1. Who we are

Skilled One is operated by Skilled Tech Solutions L.L.C, United Arab Emirates. We are the controller of the personal data described in this policy: data about our customers and their authorised users, visitors to skilledone.ai, and people who contact us.

Our customers are mostly businesses. When a customer uses Skilled One to run its own website, online store or mailboxes, the customer decides what personal data about its own visitors and clients it collects there. The customer is the controller of that data, and we process it only on the customer’s behalf and on its instructions, to provide the Services. If you are a visitor or client of one of our customers, please contact that business first about your data.

2. Personal data we collect

We collect only what we need to provide and protect the Services:

Account data — your name, email address, mobile number, business name and preferred language, and your password, which we store only in hashed form.
Billing data — your plan, orders, invoices and billing details. Card payments are handled by our payment processing provider; we do not store full card numbers.
Content you give us — your website and store content, images, products, domain and mailbox settings, your messages to our support team, and the instructions you give Maher, our AI assistant.
Technical and usage data — IP address, browser and device type, pages visited, dates and times, and security records such as sign-in attempts.
Email records — for each email we send you: the address, when it was sent and its delivery outcome (for example delivered, bounced or marked as spam).
Contact form data — the name, email address, subject and message you send us through our website.

We do not intentionally collect special categories of personal data (such as health, religious or biometric data), and we ask you not to send it to us.

3. How we use personal data

To create and manage your account and provide the Services you ask for — building, hosting and publishing your site or store, domains and business email.
To keep the Services secure — verifying your email address or mobile number, signing you in, and detecting and preventing fraud, spam and abuse.
To take payments, issue invoices and keep financial records.
To send you the service emails described in the “Email communications” section.
To answer your questions and give you support.
To maintain and improve the Services, using aggregated or de-identified data where we can.
To meet our legal obligations and to establish, exercise or defend legal claims.

We do not sell personal data, and we do not use it to build advertising profiles.

4. Legal bases for processing

We process personal data only where the law allows it, on one or more of these bases:

Contract — to provide the Services you signed up for, and to take the steps you ask for before signing up.
Legal obligation — for example to keep tax and accounting records, or to respond to a lawful request from a competent authority.
Consent — where the law requires it, for example for optional communications. You can withdraw your consent at any time; this does not affect processing that took place before.
Legitimate interests — where the applicable law recognises this basis (such as the GDPR): to keep the platform secure, prevent fraud and abuse, and improve the Services, unless your rights override those interests.

5. Email communications

Transactional emails. We send the emails needed to run your account and the Services: email address verification, password resets, security alerts, invoices and payment notices, service and policy notices, and notifications about activity on your own site — for example, a new message sent through your website’s contact form. These emails are part of the Service, so they cannot be switched off while your account is open.

No marketing through our platform email. We do not send marketing or bulk email through the platform’s transactional email, and we never sell, rent or share email addresses for anyone else’s marketing.

Stopping non-essential email. If we ever send you a non-essential email, such as product news, we will do so only where the law allows, and every such email will include a simple way to stop receiving them. You can also ask us at any time to stop non-essential emails by contacting us through support@skilledone.ai; we act on such requests promptly.

Bounces and complaints. If an email to an address bounces permanently, or its recipient marks it as spam, we automatically stop sending to that address and keep a record of why. If this happens to your own address, contact us and we will restore delivery once the address can receive email again.

If you received an email from Skilled One that you did not expect, tell us through support@skilledone.ai and we will stop.

6. Cookies

We use cookies that are strictly necessary for skilledone.ai and the platform to work — for example to keep you signed in, protect forms against forgery and keep your session secure — and preference cookies that remember choices such as your language and light or dark display.

We do not use advertising cookies or third-party analytics cookies. If we introduce non-essential cookies, we will ask for your consent where the law requires it, and update this policy first.

You can block or delete cookies in your browser settings. If you block strictly necessary cookies, signing in and some features will not work.

We share personal data only when it is needed to provide the Services, and only with:

Service providers that process personal data for us, under contract and on our instructions, in these categories: cloud hosting and infrastructure; email and message delivery (including verification codes by SMS or WhatsApp); payment processing; and AI services that power Maher.
Domain registries and registrars, when you register or transfer a domain through us — they require the registrant details set by the rules of each domain extension.
Professional advisers, such as lawyers and auditors, who owe a duty of confidentiality.
Competent authorities, when the law requires it, or to protect the rights, property or safety of our users, the public or us.
A buyer or successor, if all or part of our business is reorganised, merged or sold — under confidentiality, and only for the purposes set out in this policy.

Our service providers may use personal data only to provide their services to us, and must keep it secure and confidential.

8. International transfers

We are based in the United Arab Emirates and serve customers across the Arab world and beyond, so personal data may be processed outside the country where you live, including outside the UAE, by us or by our service providers.

When we transfer personal data outside the UAE, we do so as the PDPL allows: to countries that provide an adequate level of protection, or with appropriate safeguards, such as contractual commitments that protect the data. Where the GDPR applies, we rely on an adequacy decision or on appropriate safeguards such as standard contractual clauses. You can contact us to learn more about the safeguards we use.

9. How long we keep personal data

We keep personal data only for as long as we need it for the purposes in this policy:

Account and content data — while your account is open. After you close it, we delete or anonymise it within a reasonable period, unless the law requires us to keep it longer.
Billing and invoice records — for the period that UAE tax and commercial laws require.
Security and technical logs — for a limited period, unless we need them to investigate an incident.
Suppression records (addresses that bounced, complained or asked us to stop) — for as long as we need them to keep honouring that request.
Contact form messages — for as long as we need them to handle your enquiry and any follow-up.

10. Security

We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit (HTTPS), hashed passwords, access limited to the people who need it, logging and monitoring, and backups.

No system is completely secure. If a personal data breach affects your rights, we will notify you and the competent authorities where the law requires.

11. Your rights

Depending on the law that applies to you, you have the right to:

know how we process your personal data, and get a copy of it;
have inaccurate or incomplete data corrected;
have your data erased when we no longer need it, or when the law requires it;
restrict our processing of your data in the cases the law allows;
object to processing, including — at any time — to direct marketing;
receive your data in a structured, machine-readable format, and have it transferred to another provider;
object to decisions based solely on automated processing that have legal or similarly significant effects on you;
withdraw your consent at any time, where we rely on consent.

How to exercise your rights: contact us through support@skilledone.ai, preferably from the email address on your account. You can also update most account details yourself in your dashboard. We may ask you to confirm your identity before we act. We respond within 30 days, free of charge; if the law allows more time for a complex request, we will tell you why.

You also have the right to complain to a data protection authority — in the UAE, the UAE Data Office — or to the authority where you live or work. We would appreciate the chance to resolve your concern first.

12. Children

Skilled One is a service for businesses and adults. It is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

Customers whose own sites are aimed at children are responsible for complying with the laws that apply to them.

13. Changes to this policy

We may update this policy as our Services or the law change. We will show the new date at the top of this page and, for significant changes, tell you by email or through the platform before they take effect.

14. Contact us

Skilled Tech Solutions L.L.C, United Arab Emirates.

For privacy questions or requests, contact us through support@skilledone.ai.