processes information to operate, secure, maintain, improve and support the Services and broader platform environment.
This includes enabling intelligent automation functionality, orchestrating connected environments, managing AI Systems, authenticating Users, maintaining operational integrity, supporting enterprise deployments, responding to inquiries, improving performance, optimizing automation systems and delivering intelligent orchestration functionality across the Services.
Information may also be processed to support analytics, operational diagnostics, infrastructure optimization, AI lifecycle management, fraud prevention, legal compliance, sanctions screening, platform resilience, enterprise governance obligations, security monitoring and responsible innovation initiatives.
Where permitted under applicable law, Casabot may also process information to communicate product updates, platform developments, enterprise offerings, integration capabilities, technology insights and related communications associated with the Services.
Casabot does not sell Personal Data.
Legal Bases for Processing
Where applicable law requires a lawful basis for processing, Casabot relies on different legal grounds depending on the nature of the processing activity involved.
Certain processing activities are necessary to provide the Services, fulfil contractual obligations, authenticate Users, maintain platform functionality, support enterprise deployments and manage operational relationships.
Other processing activities are undertaken based on Casabot’s legitimate interests in operating secure and commercially effective technology infrastructure, improving AI Systems, maintaining intelligent automation environments, protecting Users, preventing misuse, supporting enterprise customers, protecting platform integrity and developing innovative connected infrastructure technologies.
In certain circumstances, Casabot may rely on consent, including in connection with specific marketing activities, analytics technologies, cookie deployments, optional integrations or specialized processing activities where consent is required by applicable law.
Casabot may also process information where necessary to comply with legal obligations, regulatory requirements, law enforcement requests, export control frameworks, sanctions obligations or broader compliance requirements.
AI Systems, Intelligent Automation and Responsible AI Governance
Casabot utilizes AI Systems and machine learning technologies throughout the platform to support intelligent orchestration, predictive automation, connected environment optimization, smart infrastructure management and operational decision support.
The Services are designed to process and analyze information generated through connected environments in order to improve automation efficiency, operational responsiveness and intelligent infrastructure performance.
Casabot recognizes that AI Systems require ongoing governance, operational oversight and responsible deployment controls. Casabot therefore maintains internal governance frameworks designed to support model oversight, operational accountability, reliability review procedures, risk management, human supervision, AI lifecycle governance and evolving compliance with global AI governance expectations.
Casabot may conduct operational reviews, governance assessments, risk evaluations, escalation procedures, testing protocols and monitoring activities designed to support the safety, reliability and responsible operation of AI enabled functionality.
Where applicable law requires safeguards relating to profiling activities or automated decision making, Casabot implements governance controls including human review procedures, oversight mechanisms, operational escalation structures, risk assessments and review processes designed to support transparency and accountability.
Users acknowledge that AI Systems are probabilistic by nature. Outputs generated through the Services may not always be accurate, complete, uninterrupted or appropriate for every operational environment. Automation decisions may generate unintended outcomes. Connected device actions, environmental controls and orchestration systems may malfunction, operate unexpectedly or produce inaccurate recommendations.
Users remain responsible for supervising critical systems, evaluating Outputs independently and determining whether automation related actions are appropriate for their own environments. Casabot does not guarantee uninterrupted, error free or fail-safe AI functionality across all deployment scenarios.
Casabot does not use Personal Data to train generalized AI models without an appropriate legal basis, contractual authorization or consent where required by law.
Privacy by Design and Security Governance
Casabot maintains operational governance frameworks designed to support privacy by design and privacy by default principles across the architecture and operation of the Services.
This includes implementation of data minimization principles, purpose limitation controls, infrastructure segregation, least privilege access frameworks, layered security governance, retention minimization procedures, operational oversight controls and governance review mechanisms designed to align processing activities with the operational sensitivity of intelligent infrastructure environments.
Casabot continuously evaluates the security, resilience and operational integrity of the platform through technical controls, governance procedures, monitoring systems, access management frameworks, authentication controls, encryption measures, vulnerability management programs and internal review processes.
Security and privacy governance considerations are incorporated into platform design, deployment reviews, enterprise onboarding processes, AI governance structures and infrastructure operations.
Smart Environment Architecture and Edge Processing
The Casabot platform has been architected to support intelligent edge processing environments wherever operationally appropriate.
This means that certain processing activities may occur locally within connected environments rather than exclusively through centralized cloud infrastructure. This architecture is designed to improve performance, reduce unnecessary transmission of sensitive information, support privacy by design principles and enhance resilience across intelligent environment deployments.
Certain processing activities may nevertheless occur through cloud systems, enterprise infrastructure, authorized hosting environments, integration providers or operational service environments where necessary to operate and support the Services.
Cookies and Analytics Technologies
Casabot uses cookies and similar technologies to support platform functionality, maintain session integrity, understand website usage, improve operational performance, maintain security and support intelligent digital environments.
Additional information regarding cookies, analytics technologies and consent management is available within the Casabot Cookie Policy.
Vendor Governance, Sub processors and Sharing of Information
Casabot may share information with carefully selected sub processors, infrastructure providers, enterprise customers, cloud hosting providers, integration partners, operational vendors, professional advisors, auditors, security providers and regulatory authorities where reasonably necessary to operate the Services, maintain platform integrity, support enterprise deployments, comply with legal obligations or protect Users and infrastructure environments.
Casabot maintains governance procedures designed to oversee vendor and sub processor relationships through contractual safeguards, confidentiality obligations, operational reviews, security assessments, restricted access principles, infrastructure governance controls and cross border transfer protections.
Access to Personal Data is limited to personnel, vendors and infrastructure providers with a legitimate operational requirement to access such information.
Enterprise deployments may involve supplementary contractual arrangements, data processing agreements, operational governance structures and customized integration frameworks depending on the deployment model involved.
