TimelinesAI PDPL Compliance - UAE

TimelinesAI is committed to protecting the personal data of our UAE customers in compliance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). This page explains how our existing data protection framework satisfies PDPL requirements.

TimelinesAI LLC is a U.S.-based SaaS provider. Our data processing practices are governed by our standard Terms of Service and Data Processing Agreement, which apply to all customers globally.

1. Our Approach to PDPL Compliance

The UAE PDPL aligns closely with international standards including GDPR. Our GDPR-compliant practices provide strong foundation for PDPL compliance, including consent management, transparency, and data subject rights.

2. Roles and Responsibilities

Under the UAE PDPL:

• Customer acts as the Data Controller — determines purposes and means of processing
• TimelinesAI acts as the Data Processor — processes data only on customer instructions

3. Data Processing Agreement

Our standard Data Processing Agreement covers UAE customers and addresses PDPL obligations. The DPA is part of our Terms of Service and applies automatically when you use TimelinesAI.

4. Security Measures

We implement industry-standard technical and organizational measures:

• Encryption: SSL/TLS encryption, AES-256 for data at rest
• Access Controls: Role-based permissions
• Regular Backups: Daily automated backups
• Security Audits: Periodic security reviews

Details: timelines.ai/security-standards

5. Data Subject Rights

As a data processor, we support customers in fulfilling data subject rights:

• Right to access personal data
• Right to rectification
• Right to erasure
• Right to data portability

6. Data Retention

We retain personal data only as long as necessary. After account closure, data is available for export for 30 days, then deleted.

Contact Us

For questions about data protection or to exercise data principal rights:

TimelinesAI Privacy Team
Email: privacy@timelines.ai