Privacy.

Launch version 1.1, 12 October 2026, subject to counsel review (G&P).

1. Who is responsible

The controller of personal data handled through nasl.ai is NSI Enterprises FZCO, a DMCC free zone company (licence DMCC202416), Unit UT-11-CO-50, DMCC Business Centre, Level 11, Uptown Tower, Dubai, UAE. house@nasl.ai

We follow the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

2. What we collect

• Contact and business details: name, company, role, business email and phone.
• Member check details: identity and company information, and copies of ID or company documents where we ask for them.
• Deal information: what you are buying or selling, specifications, stage, and NDA status.
• Messages: what you send us by email or other channels.
• Technical data: basic logs needed to run and protect the site.

We do not collect health data. Please don't send it.

3. Why we use it

• To run membership and our member checks.
• To release deal information by level and make introductions.
• To meet legal duties, including anti-money-laundering record keeping and sanctions checks.
• To protect the platform and prevent misuse.

Our bases are: performing our agreement with you, our legal obligations, and your consent where we ask for it.

4. Where your data is stored

• Our platform database is Twenty Cloud, hosted on Amazon Web Services in Frankfurt, Germany. This is a transfer of personal data outside the UAE.
• We make this transfer on the basis of a binding data processing agreement with our provider and your express consent, as allowed by Article 23 of the PDPL.
• ID and KYC copies are kept in a separate restricted store, not on the platform database. Only named team members can access them.

5. Who sees your data

• Our core team, on a need-to-know basis.
• Other members, only at the level you have reached. Buyers never see each other's details.
• Our service providers (hosting, email), under contract.
• Authorities, where the law requires.

We do not sell personal data.

6. How long we keep it

We keep member and enquiry data for as long as you are a member and for 2 years afterwards, then delete or anonymise it. We keep identity checks, deal records and other records the law requires us to keep for at least 5 years, or longer if the law or a dispute requires it. You can ask us to delete your data earlier, and we will unless the law requires us to keep it.

Technical logs are kept for a short period, then deleted.

7. Your rights

You can ask to:

• access your data, or get a copy;
• correct it;
• delete it, where we don't need to keep it by law;
• restrict or object to its use;
• withdraw consent (this won't affect what we did before).

Email house@nasl.ai. We will reply within the time the law sets.

8. Security and breaches

We use named accounts with multi-factor login, access controls and logs. If a breach affects your data and puts your rights at risk, we will notify the UAE Data Office and you, as the law requires.

9. Analytics

We use Cloudflare Web Analytics, which does not use cookies and does not track you across sites.

10. Changes

We will post updates here with a new date.