Privacy Policy

Who we are

Yuugc is a service of Fly Straight AI Limited, registered in the Dubai International Financial Centre (DIFC) at IH-00-01-03-OF-05, Level 3, DIFC Innovation One, Dubai AI Campus, United Arab Emirates.

We are the controller of the personal data described here, meaning we decide why and how it is processed. Because we are established in the DIFC and offer our services to people in the European Economic Area and the United Kingdom, both the DIFC Data Protection Law No. 5 of 2020 and the EU and UK GDPR apply to us.

What we collect

Only three things, and each one comes from something you did.

Where it comes from	What it contains	Why we have it
The contact form	Your name, email address, your message, and — if you arrived from a pricing card — which plan you clicked.	To answer your enquiry and quote you a price.
Live chat	Whatever you type, plus technical data our chat provider collects: IP address, browser, pages viewed, and an identifier stored in your browser so a conversation survives a page reload.	To hold a conversation with you and recognise you if you come back to it.
Server logs	IP address, browser type, the page requested, and the time. Generated automatically by our hosting provider for every visitor.	To keep the site running, secure, and diagnosable when it breaks.

What we do not do

This is as important as the list above, so it is stated plainly:

No analytics. We do not run Google Analytics or any equivalent. We do not know how many people read this page.
No advertising or tracking pixels. Nothing on this site reports your visit to an advertising network, and we do not build profiles or track you across other websites.
No third-party fonts. Our fonts are served from our own domain. Visiting this site sends nothing to Google.
We never sell or rent your personal data, and we do not share it for anyone else’s marketing.

Our legal grounds for using it

Answering your enquiry — because you asked us to, as a step towards a possible contract between us (GDPR Article 6(1)(b)).
Live chat cookies — your consent, which you give through the chat widget’s consent prompt and can withdraw at any time by clearing your browser storage for this site.
Server logs and site security — our legitimate interest in keeping the site available and defended against abuse (GDPR Article 6(1)(f)).

Cookies

The site itself sets no cookies. There is no analytics cookie, no advertising cookie, and no consent cookie for either, because there is nothing to consent to.

The only cookies come from the live chat widget, and they are not set until you accept the chat’s consent prompt. They keep track of your conversation so it is still there if you reload the page. If you never open the chat and never accept the prompt, no chat cookies are stored.

Who else processes your data

We use three service providers. Each acts on our instructions as a processor, and each has its own privacy policy governing what it does with the data it holds for us.

Provider	What they handle	Their policy
Formspree	Receives and stores contact form submissions, then emails them to us.	formspree.io
tawk.to	Runs the live chat and stores conversation transcripts.	tawk.to
Vercel	Hosts and serves the website; generates the server logs described above.	vercel.com

Where your data goes

We are established in the DIFC and our providers operate internationally, which means your personal data may be processed outside the country you live in — including in the United States. Where that involves personal data protected by the EU or UK GDPR, transfers are made under the safeguards those laws require, principally the European Commission’s Standard Contractual Clauses as incorporated into our providers’ terms.

How long we keep it

Enquiries and chat transcripts: 24 months after our last contact with you, so we have context if you come back. Then deleted.
Records of customers we go on to work with: as long as needed for the service, and afterwards for as long as tax and accounting rules require.
Server logs: retained by our hosting provider on their standard schedule, which is a matter of weeks rather than years.

Your rights

Under the GDPR and the DIFC Data Protection Law you can ask us to:

Show you the personal data we hold about you, and tell you what we do with it.
Correct it if it is wrong or incomplete.
Delete it. We will, unless we are legally required to keep it.
Restrict or object to how we use it, including anything we do on the basis of legitimate interest.
Hand it over to you or another provider in a machine-readable form.
Withdraw consent you previously gave, without affecting anything done before you withdrew it.

Exercising any of these is free, and we will respond within one month. We do not make automated decisions about you and we do not profile you.

Contacting us, and complaining about us

Send any privacy request through our contact form, saying clearly what you want us to do. We may need to ask a question or two to confirm we are talking to the right person before we act on a request about someone’s data.

If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to a regulator: the DIFC Commissioner of Data Protection, or, if you are in the EEA or UK, your national data protection authority.

Children

This is a service sold to businesses. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.

Changes to this policy

If we start collecting something new, or bring in a new provider, we will update this page and change the date at the top. Where a change materially affects your rights, we will do more than quietly edit the page.

Version dated 1 September 2026.