privacy policy
The privacy policy explains how Content Hub AI Consultancies L.L.C. (“hubcontent”, “we”, “us”) collects, uses, shares and protects personal data when you use the website at https://hubcontent.ai and our AI creative studio and related services (the “Service”). It should be read together with our Terms of Use.
We are committed to handling personal data in accordance with applicable data-protection laws, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) and, where it applies to our processing, the EU/UK General Data Protection Regulation (GDPR).
1. who we are (data controller)
The controller responsible for your personal data is Content Hub AI Consultancies L.L.C., registered office Dubai, United Arab Emirates. You can contact us about privacy at hello@hubcontent.ai.
2. personal data we collect
We collect the following categories of personal data:
| Category | Examples | Source |
|---|---|---|
| Account & identity | Name, email address, password, organisation/client name, role | You, at registration |
| Billing & transactions | Plan, subscription status, billing details, partial card data and transaction IDs held by our payment processor | You and payment processor |
| User Content & uploaded media | Prompts, briefs, project text, product photographs, character references and audio you upload | You |
| Generated Output | Images, product cards, scenes, audio and videos generated for you, and associated prompts and metadata | Generated by the Service |
| Usage & technical | IP address, device and browser type, language, pages and features used, generation events, timestamps, logs | Automatically |
| Cookies & similar | Identifiers set via cookies, local storage and similar technologies | Automatically |
| Communications | Messages, support requests and correspondence with us | You |
Media that identifies people: Some Inputs you upload - such as product photos containing people, or character references - may include images, likeness or voice data of identifiable individuals. Where such data reveals special categories of information, or constitutes biometric data used to uniquely identify a person, it may attract enhanced protection. You are responsible for having a lawful basis and any required consents before uploading such material (see Terms of Use, clause 6).
3. how we use personal data
We use personal data to:
- create and administer your Account and authenticate you;
- provide, operate and maintain the Service, including generating Output from your Inputs and synchronising and storing your Projects;
- process payments, manage subscriptions and prevent payment fraud; provide customer support and respond to your requests;
- provide customer support and respond to your requests;
- monitor, secure, troubleshoot and improve the Service, including aggregate and statistical analysis;
- detect, prevent and address abuse, security incidents, prohibited use and violations of our Terms;
- send service and transactional communications, and - where permitted - product updates and marketing you can opt out of; and
- comply with legal obligations and enforce our rights.
4. legal bases for processing
Where the GDPR applies, we rely on the following legal bases:
- Contract - to provide the Service you have requested and administer your Account and payments;
- Legitimate interests - to secure, improve and promote the Service, prevent abuse and fraud, and run our business, balanced against your rights;
- Consent - for non-essential cookies, certain marketing, and any processing of special-category data you choose to upload; you may withdraw consent at any time;
- Legal obligation - to comply with applicable law, including tax and accounting obligations.
Under the UAE PDPL we rely on equivalent bases, including your consent, performance of a contract, and our legitimate interests as permitted by that law.
5. ai processing and model training
5.1 Automated generation
The Service uses AI Models to process your Inputs and produce Output. This involves automated processing of the content you submit. Generation is performed at your request and under your control; it does not produce legal or similarly significant effects about you.
5.2 Use of your content for training
We do not use your private User Content to train foundation AI Models for third parties. We may use aggregated, de-identified or anonymised data, and limited operational data, to monitor, debug and improve the Service. Where we would like to use identifiable User Content to improve our own models, we will rely on a separate, opt-in consent.
5.3 Third-party models
When you use features powered by third-party AI Models (such as Seedance, GPT Images and Nano Banana), the relevant Inputs are transmitted to and processed by those providers under their own terms and privacy practices. Their handling of data - including any use for their own model training - is governed by their policies, which we encourage you to review.
