Privacy Policy

1. Who We Are

Arcadia The Label LLC, Shams Free Zone, Sharjah, United Arab Emirates, is the controller of the personal data processed on zurisociety.com, the members' portal at members.zurisociety.com, the Zuri Society apps for iPhone and Android, and Zuri Signal (together, "the Platform"). Contact: [email protected].

2. The Data We Collect

• Identity and contact: name, email address, phone number, country of residence.
• Profile: profession, company, photo, bio and links you choose to add.
• Membership and payments: your tier, subscription status and invoices. Stripe processes payments; we do not store card numbers. To apply the one-free-trial rule we keep the card fingerprint Stripe provides, which is not the card number.
• Content you submit: posts, messages, event RSVPs, concierge requests, reports and blocks, feedback, and files you add to the Vault or a deal room.
• Your choices in the Platform: intelligence preferences (countries, sectors, topics), bookmarks, highlights, and members you record having met.
• Device data: a push notification token for each device where you allow notifications, and server logs (IP address, device type, browser, time of each request).
• Ask Zuri: your question and the country and sector you choose, sent to the AI providers in section 4 to produce the answer and not stored by us.

Data about businesses and professionals who are not members is described in section 8.

3. Why We Use It, and on What Basis

Purpose	Basis
Provide your membership and the Platform's features, including passing on your request when you ask to be connected to an opportunity on The Board	Performance of our contract with you
Take payments, issue invoices and send service emails (billing, renewals, account notices)	Contract; legal obligation for tax records
Send marketing emails	Your consent, which you can withdraw at any time
Keep the Platform secure and prevent fraud and abuse	Legitimate interests
Comply with the law and respond to lawful requests	Legal obligation
Contact businesses and professionals who are not members (section 8)	Legitimate interests, or consent where the law requires it

Withdraw a consent at any time by emailing [email protected] or using the unsubscribe link in the email.

4. Who Receives Your Data

Your data is processed by the service providers that run the Platform: Supabase, Railway and Cloudflare (hosting), Stripe (payments), OpenAI, xAI and Anthropic (AI), Resend (email), and Expo, Google and Apple (push notifications).

Ask Zuri answers, your briefs and The Signal are produced by OpenAI and xAI; Anthropic drafts outreach to non-members. These providers act on our instructions under data processing agreements and do not use your data to train their models. We do not sell your personal data.

5. International Data Transfers

These providers process data outside the UAE, mainly in the United States. Transfers rely on data processing agreements with Standard Contractual Clauses or equivalent contractual safeguards.

6. How Long We Keep It

Data	Kept for
Member account data	While your account exists, including the limited-access period after a 12-month membership ends
Deleted account	Removed 30 days after your request. The request itself (date and status, without your name) is kept for 12 months.
Invoices and payment records	7 years (UAE tax law)
Reports you filed about other members or AI answers	Until resolved; without your name once your account is deleted
Ask Zuri questions and answers	Not stored
Data about non-members we contact	Deleted when you unsubscribe; otherwise 6 months after we found you if we never wrote to you, or 24 months after our last contact
Server logs	A short period, under our hosting providers' standard settings

7. Your Rights

You can ask for a copy of your data, correct it, delete it, restrict or object to its processing, receive it in a machine-readable format, and withdraw any consent. Email [email protected]; we respond within 30 days.

You can also do this yourself: in the portal under Edit Profile, Download My Data gives you a copy and Delete My Account closes your account; in the app, Settings → Delete account. Deletion closes your account at once, cancels any Zuri Signal subscription, and removes your data after a 30-day grace period. The steps are at zurisociety.com/delete-account.

You may complain to the UAE Data Office or, if you live in the EU or the UK, to your data protection authority.

8. If You Are Not a Member and We Contacted You

Our team researches businesses and professionals using news sources and public web pages, and approves every outreach email before it is sent. We hold your name, role and company and, only where it was published in a source we fetched, your email address and where we found it. Every email carries an unsubscribe link. Unsubscribing deletes what we hold about you; only your address stays on a suppression list so that we never write to you again. Retention is in section 6. For anything else, email [email protected].

9. Cookies

The members' portal uses only essential storage: your sign-in session, your cookie choice and your display theme. The public website sets no cookies. We use no analytics, advertising or tracking cookies.

10. Security

We protect your data with encrypted connections, encryption at rest, access controls and database-level access rules. If a breach affects you, we will notify you and the relevant authority within 72 hours where the law requires it.

11. Children

Zuri is for adults aged 21 and over. We do not knowingly collect data from anyone younger.

12. Changes to This Policy

Material changes are emailed to members at least 14 days before they take effect.

13. Contact

Privacy: [email protected]
General: [email protected]
Postal: Arcadia The Label LLC, Shams Free Zone, Sharjah, UAE