Privacy Policy

Last updated: March 6, 2026

CAASCOM INFORMATION TECHNOLOGY L.L.C ("CAASCOM," "D50 AI," "we," "us," or "our") operates the D50 AI platform at d50.ai and related services. D50 AI is a brand owned and operated by CAASCOM INFORMATION TECHNOLOGY L.L.C, a company registered in the United Arab Emirates. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. This policy applies to all users of our platform worldwide, including users in the European Economic Area (EEA), United Kingdom, United States, and UAE.

1. Information We Collect

1.1 Account Information

When you create an account, we collect your name, email address, company name, job title, phone number (optional), and billing information (processed securely through our payment provider, Stripe — we do not store full credit card numbers).

1.2 Usage Data

We automatically collect information about how you interact with our platform, including: pages visited, features used, time spent on pages, click patterns, AI-generated content metadata, campaign performance data, credit consumption, IP address, browser type, device information, operating system, and referring URLs.

1.3 Content You Provide

We process and store content you create or upload through our platform, including: scripts, campaign configurations, lead lists, recruitment data, candidate information, AI-generated assets (text, images, audio, video), ad creatives, landing page content, and any other materials submitted through the platform.

1.4 Third-Party Platform Data

When you connect external accounts (e.g., Google Ads, Meta Ads, LinkedIn Ads), we receive access tokens and ad account information necessary to manage your campaigns. We access only the data required to provide the services you have authorized.

1.5 Communication Data

If you use our AI calling features, we may process call recordings, transcripts, and metadata (call duration, recipient information) as necessary to provide and improve our services. You are responsible for obtaining all required consents from call recipients.

1.6 Cookies and Tracking Technologies

We use essential cookies to maintain your session and preferences. We may also use analytics cookies to understand platform usage. For details, see Section 8 below.

2. Lawful Basis for Processing (EEA/UK Users)

If you are located in the EEA or UK, we process your personal data on the following legal bases:

PurposeLawful Basis
Providing and maintaining our servicesPerformance of contract
Processing payments and subscriptionsPerformance of contract
Communicating with you about your accountPerformance of contract
Improving platform performance and featuresLegitimate interest
Analyzing usage patternsLegitimate interest
Preventing fraud and ensuring securityLegitimate interest
Complying with legal obligationsLegal obligation
Marketing communications (where applicable)Consent

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our AI-powered services across all platform engines (Content, Lead Generation, Recruitment, AI Agents)
  • Process transactions and manage your subscription and credit balance
  • Generate AI content, run campaigns, and execute automated workflows on your behalf
  • Communicate with you about your account, updates, and support requests
  • Analyze usage patterns to improve platform performance and user experience
  • Detect, prevent, and address technical issues, fraud, and security threats
  • Comply with legal obligations and enforce our Terms of Service
  • Generate aggregated, anonymized analytics to improve our services (this data cannot be used to identify you)

We do not sell your personal data to third parties. We do not use your content to train AI models without your explicit consent.

4. Third-Party Services and Data Sharing

We share data with third-party services only as necessary to provide our platform. Our integrations include:

  • AI Providers: OpenAI, ElevenLabs, Cartesia, AssemblyAI, and HeyGen — for AI content generation, voice synthesis, transcription, and avatar video creation. Content submitted for AI processing is transmitted to these providers under their respective data processing terms.
  • Advertising Platforms: Google Ads, Meta (Facebook/Instagram) Ads, and LinkedIn Ads — for campaign management via OAuth-authorized connections. We access only the data you authorize.
  • Communication: VAPI — for AI-powered calling services. Call data is processed in accordance with VAPI's privacy policy.
  • Payment Processing: Stripe — for subscription billing and credit purchases. Stripe processes payment data under PCI DSS standards. We do not store full credit card numbers.
  • Cloud Storage: Amazon Web Services (AWS S3) — for secure file storage with encryption at rest and in transit.
  • Social Media: Uploadpost — for multi-platform content distribution.

Each third-party service operates under its own privacy policy and data processing terms. We encourage you to review their respective policies. We require our service providers to protect your data and process it only for the purposes we specify.

We may also disclose your information: (a) to comply with a legal obligation, court order, or governmental request; (b) to protect our rights, property, or safety, or that of our users or the public; (c) in connection with a merger, acquisition, or sale of assets (you will be notified of any such change); (d) with your consent.

