Your privacy and data security are fundamental to how we build and operate eKTextAI.
Last updated: November 2025
GDPR/UK-GDPR Compliant
At eKTextAI, we believe privacy is a fundamental right. This policy explains how we collect, use, and protect your information when you use our enterprise knowledge AI platform.
Service Provider: eKTextAI
Operated by: MarvelSoft IT Services
Location: DSO, Dubai, United Arab Emirates
Contact Email: info@ektextai.com
Legal Contact: info@marvelsoft.co.in
🛡️ We do not sell your personal information. We only share data in specific, limited circumstances outlined below.
When you explicitly authorize us to share information with third parties.
To comply with legal obligations, court orders, or governmental requests.
With trusted partners who assist our operations under strict confidentiality agreements.
To protect our rights, prevent fraud, or ensure user safety.
End-to-end encryption for data in transit and at rest using industry-standard protocols.
Multi-factor authentication and role-based access controls protect your account.
Continuous security monitoring and regular audits ensure data protection.
If you are located in the European Union (EU) or United Kingdom (UK), you have specific rights under the General Data Protection Regulation (GDPR) and UK-GDPR. We are committed to ensuring your rights are respected and easily exercisable.
Legal Basis for Processing: We process your personal data based on your explicit consent, contract performance, legal obligations, legitimate interests, or vital interests as permitted under GDPR Article 6.
Request a copy of all personal information we hold about you. We will respond within 30 days.
Exercise this right →Correct or update any inaccurate personal information. We will update your data promptly.
Request correction →Request deletion of your personal information (subject to legal requirements). We will process your request within 30 days.
Request deletion →Export your data in a machine-readable format (JSON or CSV). We will provide your data within 30 days.
Export your data →Object to processing of your personal information for specific purposes. We will respect your objection.
Object to processing →Withdraw your consent at any time. Withdrawal does not affect processing that occurred before withdrawal.
Withdraw consent →You can exercise your GDPR rights through:
/api/gdpr
Response Time: We will respond to your request within 30 days as required by GDPR. If your request is complex, we may extend this period by up to 60 days, and we will inform you of the extension.
If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local supervisory authority:
We retain your personal information only as long as necessary to provide our services and comply with legal obligations. Account data is typically retained for the duration of your subscription plus 30 days, unless longer retention is required by law.
GDPR Compliance: Under GDPR Article 17 (Right to Erasure), you can request deletion of your data. We will process deletion requests within 30 days, subject to legal requirements that may require longer retention.
When you request data deletion:
Your data may be transferred to and processed in countries other than your own. We ensure adequate protection through appropriate safeguards such as standard contractual clauses and adequacy decisions.
Current Data Storage: We store your data in secure cloud infrastructure. For EU/UK users, we offer data residency options to keep your data within the EU/UK region.
If you are located in the EU or UK, you can request that your data be stored within the EU/UK region to comply with GDPR/UK-GDPR data residency requirements.
In the event of a data breach that may affect your personal data, we are committed to:
If a breach affects your personal data, we will notify you via:
What to Do: If you receive a breach notification, please review your account for any suspicious activity, change your password if necessary, and contact us if you have concerns.
Our services are not intended for children under 16. We do not knowingly collect personal information from children. If we become aware of such collection, we will take steps to delete the information promptly.
We may update this Privacy Policy from time to time. We will notify you of any material changes via email or through our platform. The "Last updated" date at the top of this policy indicates when it was last revised.
If you have any questions about this Privacy Policy or our data practices, please don't hesitate to contact us.
General Inquiries
info@ektextai.comPrivacy & GDPR Requests
privacy@ektextai.comCompany
MarvelSoft IT Services
DSO, Dubai, UAE