Privacy Policy

Who we are

36nine is a strategy-led AI transformation company based in Dubai, United Arab Emirates, serving clients across the GCC. Our office is at Bayswater Tower, Dubai, UAE.

The entity responsible for your personal information (the controller) is Pearl Bridge Investment, trading as 36nine AI Transformation Partners, a company registered in mainland Dubai, United Arab Emirates. For any data protection matter, reach us at connect@36nine.ai.

Information we collect on this website

We collect only what we need to respond to you and run our business:

• Details you provide. When you submit the inquiry form or book a session, we collect your name and work email, and, depending on what you choose to share, your company, role, phone number, country, team size, industry, and a short description of your workflow.
• Scheduling information. If you book a strategy session, our scheduling provider collects the details needed to arrange and confirm the meeting.
• Technical information. Like most websites, our hosting and the tools we embed may automatically receive basic technical data such as IP address, device and browser type, and pages viewed, used to keep the site secure and working.
• Cookies. With your consent, Google Analytics uses cookies to measure how the site is used. Some features, such as the embedded booking widget, may also set cookies. See the Cookies section below.

Information we collect in 36nine SEO

36nine SEO is a business tool, available by invitation, for researching and tracking how websites perform in search. When you use it, we collect:

• Account details. your name, email address and password (stored only as a secure hash), and your workspace membership.
• Workspace and invitation data. the workspaces and projects you create, and the email addresses of people you invite.
• Research data. the domains, keywords and pages you research, track or audit, and the results we fetch for them.
• Google data. if you connect a Google account, the data described in the next section.
• Assistant conversations and reports. the questions you ask the in-app AI assistant, its answers, and the reports and dashboards you create.
• Security logs. sign-in records such as IP address, device and browser, used to keep accounts secure.

36nine SEO and your Google data

If you choose to connect a Google account to 36nine SEO, we request read-only access to Google Analytics and Google Search Console. 36nine SEO cannot change anything in your Google accounts.

• What we access. read-only Google Analytics and Search Console reports for the properties and sites you choose, plus your Google account email address and basic profile, used only to label which Google account is connected.
• How we use it. only to show your search and traffic performance inside 36nine SEO, build the dashboards and reports you ask for, and answer your questions through the in-app AI assistant. We do not use Google data for advertising, and we do not sell it.
• AI processing. when you ask the assistant about your data, the relevant figures are sent to the AI model provider that writes the answer, through our AI gateway, OpenRouter. They are used only to answer your request. We do not use Google data to train AI models.
• Storage. access tokens are stored encrypted. Most data is fetched from Google when you view it. Some search summaries are cached for up to 90 days. Reports and assistant conversations you create are kept until you delete them or your account.
• Who can see it. members of your workspace who can open the project, and anyone you send a report share link to. We share it only with the service providers needed to run 36nine SEO, listed below.
• Disconnecting. you can remove the Google account in 36nine SEO settings, and you can revoke 36nine SEO's access at any time at myaccount.google.com/permissions. Deleting your 36nine SEO account deletes your data.
• Limited Use. 36nine SEO's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use your information

We use the information described above to:

• respond to your inquiry and match you with the right person;
• arrange, confirm and prepare for a strategy session;
• provide, secure and support 36nine SEO, including the features you use in it;
• provide, maintain and improve this website and our services;
• keep records and meet our legal and regulatory obligations.

Our lawful basis

For inquiries and bookings, we rely on your consent, which you can withdraw at any time, and on our legitimate interest in responding to inquiries and running our business. For 36nine SEO, we process your data to provide the service you signed up for, and we access Google data only with your explicit authorization, which you can withdraw at any time. Website analytics through Google Analytics runs only with your consent. Security logs rely on our legitimate interest in protecting accounts. We do not sell your personal information, and we do not use it to make solely automated decisions that produce legal effects about you.

Who we share it with

We share your information only with service providers that process it on our behalf, under contract and only as needed to deliver the service:

• HubSpot. our customer relationship management system, where website inquiries are recorded.
• Resend. delivers inquiry notifications to our team, and invitation and password emails for 36nine SEO.
• Calendly. the scheduling tool used to book strategy sessions.
• Google Analytics. website analytics, used only if you accept analytics cookies, to understand which pages are read and whether inquiries arrive. Advertising features are switched off.
• Hostinger. hosts this website and 36nine SEO.
• OpenRouter, and the AI model providers it routes to (currently OpenAI). generate the answers of the 36nine SEO assistant from the data relevant to your question.
• DataForSEO. receives the domains and keywords you research in 36nine SEO, and returns search data for them.
• Cloudflare and Context.dev. load and render public web pages when you run a site audit in 36nine SEO.
• Google. provides the Analytics and Search Console data you choose to connect.

International transfers

Some of the providers above are based outside the United Arab Emirates, mainly in the United States and the European Union, so handling your information may involve transferring it abroad. Where that happens, we rely on those providers' contractual and technical safeguards to protect it. The data residency of the operational systems we build for clients is handled separately, per each client engagement.

How long we keep it

We keep personal information only as long as we need it:

• Website inquiries. as long as needed to respond to you and keep a reasonable business record, then deleted or anonymized.
• 36nine SEO account and workspace data. for as long as your account is active. Deleting your account deletes your data.
• Google access tokens. until you disconnect the Google account or delete your 36nine SEO account.
• Cached search summaries. up to 90 days.
• Reports and assistant conversations. until you delete them or your account.
• Security logs. for a limited period, as needed to keep accounts secure.
• You can ask us to delete your information sooner (see Your rights).

Your rights

Subject to applicable law, including the UAE Personal Data Protection Law and, where it applies, the EU GDPR, you may have the right to the following. To use any of them, email connect@36nine.ai; we will respond within the time the law requires.

• access the personal information we hold about you;
• ask us to correct or update it;
• ask us to delete it;
• object to or restrict how we use it;
• receive a copy of the data you provided, in a portable format;
• withdraw consent at any time, including revoking Google access.

Security

We use appropriate technical and organizational measures to protect your information, including encryption of Google access tokens, hashed passwords and access controls, and we work only with providers that maintain recognized security standards. No method of transmission or storage is completely secure, but we take reasonable steps to safeguard your data and to limit who can access it.

Cookies

We measure visits to this website with our own self-hosted analytics, which sets no cookies and collects no personal information. With your consent, we also use Google Analytics, which sets cookies (named _ga) to count visits and see which pages lead to an inquiry; it does not load at all until you accept, and its advertising features are switched off. You can change your choice at any time with Cookie settings at the bottom of every page.

36nine SEO uses only a sign-in session cookie to keep you logged in. It sets no advertising cookies.

Embedded features such as the booking widget may set their own cookies, governed by their providers' privacy policies. You can also control cookies through your browser settings; blocking some may affect how parts of the site work.

Children's privacy

This website and 36nine SEO are aimed at organizations and the professionals who run them, not at children, and we do not knowingly collect personal information from children. Where we work in education, we handle student and applicant data only within client systems, under the client's instructions and agreement, not through this website or 36nine SEO.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed. Significant changes will be reflected here, and we will tell 36nine SEO users about material changes.

Contact us

For any question about this policy or your personal information, contact us at connect@36nine.ai, or write to 36nine, Bayswater Tower, Dubai, UAE.