Privacy Policy

1. Introduction

Blacklist Labs FZ-LLC ("Blacklist Labs," "we," "us," or "our"), a company registered in the Dubai International Financial Centre (DIFC), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website blacklistlabs.ai or engage with our services.

2. Information We Collect

We may collect the following types of information:

• Contact Information: Name, email address, phone number, and company name when you reach out to us via email or through our website.
• Business Information: Details about your organization and its data or licensing requirements, provided during discussions or negotiations.
• Technical Data: IP address, browser type, operating system, referring URLs, and browsing behaviour on our website, collected automatically through standard server logs.
• Voice Data: Studio-grade audio recordings, voice prints, and associated metadata that we originate, process, and license as part of our core business. All voice data is collected directly from data contributors under separate, dedicated consent agreements and master data buyout contracts.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to enquiries and facilitate business discussions
• To provide, maintain, and improve our services and data products
• To process licensing agreements and transactions
• To comply with applicable legal and regulatory requirements, including DIFC Data Protection Law (DIFC Law No. 5 of 2020)
• To protect the rights, safety, and property of Blacklist Labs and its stakeholders
• To analyse website usage and improve user experience

4. Voice Data & Contributor Rights

Blacklist Labs acquires 100% intellectual property ownership over all voice recordings, biometric voice prints, and derivative synthetic voice models through master data buyout agreements executed directly with data contributors. All contributors provide informed, written consent prior to any recording session. Contributors are compensated at the point of acquisition. Voice data is processed, annotated, and stored in accordance with applicable data protection regulations.

5. Legal Basis for Processing

We process personal data under the following legal bases as defined by DIFC Data Protection Law:

• Consent: Where you have given explicit consent for specific processing activities.
• Contractual Necessity: Where processing is necessary for the performance of a contract or to take steps at your request prior to entering a contract.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and freedoms.
• Legal Obligation: Where processing is necessary for compliance with applicable law.

6. Data Sharing & Disclosure

We do not sell personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party vendors who assist in operating our website and business, bound by confidentiality obligations.
• Legal Requirements: When required by law, regulation, legal process, or governmental request.
• Business Transfers: In connection with any merger, acquisition, financing, or sale of business assets.
• Licensing Partners: Anonymised or aggregated data may be shared with enterprise clients as part of licensed data products. No personally identifiable information of website visitors is included in licensed datasets.

7. Data Security

We implement appropriate technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. These include encryption of data in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Voice data and associated IP assets are retained indefinitely as core business assets under the terms of our master data buyout agreements.

9. Your Rights

Under DIFC Data Protection Law, you may have the following rights:

• The right to access the personal data we hold about you
• The right to request correction of inaccurate data
• The right to request deletion of your data, subject to legal obligations
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent at any time

To exercise any of these rights, contact us at michael@blacklistlabs.ai.

10. International Transfers

Your information may be transferred to and processed in countries outside the DIFC. Where such transfers occur, we ensure appropriate safeguards are in place in accordance with DIFC Data Protection Law, including standard contractual clauses or adequacy determinations.

11. Cookies & Tracking

Our website may use minimal, functional cookies to ensure proper operation. We do not currently use advertising cookies or third-party tracking pixels. If this changes, we will update this policy and provide appropriate notice and consent mechanisms.

12. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

14. Contact

For questions or concerns regarding this Privacy Policy, contact:

Blacklist Labs FZ-LLC
Dubai International Financial Centre
Dubai, United Arab Emirates
michael@blacklistlabs.ai