Last updated: 7 AUGUST 2026
This Privacy Policy explains how Conseal collects, uses and protects information when you use conseal.ae, app.conseal.ae and related services (the "Service").
The Service is operated by Fertile Seed IT Solutions EST. ("Conseal", "we", "us"), an establishment licensed in Dubai, United Arab Emirates under Trade Licence No. 1112101, registered at [TODO: registered address], Dubai, United Arab Emirates.
We act as controller for account, billing and usage data. We act as processor for the business content you put into the Service — your company brief, meeting discussions, tasks and deliverables — which remains yours.
Privacy contact: privacy@conseal.ae
Conseal is an AI co-founder platform. You describe your business; a CEO agent and specialist agents hold meetings with you, propose and execute tasks, and produce deliverables that you review, approve and store in your Vault. You are always the author and always in control — agents pause and ask before acting on decisions that are yours to make.
Doing this requires sending your content to third-party AI model providers. Section 6 sets out exactly what that means.
| Category | Examples |
|---|---|
| Account | Name, email address, password (hashed, never stored in plain text), account settings, language |
| Company profile | Company name, pitch/brief, sector, stage, target customer, and anything else you enter about your business |
| Content | Meeting messages, instructions, uploaded files and references, tasks, roadmap entries, generated deliverables, Vault items, brand assets, private founder notes |
| Billing | Plan, subscription status, credit balance, top-up and transaction history, invoices. Card details go directly to our payment processor — we never see or store your full card number. |
| Support | Emails, bug reports, feedback |
We do not ask for government ID numbers, and we do not knowingly collect sensitive personal data (health, biometric, religious or political data). Please do not put such data into meetings, briefs or uploads.
Under UAE Federal Decree-Law No. 45 of 2021 ("PDPL"), and the GDPR/UK GDPR where you are in the EEA or UK:
| Purpose | Lawful basis |
|---|---|
| Creating and running your account | Performance of a contract |
| Running agents, meetings, tasks and producing deliverables | Performance of a contract |
| Metering credits, taking payment, issuing invoices | Performance of a contract / legal obligation |
| Security, abuse prevention, rate limiting, fraud detection | Legitimate interests |
| Product analytics and improvement | Legitimate interests, or consent where required |
| Service emails (billing, security, outages, changes) | Performance of a contract |
| Marketing emails and newsletters | Consent — withdrawable at any time |
| Tax, accounting and regulatory record-keeping | Legal obligation |
Conseal produces AI-generated recommendations, plans and deliverables. These are advisory outputs presented to you for review and approval — they do not make binding decisions about you and produce no legal or similarly significant effect on any individual. Nothing in the Service constitutes legal, financial, tax, investment or medical advice.
Consistent with PDPL Article 18, no decision producing legal consequences for you is taken by automated processing alone. You approve or reject every deliverable.
This is the section most people want, so it is written plainly.
To generate output, your content is transmitted to third-party AI providers. When an agent runs, the relevant parts of your company brief, meeting history, task instructions and attached references are sent to the model provider's API and the response is returned to you.
Our commitments:
Current AI providers:
| Provider | Used for | What is sent |
|---|---|---|
| Anthropic PBC (US) | All agent reasoning, meetings, tasks and written deliverables | Company brief, relevant meeting and task history, instructions, attached references |
| Higgsfield (US / global) | Image and video generation, where you use it | The generation prompt and any seed image you supply |
Web search. Some agent turns use the model provider's built-in web search tool. When this runs, a search query derived from your request is sent to that provider's search service and the resulting public web pages are read back into the answer. You can turn web search off in Settings.
If we add or change providers materially, we will update this policy and notify account holders.
Our infrastructure and AI providers operate outside the UAE. Transfers are made under PDPL Articles 22–23, relying on jurisdictions offering an adequate level of protection or on contractual safeguards with the recipient. For EEA/UK customers, transfers are governed by Standard Contractual Clauses. A copy of the relevant safeguards is available on request.
| Data | Kept for |
|---|---|
| Account and company profile | While your account is active |
| Meetings, tasks, deliverables, Vault | While your account is active |
| After account deletion | Deleted or irreversibly anonymised within 30 days, except as below |
| Billing and tax records | 5 years, as required by UAE tax and commercial law |
| Security and access logs | Up to 12 months |
| Backups | Purged on the normal backup rotation, up to 35 days |
You can export your Vault deliverables before deleting your account. We recommend you do.
Subject to the PDPL (and GDPR/UK GDPR where applicable), you may:
You can update your account details and export individual deliverables from your Vault at any time in Settings. For everything else — a full copy of your data, correction, deletion or account closure — email privacy@conseal.ae. We respond within 30 days and may need to verify your identity first.
No system is perfectly secure. If a breach occurs that poses a risk to your rights, we will notify the UAE Data Office and affected users without undue delay, in line with prevailing practice of within 72 hours of becoming aware.
You control what goes into Conseal. Please do not enter:
If you use Conseal to process personal data of your own customers or staff, you are the controller of that data and we act as your processor. A Data Processing Addendum is available at privacy@conseal.ae.
Conseal is for business use by adults. It is not directed at anyone under 18 and we do not knowingly collect their data. If we learn we have, we will delete the account and its data.
We may update this policy. The "Last updated" date reflects the current version. For material changes we will email account holders and give at least 14 days' notice before the change takes effect.
Fertile Seed IT Solutions EST. — Trade Licence No. 1112101
[TODO: registered address], Dubai, United Arab Emirates
privacy@conseal.ae