Legal
Privacy
What we collect, why we hold it, and what you can ask us to do with it.
Last updated 28 August 2026
In short
How does Xverse Digital handle personal data?
Xverse Digital FZE collects only what an enquiry or a booking needs: your name, work email, organisation and the situation you describe. We use it to answer you and to prepare for the conversation, we do not sell it, and you can ask us to delete it at any time through the contact route on this site.
01
Who is responsible
Xverse Digital FZE, a licensed freezone entity registered at Sharjah Research Technology and Innovation Park, is the controller of any personal data collected through this site. Our advisors operate from Dubai, Mumbai, Bangalore, London and Thimphu, so data may be accessed by our people in those locations.
For anything in this notice, use the contact route on this site and mark your note for the attention of the directors. Every request reaches a named person; we publish no mailbox to be harvested.
02
What we collect
The Signal — when you describe a friction, we hold the description you write, and then the name, work email, organisation, role, country, timeline and interest you choose to give.
The Table — when you book a conversation, we hold the same identifying details plus your timezone, the agenda you shape and the slot you take, so a calendar invitation can be issued.
Correspondence — emails you send us, and our replies, held in our Microsoft 365 tenancy.
Site measurement — aggregate page and referral statistics through Google Analytics. We do not build advertising profiles and we do not run ad-network trackers.
03
Why we hold it, and on what basis
To answer your enquiry and prepare for a conversation you asked for — our legitimate interest in responding to a business approach, and the steps preceding a contract.
To keep a record of engagements, proposals and correspondence — our legitimate interest in running the firm, and our legal and accounting obligations.
To send you writing you have asked to receive — your consent, withdrawable in one reply.
04
Where a model reads your words
When you describe a friction to The Signal, an AI model reads that description to produce the pattern and the first move shown back to you on screen, and to prepare a short brief for the advisor who will meet you. It is a reading aid for our people, not a decision-maker: no engagement, price or assessment of you is determined by a model.
The model is called through a processor under contract, and the text is not used to train third-party models. If you would rather a person read it first, say so in your note and we will skip the automated read.
06
Moving data across borders
We operate from the UAE and work with clients and advisors in the EEA, the UK and India, so personal data may be transferred between those places. Transfers rely on the contractual protections our processors provide, and we keep them to what the work requires.
07
How long we keep it
Enquiries we did not pursue: 12 months, then deleted. Live conversations and engagements: for the relationship, and seven years afterwards where accounting or contractual records require it. Analytics: aggregate only, retained on our provider's default term.
08
Your rights
You can ask us for a copy of what we hold, to correct it, to delete it, to restrict what we do with it, or to object to our holding it at all. Where UAE Federal Decree-Law No. 45 of 2021 or the EU and UK GDPR apply to you, these are your statutory rights; where they do not, we honour them anyway.
Send the request through the contact route on this site and a director will answer within five working days.
10
Security
Access to enquiry and client records is restricted by role, and each record is visible only to the advisor who owns it and the firm's directors. Correspondence sits inside our Microsoft 365 tenancy under multi-factor authentication.