Skip to content

Privacy Policy

Last updated: 2026-04-27v1

We take your privacy seriously. This policy explains what data we collect, why we collect it, and the choices you have. This is a v1 plain-language draft — our legal team reviews it periodically and we'll notify you of material changes.

This policy applies to oohup.ae, creatives.oohup.ae, and the OOHUP mobile app once it launches. It covers everyone who uses OOHUP — advertisers, venue partners and visitors to our marketing site.

  • Account info — your name, email, company, phone number and role.
  • Authentication — Auth0-managed identifiers (we don't store your password).
  • Campaign data — your creative content, budget, target neighborhoods, schedule and performance metrics.
  • Payment data — handled entirely by Stripe. We do not store card numbers.
  • Venue data — for venue partners: location, footfall estimates, surface specs, payout details.
  • Aggregated engagement data — QR scans and footfall geofencing, in aggregate and anonymised form. No personal identification.
  • Cookies — essential cookies for sessions, plus optional analytics cookies (see section 9).

We use your data to:

  • Operate and secure your account.
  • Deliver your campaigns and report results.
  • Process payments to advertisers and payouts to venue partners.
  • Calculate venue earnings accurately.
  • Detect and prevent fraud and abuse.
  • Comply with UAE law and respond to lawful requests.

Your primary data lives in PostgreSQL databases hosted in the UAE / EU. Backups are encrypted. Some sub-processors (listed below) may handle data outside the UAE — see section 11.

We share data only with the service providers that help us run OOHUP. These include:

  • Auth0 — authentication and identity management.
  • Stripe — payment processing.
  • Resend — transactional email (receipts, alerts, approvals).
  • Anthropic, Recraft, Brandfetch — Creative Studio AI vendors, only when you use the Studio.
  • Mapbox — map and location services on the platform.

We do not sell your personal data. Ever.

When you use the AI Creative Studio, your inputs — for example your logo, brand information and copy prompts — are sent to Anthropic Claude (for copy generation) and Recraft.ai (for visual generation). Their respective privacy policies apply to that processing.

We do not retain your prompts beyond the active session, and we don't use them to train third-party models on your behalf.

You have the right to:

  • Access the personal data we hold about you.
  • Correct anything inaccurate.
  • Delete your account and associated personal data.
  • Export your data in a portable format.

To exercise any of these, email privacy@oohup.ae. We respond within 30 days.

OOHUP is for users aged 18 and over. We don't knowingly collect personal data from anyone under 18. If you believe a minor has given us their data, contact us and we'll delete it.

We use a small number of essential cookies to keep you signed in and to keep the site secure. We also use optional analytics cookies that help us understand which features are useful. You can opt out of optional cookies at any time through your browser settings.

We protect your data with TLS encryption in transit, encryption at rest, Auth0-managed authentication, and regular security reviews. No system is perfect — if you spot a security issue, please tell us at security@oohup.ae.

Some of our sub-processors are based in the EU or US. When data moves outside the UAE, we rely on standard contractual clauses and equivalent safeguards to protect it.

We may update this policy from time to time. For material changes, we'll email the address on your account at least 30 days before the changes take effect.

For privacy questions or to exercise your rights, email privacy@oohup.ae. For security reports, use security@oohup.ae.

OOHUP FZ-LLC, Dubai, United Arab Emirates. Document version: v1 (2026-04-27). This is a plain-language working draft — formal legal review is ongoing.