International Transfers
Casabot may process or transfer information across jurisdictions, including outside the United Arab Emirates or European Economic Area.
Where international transfers occur, Casabot implements safeguards designed to support lawful and secure processing, including Standard Contractual Clauses, contractual protections, transfer impact assessments, encryption controls, organizational safeguards, vendor governance procedures, access management frameworks and operational security controls.
The international nature of cloud infrastructure, enterprise deployments, intelligent automation systems and connected technology environments means that certain cross border processing activities may be operationally necessary to provide the Services.
Data Retention and Information Lifecycle Management
Casabot retains information only for as long as reasonably necessary to operate the Services, maintain platform integrity, comply with legal obligations, support enterprise deployments, preserve security records, resolve disputes, enforce contractual rights and maintain operational resilience.
Retention periods vary depending on the type of information involved, operational sensitivity, enterprise deployment structure, legal obligations, infrastructure requirements and applicable regulatory expectations.
Casabot may retain information across active production environments, archived environments, backup systems, infrastructure logs, operational security records and forensic preservation environments where reasonably necessary to support platform operations, legal compliance, incident response, dispute resolution, regulatory preservation obligations or operational governance requirements.
Where accounts are closed or enterprise deployments terminate, Casabot may maintain staged deletion schedules and retention workflows designed to support operational continuity, legal obligations, security monitoring, fraud prevention, backup integrity and lawful preservation requirements.
Casabot may preserve records where necessary in connection with litigation holds, regulatory inquiries, legal claims, operational investigations, infrastructure security matters or broader legal preservation obligations.
Security Incident and Data Breach Response
Casabot maintains incident response and security governance procedures designed to detect, investigate, contain, remediate and respond to security incidents affecting the Services or related infrastructure environments.
These procedures may include operational monitoring, escalation frameworks, forensic review processes, infrastructure isolation procedures, remediation measures, evidence preservation protocols, operational recovery procedures and coordinated incident response governance structures.
Where required under applicable law, Casabot may notify enterprise customers, affected Users, competent regulatory authorities or other stakeholders regarding security incidents or Personal Data breaches in accordance with applicable legal and regulatory requirements, including GDPR aligned notification timing principles where relevant.
Casabot may also cooperate with law enforcement authorities, regulators, cybersecurity agencies, enterprise customers and infrastructure providers in connection with security incidents, operational threats, unlawful activity or broader platform integrity concerns.
Platform Integrity, Monitoring and Enforcement
Casabot reserves the right to monitor use of the Services, connected environments, infrastructure systems, APIs, operational environments and platform interactions where reasonably necessary to maintain platform integrity, security, legal compliance and operational resilience.
This may include preservation of logs, monitoring of infrastructure environments, investigation of misuse, restriction of access, suspension of processing activities, isolation of systems, enforcement of governance obligations, preservation of records and cooperation with competent authorities or enterprise customers where necessary to protect the integrity of the Services or connected infrastructure environments.
Casabot may investigate suspected misuse, unlawful conduct, security threats, sanctions violations, unauthorized automation activities or conduct reasonably believed to threaten Users, infrastructure environments or platform integrity.
User Rights
Depending on the applicable legal framework, individuals may have rights relating to access, correction, deletion, portability, restriction of processing, objection to processing, withdrawal of consent and information regarding automated decision-making activities.
Casabot is committed to handling privacy-related requests transparently and in accordance with applicable law.
Requests relating to Personal Data or privacy rights may be directed to legal@casabot.com (mailto:legal@casabot.com).
Casabot may require verification of identity before processing requests.
Enterprise Deployments
Enterprise customers may deploy Casabot infrastructure within hospitality environments, commercial buildings, telecom infrastructure, enterprise automation systems and connected operational environments.
Such deployments may involve customized governance frameworks, integration structures, operational controls, supplementary contractual protections, deployment specific security procedures and enterprise data governance requirements depending on the deployment environment involved.
Legal and Regulatory Compliance
Casabot maintains internal governance frameworks designed to support compliance with applicable privacy, cybersecurity, intelligent automation and AI governance obligations.
This includes governance procedures designed to support compliance with GDPR, UAE PDPL, ADGM Data Protection Regulations, cross border transfer obligations, operational security requirements, intelligent automation governance expectations and evolving international AI governance frameworks.
Casabot continues to evaluate emerging regulatory developments relating to AI Systems, connected infrastructure environments, intelligent automation technologies and enterprise operational governance standards.
Children’s Privacy
The Services are not directed toward children and independent use of the platform by minors is not permitted.
Casabot does not knowingly collect Personal Data from children except where legally permitted and appropriately authorized.
Sanctions and Restricted Jurisdictions
Access to certain Services may be restricted in jurisdictions subject to sanctions regimes, export controls or legal restrictions.
Casabot reserves the right to limit, restrict or prohibit access to the Services where necessary to comply with UAE sanctions frameworks, United States sanctions laws, United Kingdom sanctions laws, European Union sanctions regimes, export control restrictions or broader international compliance obligations.
Changes to This Privacy Policy
Casabot may update this Privacy Policy periodically as the Services evolve, operational capabilities expand and legal or regulatory requirements develop.
Updated versions will be published through the website or relevant platform environments.
Continued access to or use of the Services following publication of updated versions constitutes acknowledgement of the revised Privacy Policy.
Contact Us
Questions relating to this Privacy Policy, privacy rights or governance matters may be directed to:
CASABOT FZCO DMCC
Unit RET-R5-189, Detached Retail R5, Plot No. JLT PH2 RET R5, Jumeirah Lakes Towers, Dubai, United Arab Emirates.
[legal@casabot.com](mailto:legal@casabot.com)
[www.casabot.com](http://www.casabot.com)
