Privacy Policy

GRANDBAZAR.AI ("we", "us") operates the Grand Bazar AI Visibility Index at grandbazar.ai. This policy explains what personal data we collect when you use the Index or submit a request, why, and the rights you have. It is written to align with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and the EU/UK GDPR.

1. Who we are

The publisher and data controller of the Index is GRANDBAZAR.AI (grandbazar.ai). For any privacy question or to exercise a right, contact marsel@trygrandbazar.com.

2. What we collect

Contact data you give us — your email address (and, if you provide them, name, business/clinic name, website) when you request a free measurement, reserve monitoring, or contact us.
Request content — what you write in a form or a correction/re-measurement/delisting request.
Technical/usage data — standard server logs (IP, user-agent, timestamps) and privacy-respecting analytics needed to run and secure the site.

The Index itself measures the outputs of third-party AI assistants about businesses. Business names in the Index are commercial information about organizations, not personal data about you.

3. Why we use it, and our legal basis

To deliver the free measurement, reservation and monitoring you asked for — consent / performance of your request.
To send you the report, the weekly digest and service messages — consent; you can unsubscribe at any time.
To answer correction/delisting requests and keep an audit trail — legal obligation / legitimate interest.
To secure, debug and improve the service — legitimate interest.

4. Who we share it with (processors)

We do not sell personal data. We use vetted service providers who process data on our behalf under contract: cloud hosting and database (Supabase, Vercel), transactional email (Resend), and the AI measurement providers used to produce the Index. Providers may process data outside your country; where they do, we rely on appropriate safeguards (e.g. standard contractual clauses).

5. Retention

We keep contact and request data only as long as needed for the purpose above and to meet legal/audit obligations, then delete or anonymize it. Measurement evidence is retained per the published Methodology.

6. Your rights

Subject to applicable law you may request access, correction, erasure, restriction, portability, and objection to processing, and you may withdraw consent at any time (this does not affect prior processing). To exercise any right, email marsel@trygrandbazar.com. You also have the right to complain to your data-protection authority.

7. Security

We apply reasonable technical and organizational measures (encryption in transit, access controls, least-privilege keys) to protect personal data. No method is perfectly secure, but we work to protect your information and notify where required if an incident occurs.

8. Children

The service is for businesses and adults; we do not knowingly collect data from children.

9. Changes

We may update this policy; the version and date at the top will change. Material changes will be notified where appropriate.

10. Contact

Privacy: marsel@trygrandbazar.com · Corrections: marsel@trygrandbazar.com · Publisher: GRANDBAZAR.AI · grandbazar.ai