How Magure collects, uses and protects personal data including processing through AI systems 

Magure Tech Middle East LLC (“Magure”, “we”) · Unit 195, Level 1, Gate Avenue – South Zone, DIFC, Dubai, UAE 

Registered in the Dubai International Financial Centre. This notice is issued under the DIFC Data Protection Law, DIFC Law No. 5 of 2020 (“DP Law”) and the Data Protection Regulations, including Regulation 10 on Personal Data Processed through Autonomous and Semi-Autonomous Systems. For visitors from the EU/UK, section 10 sets out additional information under the EU/UK GDPR. 

Last updated: 29/07/2026 ·  Privacy contact: privacy@magureinc.com 

1. Who we are and what this notice covers 

Magure is the Controller of personal data collected through our website (magureinc.com), our website AI assistant, and our marketing and sales activities, wherever in the world you are visiting from. 

What this notice does not cover: MagOneAI deployed in customer environments. Our platform runs in our customers’ own clouds or data centres; the customer is the Deployer (Controller) of those systems and Magure does not access or process personal data within them. For those deployments, the customer’s own privacy notice applies. 

2. Personal data we collect 

• Contact and enquiry data you submit through forms: name, email, company, job title, message. 

• Chat data: messages you type to our website AI assistant, and the assistant’s responses. 

• Usage data: pages visited, time on site, interactions. 

• Device data: IP address, browser, device type, operating system. 

• Cookie data as described in section 8. 

• Recruitment data if you apply for a role. 

  We do not collect Special Category data through our website and ask that you do not include sensitive information in chat messages or forms. 

3. Purposes and lawful bases 

We process personal data to: respond to enquiries and demo requests (legitimate interests / steps prior to a contract); provide and improve our website and AI assistant (legitimate interests); send marketing you have opted into (consent, withdrawable at any time); analyse website performance (consent via cookie banner); meet legal and regulatory obligations (compliance with legal obligation); and manage recruitment (steps prior to a contract). These lawful bases apply equivalently under the DIFC DP Law and the EU/UK GDPR. 

4. Use of artificial intelligence (Regulation 10 and EU AI Act notice) 

This section is provided under Regulation 10 of the DIFC Data Protection Regulations, which governs personal data processed through autonomous and semi-autonomous systems, and constitutes our transparency disclosure under Article 50 of the EU AI Act (Regulation (EU) 2024/1689). 

4.1 We use AI on this website 

Our website assistant uses artificial intelligence, including large language models (LLMs), to generate responses. You are interacting with an AI system, not a human. When you use it, your messages are processed by technology that operates without direct human initiation or control of each response. 

4.2 Human-defined purposes only 

Our AI systems process personal data solely for purposes defined and approved by humans: answering questions about Magure’s products and services, helping you find information, and routing enquiries to our team. Our systems are not capable of defining their own purposes for processing. They operate within documented constraints and policy rules configured and enforced through our MagOneAI governance layer. 

4.3 Outputs and how they are used 

The assistant produces conversational text responses. Chat transcripts may be reviewed by our team to answer your enquiry and improve service quality. Outputs are not used to make automated decisions that produce legal or similarly significant effects about you. 

4.4 Safeguards by design 

All AI interactions pass through guardrails and policy enforcement on our MagOneAI platform, including content filtering, input/output validation, access controls, and full audit logging. Our AI management system is certified to ISO/IEC 42001, and our information security management system to ISO/IEC 27001. Our design principles align with the OECD AI Principles and the NIST AI Risk Management Framework. 

4.5 Third-party AI providers and international transfers 

To generate responses, your chat messages may be transmitted to third-party LLM providers: OpenAI, Anthropic, Google and xAI (Grok), located in the United States; Transfers are protected as described in section 6. All providers are contractually restricted from using your data to train their models. 

4.6 Impact on your rights 

Please be aware: once information is submitted to an LLM-based system, complete erasure from that system may not be technically possible. In accordance with Article 29(1)(h)(ix) of the DIFC DP Law, we are notifying you of this limitation. We can delete chat transcripts we hold, but we recommend you do not share personal or confidential information in chat messages. 

4.7 Your choices 

Use of the AI assistant is optional you can always contact us instead at info@magureinc.com or via our contact form. You may object to processing or ask us questions about our AI systems at privacy@magureinc.com; we will explain the processing in plain, non-technical terms, and you may complain about any AI-generated outcome (section 9). 

5. Sharing your data 

We do not sell personal data. We share it only with: CRM and marketing tools (e.g. HubSpot); analytics providers; LLM providers as described in section 4.5; and professional advisers or authorities where legally required. All processors act under contracts meeting applicable data protection law requirements. 

6. International transfers 

Magure operates from the DIFC (UAE) with delivery centres in India and an office in the USA, so your data may be transferred between these locations and to the third-party providers named above. 

From the DIFC: transfers are made to jurisdictions recognised as adequate under Article 26 of the DP Law or under DIFC standard contractual clauses per Article 27. 

From the EU/UK: the UAE is not the subject of an EU or UK adequacy decision. Transfers of EU/UK personal data to Magure and our processors are protected by the European Commission’s Standard Contractual Clauses (and the UK IDTA/Addendum), with supplementary measures where required. A copy of the relevant safeguards is available on request via privacy@magureinc.com. 

Details of recipients and locations are maintained in our Regulation 10 systems register, available to relevant parties on request. 

7. Retention 

Enquiry and chat data: 24 months after last contact. Marketing data: until you withdraw consent. Recruitment data: 12 months after the process ends. Cookie lifetimes are shown in the cookie banner. 

8. Cookies 

We use cookies for functionality, analytics and marketing (including linking behaviour to our CRM). Non-essential cookies are set only with your prior consent where required (including for visitors from the EU/UK). Manage preferences via the cookie banner or your browser. 

9. Your rights 

Under Articles 32–40 of the DIFC DP Law you may access, correct, delete, or port your data, restrict or object to processing, withdraw consent, and object to automated decision-making. Contact privacy@magureinc.com. We respond within the timelines required by applicable law. You may also lodge a complaint with the DIFC Commissioner of Data Protection (commissioner@dp.difc.ae), including complaints challenging the outcome of any processing by our AI systems. 

10. Additional information for visitors from the EU, UK and other jurisdictions 

EU/UK GDPR. If you are in the European Economic Area or the United Kingdom, the EU GDPR or UK GDPR applies to our processing of your data, and you have the corresponding rights: access, rectification, erasure, restriction, portability, objection (including to direct marketing, which we will always honour), withdrawal of consent, and the right not to be subject to solely automated decisions with legal or similarly significant effects. Where we rely on legitimate interests, you may object based on your particular situation. You may lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office). 

EU AI Act. Our website AI assistant is a limited-risk AI system under Article 50 of the EU AI Act; the disclosures in section 4 are provided to meet that requirement. It performs no prohibited practices, no emotion recognition, no biometric categorisation, and no high-risk functions. 

California. We do not sell or share personal information as defined by the CCPA/CPRA. California residents may exercise access, deletion and correction rights via privacy@magureinc.com. 

Other jurisdictions. Where local data protection law grants you additional rights, we will honour them. Contact us and we will respond in accordance with the law applicable to you. 

11. Security 

We protect personal data through ISO 27001-certified controls including encryption in transit and at rest, role-based access control, secrets management, monitoring and audit logging, and staff security training. 

12. Changes and contact 

Updates will be posted on this page with a revised date. For any questions, contact us on: privacy@magureinc.com · +971 4 271 1537.