1. Who we are
Aura AI Agents L.L.C-FZ, Meydan Free Zone, Dubai, U.A.E. Commercial Licence No. 2647800.01. Contact: privacy@auraaia.com.
2. Scope
NEXUS provides managed AI content production services to client brands and individual operators (“Clients”). This Policy applies to:
- Visitors to nexusai.media.
- Client representatives who book calls, sign agreements, and use our workspace dashboard.
- Individuals whose voice, likeness, or other personal data is used in content NEXUS produces (e.g., founders, executives, doctors). These individuals are referred to as “Subjects.”
- End viewers who interact with content NEXUS produces on social platforms (note: those platforms are independent controllers for their own user data).
3. Personal data we collect
About visitors
- Form data: name, email, company, phone (WhatsApp), system of interest, notes you submit.
- Technical data: IP, browser, device, page activity.
- Cookie data: see our Cookie Policy.
About Clients and their authorised users
- Account and contact data: name, email, role, company, country, phone.
- Billing data: billing contact, address, VAT/TRN, payment method metadata.
- Workspace activity: strategy approvals, feedback, comments, calendar selections, file uploads.
About Subjects (used for AI cloning and likeness)
- Voice recordings used to train voice clones.
- Photographs and video used as reference for face/likeness models.
- Biographical information, professional credentials, signature phrases, and brand voice.
- Consent documentation.
About referenced individuals in content
Where Client briefs include third parties (e.g., guest experts, patients in healthcare content), we process personal data only to the extent provided by the Client. The Client is responsible for confirming it has rights and consents.
4. How we use personal data
- Provide NEXUS services, including strategy, content production, and posting.
- Train and operate AI clones for the express purpose of producing content for the Client / Subject who consented.
- Manage the Client relationship, billing, and support.
- Detect and prevent abuse, fraud, and security incidents.
- Comply with legal obligations, including content rules of the platforms we post to and the UAE Media Regulatory Office.
- Improve our services (using aggregated or de-identified data where possible).
- Communicate updates, and with consent or where lawful, marketing.
5. AI cloning specifics
NEXUS produces AI clones — synthetic representations of a Subject’s voice, face, and likeness. We:
- Create AI clones only with the Subject’s express, written, informed consentvia our AI Likeness & Cloning Consent.
- Use a Subject’s clone only to produce content approved by that Subject (or, where the Subject has authorised the Client to approve on their behalf, by the Client).
- Do notsell or sub-license a Subject’s voice or likeness.
- Do notuse a Subject’s voice or likeness to train general-purpose models or any model not contracted to that Subject.
- Securely store voice and likeness training data with access controls appropriate to its sensitivity.
- On termination of the engagement, delete or, where the Subject opts in, retain training data for a defined wind-down period.
6. Legal bases (UAE PDPL / GDPR where applicable)
- Consent (for AI cloning, biometric-related processing where applicable, marketing).
- Contractual necessity.
- Legitimate interest (e.g., security, fraud prevention).
- Legal obligation.
7. Sharing
- Sub-processors: AI generation services (text, voice, video, image), hosting and storage, scheduling and calendar tools, payment processors, accounting, social platform APIs for posting.
- Group entities of Aura AI Agents L.L.C-FZ.
- Authorities as required by law.
- Acquirers in a corporate transaction.
We do not sell personal data.
8. International transfers
Sub-processors may operate in the EU, UK, US, India, and other jurisdictions. Transfers rely on mechanisms permitted under applicable law.
9. Retention
- Visitor enquiries: up to 24 months from last contact.
- Client records: relationship duration plus 7 years (tax/accounting).
- AI clone training data: as set out in the Consent and Client Services Agreement; deleted on termination unless the Subject opts in for retention.
- Produced content: retained per the Client Services Agreement; published content may remain on social platforms after termination.
- Marketing data: until unsubscribe.
10. Your rights
Subjects to applicable law: access, correction, erasure, restriction, objection, portability, withdrawal of consent (in particular, withdrawing AI cloning consent), and complaint to a supervisory authority. Email privacy@auraaia.com.
Subjects of AI clones can revoke consent at any time. On revocation:
- We stop producing new content with the clone.
- We delete training data and clone artefacts within 30 days, subject to backup cycles and legal retention.
- Already-published content may remain on third-party platforms; we will request removal from platforms we control or have access to, but cannot guarantee third-party takedowns.
11. Security
Industry-standard technical and organisational measures, including encryption in transit and at rest, role-based access control, logging, and incident response.
12. Children
NEXUS is not directed to children. We do not knowingly produce content featuring or directed at children under 13 without verified parental consent and legal review.
13. Sensitive sectors
For Clients in regulated sectors (medical, legal, financial), additional safeguards apply, including review of scripts against applicable advertising and professional-conduct rules. Subjects in these sectors warrant that they hold the necessary professional licences.
14. Changes
The “Last updated” date reflects the latest version. Material changes will be notified to active Clients.