Last updated 25 October 2026
Privacy policy
This policy explains what personal data Mentiq handles, why, where it is stored and how long we keep it. It covers this website and the AI agents we run for our clients, such as Mentiq Lead Desk.
Who we are
Mentiq is based in Dubai, United Arab Emirates. Contact: privacy@mentiq.ae.
We handle personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and the WhatsApp Business Platform policies.
Our two roles
| Situation | Our role |
|---|---|
| You visit mentiq.ae, email us or book a call | We decide how your data is used (controller). |
| You message a business that uses a Mentiq agent, for example a property enquiry to a brokerage | That business decides how your data is used (controller). Mentiq processes it on the business's behalf and only on its instructions (processor). |
What we collect
- Website visitors: only if you accept analytics cookies, Microsoft Clarity records how you use the site (pages viewed, clicks, scrolling, device, approximate location) so we can improve it. It does not record what you type into forms. We set no advertising cookies. See Cookies.
- People who fill in a form, contact us or book a call: name, work email, phone or WhatsApp number, company, number of agents, what you're interested in and anything you write to us.
- Leads who message a client's agent: name and phone number as shared on WhatsApp, the messages exchanged, and answers to qualifying questions (for example buy or rent, budget, area, bedrooms, timeline, financing and residency status).
Our agents never ask for Emirates ID, passport, bank or card details. If someone sends them anyway, they are not used for anything.
Why we use it
- To answer enquiries, qualify them and pass them to the right person at our client's business.
- To record leads in our client's CRM and send our client weekly reports.
- To review conversations each month and improve answers, on our client's behalf.
- To reply to people who contact Mentiq and to run our own business.
We do not sell personal data, and we do not use leads' data for our own marketing.
WhatsApp messages
Our agents run on the official WhatsApp Business Platform. They only message people who contacted the business first or submitted a form asking to be contacted. Anyone can ask for a person at any time, and anyone can stop messages by replying STOP.
Where data is stored and who processes it
- Stored on servers in the UAE (Microsoft Azure, UAE North region).
- WhatsApp messages pass through Meta (WhatsApp Business Platform) and 360dialog, our WhatsApp business solution provider.
- To write replies, message text is processed by Anthropic's Claude API. This processing may take place outside the UAE; it is not used to train Anthropic's models.
- Lead records are sent to our client's own CRM (for example Salesforce, HubSpot, Zoho CRM, Bitrix24 or Google Sheets).
- This website is hosted on Netlify; form submissions are stored by Netlify and emailed to us. Our own email runs on Zoho Mail, call booking on Cal.com, and website analytics (with your consent) on Microsoft Clarity. These providers may store data outside the UAE.
Cookies
The site works without cookies. If you click Accept on the cookie banner, Microsoft Clarity sets analytics cookies (for example _clck and _clsk, kept up to one year) to understand how visitors use the site. If you click Decline, nothing is loaded. We store your choice in your browser so we don't ask again.
How long we keep it
- Lead conversations: 12 months, then deleted.
- When a client contract ends: the client's data is exported to them and deleted from our systems within 30 days.
- Enquiries and form submissions to Mentiq: up to 24 months after our last contact, unless you become a client.
- Clarity analytics data: kept by Microsoft for up to 13 months.
Your rights
You can ask to see, correct or delete your personal data, or object to how it's used. If your data came from a conversation with one of our clients, we'll pass your request to that business and help them handle it. Write to privacy@mentiq.ae; we reply within 30 days.
Security
Access to client data is limited to the people who run the service, protected by strong authentication, encrypted in transit, and separated per client.
Changes
We'll update this page when anything changes and show the date at the top.