5. Data Storage and Security

Your data is stored on secure servers hosted by Amazon Web Services (AWS) with industry-standard encryption at rest (AES-256) and in transit (TLS 1.2+). We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction, including:

  • Encrypted database connections (MySQL and MongoDB)
  • Role-based access controls for internal systems
  • Regular security assessments and monitoring
  • Secure authentication and session management
  • Automated threat detection and logging

While we implement industry-standard security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your data as follows:

Data TypeRetention Period
Account informationDuration of active account + 30 days after termination
AI-generated contentAccording to your subscription plan; deleted 30 days after account termination
Campaign data and analyticsDuration of active account + 90 days
Payment and billing records7 years (legal/tax compliance)
Usage logs and analytics12 months (rolling)
Call recordings (if applicable)90 days unless you request earlier deletion
Support communicationsDuration of active account + 12 months

You may request deletion of your data at any time by contacting us at soltane@d50.ai. Upon account termination, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., tax records, dispute resolution).

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States (where our cloud infrastructure and AI providers operate) and the UAE (where our company is based). For users in the EEA/UK, we ensure appropriate safeguards for international data transfers through: (a) EU Standard Contractual Clauses (SCCs) with our service providers; (b) adequacy decisions where applicable; (c) contractual protections equivalent to those required under GDPR. By using our platform, you acknowledge and consent to such transfers, subject to the protections described herein.

8. Cookies and Tracking

We use the following types of cookies:

  • Essential cookies: Required for platform functionality (session management, authentication, security). These cannot be disabled.
  • Analytics cookies: Help us understand how the platform is used and improve user experience. You can opt out of these via your browser settings.
  • Preference cookies: Remember your settings and preferences for a better experience.

We do not use third-party advertising cookies on the D50 AI platform itself. You can control cookie settings through your browser preferences. Disabling essential cookies may affect platform functionality.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

For all users:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data
  • Data portability: Request a copy of your data in a structured, machine-readable format
  • Objection: Object to processing of your data for certain purposes

Additional rights for EEA/UK users (GDPR/UK GDPR):

  • Restriction: Request restriction of processing under certain conditions
  • Withdraw consent: Where processing is based on consent, withdraw consent at any time
  • Lodge a complaint: File a complaint with your local supervisory authority
  • Automated decision-making: Request human review of decisions made solely by automated means that significantly affect you

Additional rights for California residents (CCPA/CPRA):

  • Right to know: Request disclosure of categories and specific pieces of personal information collected
  • Right to opt-out: Opt out of the sale or sharing of personal information (note: we do not sell personal information)
  • Right to limit: Limit use of sensitive personal information
  • Non-discrimination: We will not discriminate against you for exercising your privacy rights

Rights under UAE Federal Decree-Law No. 45 of 2021:

  • Access, correction, and deletion of personal data
  • Restriction and objection to processing
  • Data portability
  • Withdrawal of consent

To exercise any of these rights, contact us at soltane@d50.ai. We will respond within 30 days (or within the timeframe required by applicable law). We may need to verify your identity before processing your request.

10. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will: (a) notify the relevant supervisory authority within 72 hours of becoming aware of the breach (where required by applicable law); (b) notify affected individuals without undue delay if the breach is likely to result in a high risk to their rights; (c) document all breaches, including their effects and remedial actions taken.

11. Children's Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a minor, we will take immediate steps to delete such information. If you believe a minor has provided us with personal data, please contact us at soltane@d50.ai.

12. Automated Decision-Making

Our platform uses AI and automated processing to generate content, analyze data, screen candidates (Recruitment Engine), and optimize campaigns. These automated processes do not make legally binding decisions about you without human oversight. If you believe an automated decision has significantly affected you, you may contact us to request human review.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by: (a) posting the new policy on this page; (b) updating the "Last updated" date; and (c) sending notice to your account email for material changes. Your continued use of the platform after changes take effect constitutes acceptance of the updated policy. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your data rights, please contact us:

CAASCOM INFORMATION TECHNOLOGY L.L.C (D50 AI)
Data Protection Contact: soltane@d50.ai
Website: https://d50.ai

If you are located in the EEA and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.