1. Who we are

MAJ Leads(“MAJ Leads”, “we”, “us”, “our”) is the data controller for personal data processed through www.majleads.com and the MAJ Leads platform. Our registered place of business is Bur Dubai, Dubai, United Arab Emirates. You can reach us at hello@majleads.com or +971 58 950 9633.

2. Information we collect

We collect information in three ways: directly from you, automatically when you use the site, and through the operation of our AI voice agents.

2.1 Information you provide directly

Account data: name, email, phone, company name, role.
Billing data: payment card information (processed by Stripe — we never see full card numbers), VAT / tax identifier, billing address.
Voice agent configuration: scripts, knowledge-base content, voice samples, brand assets you upload.
Support and sales communications: anything you tell us via email, chat, calendar booking, or phone.

2.2 Information collected automatically

Technical data: IP address, browser type and version, device type, operating system, time-zone.
Usage data: pages visited, features used, timestamps, referrer.
Strictly-necessary cookies for session, CSRF, and post-login redirect. See our Cookie Policy.

2.3 Information processed by our AI voice agents

Inbound and outbound call audio and transcripts.
Caller phone number, call duration, time of call.
Structured outcomes the agent extracts (intent, qualification answers, appointment details).
Lead information passed to your CRM via Make.com or direct integrations.

Where you are our customer and we operate voice agents on your behalf, you are the controller for the personal data of your callers and we act as the processor under a data-processing agreement that forms part of our Terms of Service.

3. How we use this information

Provide, operate, and improve the MAJ Leads platform and voice agent services.
Bill subscriptions and process payments.
Send service notices, security alerts, and support replies.
Send marketing emails — only with consent and only until you opt out.
Meet legal, regulatory, and TDRA compliance obligations.
Detect fraud, abuse, and security incidents.

4. Legal basis for processing

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and the EU GDPR we rely on:

Consent — marketing emails, cookies beyond strictly necessary, and certain optional features.
Contractual necessity — anything required to deliver the platform to you.
Legitimate interests — security, fraud prevention, product analytics, communications about service changes.
Legal obligation — TDRA recordkeeping, tax, anti-fraud, court orders.

5. Who we share data with (sub-processors)

We share personal data only with vetted sub-processors under data-processing agreements. We do not sell personal data.

Stripe — Subscription billing (Global).
Resend — Transactional email (EU/US).
Make.com (Integromat) — CRM routing and workflow automation (EU).
Cal.com — Demo booking scheduling (EU).
Vercel — Web hosting and edge serving (Global).
Voice agent infrastructure (Vapi / Retell / Bland class) — AI voice call orchestration (US/EU).

Our current sub-processor list is the source of truth and may be updated as we add or remove vendors. Material changes are communicated to customers before they take effect.

6. International transfers

Some sub-processors are located outside the UAE. Where personal data is transferred to a jurisdiction without an adequacy decision, we apply Standard Contractual Clauses or equivalent safeguards. Call recordings and call transcripts for UAE-deployed voice agents are stored in compliance with UAE data-residency requirements.

7. How long we keep data

Call recordings and transcripts: For the period required under UAE telecommunications law, encrypted at rest under audit-grade controls.
Account data: For the duration of the active subscription + 90 days post-cancellation.
Marketing contacts: Until the contact opts out.
Audit logs: 7 years (financial / compliance).

8. Your rights

Under UAE PDPL and GDPR you can:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your data.
Restrict or object to certain processing.
Withdraw consent for marketing or cookies at any time.
Request portability of data you provided to us.
Lodge a complaint with the UAE Data Office or your local supervisory authority.

Email hello@majleads.com to exercise any of these rights. We respond within 30 days.

9. AI voice agents — caller disclosure and recording

Every MAJ Leads voice agent operates under our compliance-by-default architecture. AI-agent introductions and recording notices — required or adopted as our standard — are built into the conversation runtime rather than left to per-deployment configuration. Recordings are encrypted at rest under audit-grade controls and accessible to the controlling customer through the MAJ Console for the duration of the regulatory retention window.

10. TDRA telemarketing compliance (outbound calls)

Outbound voice agents operated by MAJ Leads are aligned with UAE TDRA Cabinet Resolution 56 and Cabinet Resolution 57 of 2024 — including all caller-identity, timing, registry-screening, recording, and retention obligations set out in the regulations. The platform enforces these obligations at the infrastructure level so that campaigns remain inside the regulatory perimeter by design.

11. Security

We use encryption in transit (TLS) and at rest, role-based access controls, audited admin actions, and continuous monitoring. No method of transmission or storage is 100% secure; we will notify affected users and the relevant authorities of any qualifying personal-data breach without undue delay.

12. Children

MAJ Leads is a B2B service not directed at children under 18. We do not knowingly collect personal data from minors. If you believe we have, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The “effective date” above will change accordingly. Material changes will be notified by email to active customers and via a prominent notice on the site.

14. Contact and complaints

Questions or complaints: hello@majleads.com. Postal: Bur Dubai, Dubai, United Arab Emirates. Governing law and jurisdiction: United Arab Emirates (Dubai Courts).