This text is under legal review and may change. Last updated: 2026-11-12.

ProtectMyDataSolutions — Privacy Policy

Applies to: all ProtectMyDataSolutions products (listed in the Terms of Service)

1. Who is responsible for your data

ADVANCED CREATIVE AI TECHNOLOGY - FZCO ("ACAI Technology", "we", "us"), licence number 6255, IFZA Business Park, DDP, PO Box 342001, Dubai, United Arab Emirates, is the controller of the personal data described here.

Contact for privacy questions: support@protectmydatasolutions.com. General company contact: info@acai-technology.com.

2. Our approach: privacy by design

We built these products to collect as little as possible about you.

• Most products let you sign up without an email address or phone number. You use a password and a 12-word recovery key.
• Your 12-word key is created on your device and is never sent to us.
• Calls, video, screen sharing, chat, messages and files are end-to-end encrypted. We cannot read, hear or decrypt them.
• For paid plans, some products use blind signatures so your payment is not linked to your encrypted identity.

Because of this, there is a lot we simply do not have.

3. What we collect, and why

Account data. A random account identifier, your plan, and, if you choose to add one, an optional email address. Your password is stored only in a hashed form; we never store it in plain text. We use this to run your account and to let you sign in.

Payment data. When you buy a paid plan, the payment is handled by our providers, Stripe (card) and NOWPayments (cryptocurrency). We receive a confirmation that a payment or plan is valid, not your full card number. Where blind signatures are used, we cannot link the payment to your encrypted identity.

Your content. Calls, messages, files and mail content are end-to-end encrypted and, where stored, stored encrypted. We cannot access the content.

Technical and security data. To keep the services running and safe, we process limited technical data such as an IP address and basic device or app information, for security, abuse prevention and troubleshooting.

Per-product data:

• MyProtectedVPN. We operate the VPN on a no-logs basis: we do not keep logs of the websites you visit or the content of your traffic. We process the minimum needed to run the service and enforce the device limit.
• ProtectMyPersonalID. The identity health check sends the identifier you enter (for example an email address) to third-party breach-data sources to check whether it appears in a known breach. The ID Vault stores only a cryptographic fingerprint on a public ledger; no personal data is put on-chain. Verified ID is carried out by an accredited verification partner, which processes your identity document and a face check; we keep only the result or the credential status, not the raw documents, and identifying data is kept off-chain.
• ProtectMyFiles. Files are encrypted. For a signed document we may process signature metadata, and we anchor a cryptographic hash of the document on a public ledger. The hash is anchored, not the document or its content.
• ProtectMyMail. The extension adds encryption and verification to your existing mailbox. The secure-link gateway processes the minimum needed to deliver a secure link (for example who requested it and when), not the content of your messages.
• Partner/Referral portal. This requires an email address and the details needed to pay your commission.

Referral visits. If you arrive through a partner's referral link and accept cookies, we record that a visit came through that partner: the partner's code, the site and the time, but no name and no address. If you then create an account on that site within 60 days, we record that the sign-up came through that partner. Partners see only totals, never who signed up. If you withdraw your consent, the referral cookie is removed from your device.

Support. If you contact support, we process what you send us so we can help.

4. Legal bases (where GDPR applies)

We rely on: performing our contract with you (to provide the products), our legitimate interests (to keep the services secure and prevent abuse), your consent (for an optional email and any marketing), and legal obligations (for example tax and accounting).

5. Who we share data with

We use service providers that process data on our behalf, including:

• Stripe and NOWPayments, for payments.
• Our identity verification partner, for Verified ID.
• Cloudflare, for hosting and content delivery.
• Google Workspace, for our support email.

We do not sell your personal data. We share data only as needed to run the products, to comply with a valid legal obligation, or to protect our rights and users' safety.

6. International transfers

Our providers and servers may be located outside your country, including outside the UAE and the EU. Where the law requires it, we use appropriate safeguards for these transfers.

7. How long we keep data

We keep account data while your account is active and for as long as needed for the purposes above, then delete or anonymise it. Encrypted content stays under your control. We keep what the law requires us to keep (for example invoices).

8. Your rights

Depending on where you live (for example under the EU GDPR or the UAE PDPL), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these, contact support@protectmydatasolutions.com.

Please note: because content is end-to-end encrypted and your 12-word key is only on your device, there is content and key material we do not hold and therefore cannot access, provide or recover on your behalf.

You may also have the right to complain to your data protection authority.

9. Children

The products are not intended for children under 13. If you are younger than the age of digital consent in your country, you may use the free products only with a parent's or guardian's consent, as set out in the Terms. The School Learning Platform is used through schools, which handle consent for pupils.

10. Security

We protect your data with end-to-end encryption, encryption in transit and at rest, access controls and other measures. No system is perfectly secure, but we design for data minimisation so that a breach exposes as little as possible.

11. Changes to this Policy

We may update this Policy. If a change is significant, we will give reasonable notice. The "last updated" date shows the current version.

12. Contact

Privacy questions and requests: support@protectmydatasolutions.com.

Last updated: 2026-11-12