6. how we share personal data
We share personal data with:
- Service providers / processors - cloud hosting and storage, AI model providers (e.g. Seedance/ByteDance, OpenAI for GPT Images, Google for Nano Banana), analytics, email, and payment processors, who process data on our instructions;
- Recipients of Client Links - anyone you choose to share published Output with via a public link;
- Collaborators - other users you invite to a Project;
- Professional advisers and authorities - where necessary to comply with law, respond to lawful requests, or protect our rights and the safety of others;
- Successors - in connection with a merger, acquisition, financing or sale of assets, subject to this Policy.
We do not sell your personal data
7. international data transfers
We and our providers may process personal data in countries other than your own, including the United Arab Emirates, the European Economic Area, the United States, and - in connection with certain AI Models such as Seedance - other jurisdictions including China. These countries may not provide the same level of data protection as your home country. Where we transfer personal data internationally, we use appropriate safeguards required by applicable law, such as the European Commission's Standard Contractual Clauses, adequacy mechanisms, or the transfer conditions permitted under the UAE PDPL. You may contact us for more information about these safeguards.
8. cookie and tracking notice
8.1 What they are
Cookies and similar technologies (local storage, pixels, SDKs and device identifiers) are small files or identifiers stored on your device. We use them to operate the website and Service, remember your preferences, keep you signed in, secure the Service, and understand how it is used.
| Category | Purpose | Consent |
|---|---|---|
| Strictly necessary | Authentication, session management, security, load balancing and core functionality. The Service cannot work without these. | Not required |
| Functional / preferences | Remember settings such as language and interface preferences. | Consent where required |
| Analytics / performance | Measure usage, diagnose errors and improve the Service (aggregated where possible). | Consent where required |
| Marketing | Measure campaigns and, where applicable, show or attribute advertising. Used only if enabled. | Consent required |
8.2 Managing cookies
Where required by law, we ask for your consent to non-essential cookies through a cookie banner, and you can change or withdraw your choices at any time via the cookie settings link on the website. You can also block or delete cookies through your browser settings, though some features may not function properly as a result.
8.3 Do Not Track / GPC
Browser 'Do Not Track' signals are not yet standardised; where legally required, we honour recognised opt-out signals such as Global Privacy Control.
8.4 Third-party cookies
Some cookies are set by the third-party providers listed in section 6; their use of data is governed by their own policies.
9. data retention
We retain personal data for as long as needed to provide the Service and for the purposes set out in this Policy. In general: Account and Project data is retained while your Account is active; after termination, Projects, Assets and Output may be deleted after a reasonable wind-down period; billing records are kept for the period required by tax and accounting law; and logs and security data are kept for a limited period. We may retain anonymised or aggregated data indefinitely. We will delete or anonymise personal data when it is no longer needed, subject to legal retention requirements.
10. security
We implement appropriate technical and organisational measures designed to protect personal data, including encryption in transit, access controls, and monitoring. No system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential. If we become aware of a personal-data breach that is likely to result in a risk to you, we will notify the relevant authority and affected individuals as required by applicable law.
11. your rights
Subject to applicable law, you may have the right to:
- access the personal data we hold about you and obtain a copy;
- rectify inaccurate or incomplete data;
- erase your data in certain circumstances;
- restrict or object to certain processing, including direct marketing;
- data portability, where applicable;
- withdraw consent at any time, without affecting prior lawful processing; and
- lodge a complaint with a supervisory authority - in the UAE, the UAE Data Office; in the EEA, your local data-protection authority.
To exercise your rights, contact hello@hubcontent.ai. We may need to verify your identity. We will respond within the timeframe required by applicable law. Note that some User Content shared via Client Links or with collaborators may not be fully retrievable once distributed.
12. children
The Service is not directed to, and is not intended for use by, children under 18. We do not knowingly collect personal data from children. If we learn that we have collected such data, we will delete it
13. third-party sites and services
The Service and Client Links may contain links to or integrations with third-party sites and services that we do not control. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. Please review their policies.
14. changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will provide reasonable notice (for example, by email or in-product notice) before they take effect, and we will update the 'Last updated' date above. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.
15. contact us
Content Hub AI Consultancies L.L.C.
Registered office: Dubai, United Arab Emirates.
Privacy enquiries and rights requests: hello@hubcontent.ai.