Privacy Policy

1. Data we process

• Site visitors: device and usage data, IP address, cookies and analytics.
• Contact and registration: name, email and message.
• Partners and advertisers: company details, billing information, listing content and performance data.
• Presale interest: email and, if provided, wallet address.
• Advisor interactions: the queries and intents users submit, which we pseudonymize at collection (no raw identifiers; coarse location only).

We do not sell personal data, only anonymized aggregates (see Analytics and aggregated insights below).

2. Analytics and aggregated insights

We analyze de-identified signal data (intents and themes, events, coarse geography and time), including with AI, to produce aggregated, anonymized market-insight products (demand trends, unmet-demand signals, reports and an insights API) which we may share or commercialize.

These products are aggregate-only and threshold-gated (k-anonymity) and cannot identify any individual. We do NOT sell personal data, only anonymized aggregates. Legal basis: legitimate interests (and consent where required); you may object or opt out via privacy@conconai.com. Anonymized aggregates that no longer relate to an identifiable person fall outside personal-data rules.

3. Purposes and legal bases (GDPR Art. 6)

• Providing the service (performance of a contract).
• Analytics, aggregated insights, security and product improvement (legitimate interests).
• Marketing and communications (consent).
• Legal and accounting obligations (legal obligation).

Consent can be withdrawn at any time.

4. Processors and sub-processors

We share data only with service providers acting as processors under contract. Current processors: Vercel (hosting), Supabase (database and storage), Clerk (authentication), Stripe (payments, when live), Google Maps Platform / Places (address autocomplete), OpenAI (listing review and matching), and Upstash (queue and cache).

5. International transfers

Data may be processed outside the UAE and EEA by our processors. Where required, such transfers rely on appropriate safeguards (Standard Contractual Clauses (SCCs) and/or your consent) and, for EEA and UK data, equivalent protections. By using the service you acknowledge these transfers.

6. Retention

We keep personal data only as long as necessary for the purposes above or as required by law.

7. Your rights

You may have the right to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, including the right to object to the analytics and aggregated-insights processing described above. EU/EEA users may lodge a complaint with a supervisory authority. To exercise any right, contact privacy@conconai.com.

8. Children

The service is not directed to persons under 18, and we do not knowingly collect their data.

9. Security

Report security vulnerabilities to security@conconai.com.

10. Changes

We may update this policy; the "last updated" date reflects changes.