Legal
Privacy Policy
- 1. Who we are
- 2. Our two roles
- 3. What we collect
- 4. How we use it
- 5. Legal bases
- 6. Who we share it with
- 7. International transfers
- 8. How long we keep it
- 9. Security
- 10. Your rights
- 11. Cookies
- 12. Children
- 13. Changes
- 14. Contact
1. Who we are
Antox is operated by Antoxmedia LLC, a limited liability company registered in Delaware, United States, and run from Churchill Tower, Business Bay, Dubai, United Arab Emirates ("Antox", "we", "us"). This policy covers antox.ae, the application form at antox.ae/apply and the Antox app at app.antox.site.
2. Our two roles
When we act as controller
We decide how data is used for: visitors to our website, people who apply for access, and the account and billing details of agencies and their users.
When we act as processor
Leads, contacts, notes, messages and files that an agency puts into Antox, or connects from Meta, WhatsApp, Property Finder, Bayut, web forms or CSV imports, belong to that agency. The agency is the controller and we process that data only on its instructions and under our Terms of Service. If you are a lead or client of an agency using Antox, contact that agency first to exercise your rights. We will help them respond.
3. What we collect
| Category | Examples | Source |
|---|---|---|
| Application details | Name, work email, WhatsApp number, role, agency name, website, team size, lead sources, lead volume | You, via antox.ae/apply |
| Account data | User name, email, phone, role, team, login activity, password hash | You or your agency admin |
| Agency lead data | Lead and contact names, phone numbers, emails, budgets, preferred areas, notes, call and message history | Your agency and the sources it connects |
| Connected account data | Meta lead form responses, Google account and calendar data you authorise, emails synced from mailboxes you connect (Gmail, or any mailbox over IMAP and SMTP), WhatsApp conversations | Integrations you switch on |
| Billing data | Billing contact, invoices, payment status. Card details are held by our payment provider, not by us | You and our payment provider |
| Usage and device data | IP address, browser, pages viewed, errors, timestamps | Automatically, via our hosting and security providers |
4. How we use it
- To review applications and contact you about access, including by WhatsApp, phone or email.
- To provide Antox: capture leads, route them to agents, match briefs against project data, send notifications and run the workflows your agency sets up.
- To run AI features your agency uses, such as the assistant, transcription and brief matching. Lead data sent to AI providers is used to produce the result for you, not to train their models.
- To bill agencies and keep financial records.
- To secure the service, prevent abuse and fix problems.
- To send service messages. We send marketing only where the law allows it, and you can opt out at any time.
- To meet legal obligations and enforce our terms.
5. Legal bases
Where laws such as the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) or the EU and UK GDPR apply, we rely on: performance of a contract (providing the service), legitimate interests (reviewing applications, security, improving Antox), consent (where required, for example for optional cookies or marketing, which you can withdraw), and legal obligation (tax and accounting records). For agency lead data, the agency is responsible for having a lawful basis to collect it and put it into Antox.
7. International transfers
Our providers store and process data in India (our main database and application servers), the European Union, the United States and other countries. When data leaves the UAE, the EU or the UK, we rely on the transfer safeguards those laws recognise, such as standard contractual clauses and adequacy decisions.
8. How long we keep it
- Applications that do not become customers: up to 12 months, then deleted.
- Agency account and lead data: for as long as the agency's subscription is active. After it ends, the agency can export its data for 30 days, then we delete it within a further 60 days, except for backups that roll off on their normal cycle.
- Billing records: as long as tax and accounting law requires, usually 5 to 7 years.
- Security logs: up to 12 months.
9. Security
Data is encrypted in transit and at rest with our hosting and database providers. Access inside an agency is controlled by roles and permissions, and each agency's data is separated at the database level and tested automatically. Two-factor login is available, and admin actions, contact reveals and exports are logged. No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant authorities as the law requires.
10. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict how we use it, and to withdraw consent. To use these rights, email privacy@antox.io. We reply within 30 days. If your data sits in an agency's Antox account, we will pass your request to that agency. You can also complain to your local data protection authority.
12. Children
Antox is a business tool and is not meant for anyone under 18. We do not knowingly collect data from children.
13. Changes
We may update this policy. The effective date at the top shows the latest version. If a change is material, we will tell agency admins by email or in the app before it takes effect.
14. Contact
Antoxmedia LLC
Churchill Tower, Business Bay, Dubai, United Arab Emirates
Email: privacy@antox.io