Privacy Policy

This policy is issued by Scoremachine Software FZ-LLC ("ScoreMachine", "we", "us"). We are a Free Zone Limited Liability Company registered with the Dubai Development Authority under licence 106701.

Our registered office is HD42B, First Floor, In5 Tech, Dubai Internet City, Dubai, United Arab Emirates.

For any privacy question, write to legal@scoremachine.ai.

This policy covers personal data we control. That is data about visitors to scoremachine.ai, people who use our free tools, account holders, and people who contact us.

It also explains how we handle client data. That is the phone numbers, email addresses and related data our clients submit for validation and scoring.

For client data, the client is the controller and we are the processor. Section 06 explains what that means. Our Data Processing Agreement with each client governs that processing.

Every marketing email carries an unsubscribe link.

Where the UAE PDPL applies, we rely on the grounds it allows, including consent where it requires it.

We share personal data only as this policy describes. We do not sell personal data.

We share it with these recipients:

• –Cloud hosting: Cloudflare, for website hosting (Pages and Workers), and OVHcloud, for platform hosting
• –Telecom and data intelligence partners that run lookups, for client data only, as section 06 describes
• –Payment and invoicing providers
• –Google, for analytics and advertising (Google Analytics 4 and Google Ads), only after you consent
• –Email and support tools we use to reply to you
• –Our CRM provider, which holds contact and sales records
• –Professional advisers bound by a duty of confidence
• –Authorities, where the law requires it
• –A buyer or successor in a merger, acquisition or asset sale, under the terms of this policy

Each provider processes personal data under a written contract with us.

Our clients submit phone numbers, email addresses and related data to check them. The client decides which data to submit and why. We act on the client’s documented instructions.

We use client data only to provide, secure, meter and bill the service. We never use it for our own purposes, including training or improving our scoring models, marketing, or building our own datasets. Irreversibly anonymized data is the one exception.

To return results, we send the queried number or address to telecom and data intelligence partners. They provide numbering, number portability, carrier, line-status, digital activity, messenger presence and email verification data. Some of them are outside the UAE.

Results describe the number or the address. For a number, they cover the format, line type, the carrier serving it, the country and time zone of its numbering range, channel availability and a reachability score. For an address, they cover deliverability, provider and mail server. Where a client enables audience tags, results can include interest categories and a year. Sensitive categories are never returned.

Query payloads are deleted within 24 hours of the request completing. Operational and billing logs are kept for 30 days, and may hold hashed or truncated identifiers. Encrypted backups are deleted on a rolling basis within 30 days.

If one of our clients checked your number or address, that client handles your request. We pass on any request we receive and help the client respond. The Data & opt-out page explains how.

We and our providers process personal data inside and outside the UAE.

We transfer personal data out of the UAE only in these cases:

• –to a country recognized as providing adequate protection
• –under contractual safeguards
• –where another lawful ground for the transfer applies

We use the technical and organizational measures listed on our Trust page. They include access control, encryption in transit and at rest, transient processing, monitoring, vulnerability management and incident response.

If a breach affects client data, we tell the client within 48 hours of becoming aware of it. If a breach affects data we control, we tell you and the regulator where the law requires.

We use cookies and similar technologies on scoremachine.ai.

Essential cookies keep the site working. They handle sign-in, security and CAPTCHA, and they load without consent.

Analytics cookies show us which pages are used. They load only after you agree in the cookie banner. You can change your choice at any time.

Marketing cookies show us which ads bring visitors to the site. Ad platforms also use these cookies to show our ads to past visitors. They load only after you agree in the cookie banner.

Depending on the law that applies to you, you can ask us to:

• –give you a copy of your personal data
• –correct it
• –delete it
• –restrict or object to how we use it
• –send it to you or another provider in a portable format
• –review a decision made solely by automated means that significantly affects you

Where we rely on your consent, you can withdraw it at any time. Withdrawal does not affect processing that took place before it.

To make a request, use the form on the Data & opt-out page or write to legal@scoremachine.ai. We may ask you to confirm your identity. We reply within 30 days.

Our services are for businesses. They are not directed at anyone under 18, and we do not knowingly collect children’s data.

Our services are not designed for sensitive personal data, biometric data or data about children. Clients must not submit it.

We post every change on this page with a new effective date. If a change is material, we email account holders before it takes effect.