Privacy Policy
Effective date: 12 July 2026 · Last updated: 12 July 2026
This Privacy Policy explains how Future Sustain AI Solutions Limited (“METRIQOm®”, “we”, “us” or “our”), based in Masdar City, Abu Dhabi, United Arab Emirates, collects, uses, discloses and safeguards personal data when you visit our websites (including metriqom.ae, metriqom.com and this site), request a demo or quote, contact us, or use the METRIQOm® platform and related products (the “Services”).
1. Our role: controller and processor
Depending on the context, we act in one of two capacities:
- As a controller — for personal data we collect directly through our websites and business operations (for example, the details you submit in a demo, quote or contact request, and account-administration data).
- As a processor — for personal data that our customers upload to, or generate within, the platform (“Customer Data”). Our customers are the controllers of that data; we process it on their documented instructions under our customer agreement and, where applicable, a Data Processing Agreement (“DPA”). This Policy describes our own practices; if you are an employee, supplier or contact of one of our customers, please refer to that organisation’s privacy notice.
2. Personal data we collect
a. Information you give us
- Contact & enquiry data — name, position/job title, work email, phone, organisation, country, and the content of demo, quote and contact requests.
- Account data — credentials and profile details for users provisioned on the platform (managed by your organisation’s administrators).
- Communications — correspondence with our sales, support and success teams.
b. Information collected automatically
- Usage & device data — IP address, browser and device type, pages viewed, referring URLs, and interactions, collected via server logs and cookies (see section 4).
c. Customer Data (as processor)
- Sustainability, environmental, health-and-safety, operational and governance records our customers manage in the platform, which may include personal data such as employee, contractor, supplier and inspector details, training and PPE records, and incident information. We process this only to provide the Services.
d. AI interactions
- Prompts and content you submit to in-platform AI assistants and generation features. AI outputs are advisory and are generated to help you draft, analyse and report; we do not use Customer Data to train third-party foundation models except as permitted by your agreement.
3. How and why we use personal data
| Purpose | Legal basis (where required) |
| Respond to demo, quote and contact requests; provide sales support | Steps at your request prior to a contract; legitimate interests |
| Provide, operate, secure and improve the Services | Performance of a contract; legitimate interests |
| Authenticate users, administer accounts and tenants | Performance of a contract |
| Communicate service, security and administrative notices | Legitimate interests; legal obligation |
| Marketing communications you have asked for or not opted out of | Consent; legitimate interests |
| Comply with law, prevent fraud and enforce our terms | Legal obligation; legitimate interests |
We do not sell personal data, and we do not use Customer Data for our own advertising.
4. Cookies and analytics
Our websites use strictly-necessary cookies to function and may use analytics cookies to understand aggregate usage and improve the site. You can control cookies through your browser settings; disabling some cookies may affect functionality. Where required, we request consent for non-essential cookies.
5. How we share data & our sub-processors
We share personal data only as needed and under appropriate safeguards:
- Cloud & infrastructure providers (sub-processors) — we host the Services on Amazon Web Services (AWS) and Alibaba Cloud. For single-tenant deployments, the Services run inside the customer’s own cloud account and region.
- Service providers — vetted vendors that support email delivery, security, monitoring and analytics, bound by confidentiality and data-protection obligations.
- Professional advisers — legal, accounting and insurance advisers where necessary.
- Legal & safety — authorities or third parties where required by law or to protect rights, safety and the integrity of the Services.
- Business transfers — in connection with a merger, acquisition or asset sale, subject to this Policy.
A current list of sub-processors is available to customers on request.
6. International transfers & data residency
We offer data residency options and deploy in the region our customers require — including the UAE and wider Middle East (Alibaba Cloud, Dubai) and other AWS regions. Where personal data is transferred across borders, we rely on lawful transfer mechanisms and contractual safeguards appropriate to the applicable law (including UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where relevant, the EU/UK GDPR standard contractual clauses).
7. How we protect data
- Tenant isolation — each customer’s data is logically (and, for single-tenant deployments, physically) separated with per-tenant databases.
- Encryption — data is encrypted in transit (TLS) and at rest.
- Access control — least-privilege access, authentication controls and audit logging.
- Operational security — monitoring, backups and hardening across our infrastructure.
No system is perfectly secure; we work continuously to protect personal data and to respond promptly to any incident in line with our legal obligations.
8. Data retention
We retain personal data only as long as necessary for the purposes described above, to comply with legal, tax and accounting obligations, and to resolve disputes. Customer Data is retained per the customer agreement and is deleted or returned on termination in accordance with that agreement.
9. Your rights
Subject to applicable law, you may have the right to: access the personal data we hold about you; correct inaccurate data; request erasure; restrict or object to certain processing; request portability; and withdraw consent where processing is based on consent. To exercise these rights, contact us at info@metriqom.com. If you are a user of a customer’s tenant, please direct requests to that organisation (the controller); we will assist them as processor. You also have the right to lodge a complaint with the UAE Data Office or your local supervisory authority.
10. Customer Data & your responsibilities
Where we act as processor, our customers are responsible for having a lawful basis to collect and process the personal data they place in the platform, for providing any required notices to their people, and for configuring access appropriately. We process Customer Data only on the customer’s instructions and as described in the customer agreement and DPA.
11. Children
The Services are intended for organisations and business users and are not directed to children. We do not knowingly collect personal data from children.
12. Changes to this Policy
We may update this Policy from time to time. We will post the revised version here and update the “Last updated” date; material changes will be notified where required.
13. Contact us
For privacy questions or to exercise your rights, contact:
Future Sustain AI Solutions Limited — Masdar City, Abu Dhabi, United Arab Emirates
Email: info@metriqom.com · Support: support@metriqom.com
METRIQOm®