← Back to FreshStack

// legal

Privacy Policy

Last updated: 16 August 2026

FreshStack ("we", "us", "our") is an AI and automation agency. We design, build, and maintain automation systems, AI agents, and internal tooling for businesses. FreshStack is a subsidiary of The Mighty Bean LLC, registered in the United Arab Emirates. This policy explains what personal data we collect, how we use and share it, and the choices you have. For any questions, contact us at hello@freshstack.ai.

1. Who this applies to

This policy covers three groups of people:

2. Information we collect on this website

3. How we use this information

We use the information above to respond to your enquiries, send you the resources or results you asked for, prepare for and hold calls you book with us, follow up on your interest in our services, understand how the website is used so we can improve it, and comply with legal obligations. We only send marketing follow-ups related to what you requested, and you can opt out at any time by replying or emailing hello@freshstack.ai.

4. Client project data

Our core work is building automation and AI systems inside our clients' businesses. That work can involve access to client systems (for example CRMs, project management tools, communication platforms, finance tools, and databases) that contain personal data about our clients' customers, staff, or partners.

For this data, the client is the data controller and FreshStack is a data processor. We access and process it only as needed to deliver the agreed work, under the client's instructions and our agreement with them. We do not use client project data for our own marketing, we do not sell it, and access is limited to the people at FreshStack working on that engagement. If you are a customer of one of our clients and have questions about your data, the business you dealt with is your first point of contact; you can also reach us at hello@freshstack.ai and we will help route your request.

5. Automated processing and AI

The systems we build often use third-party AI models (such as Anthropic's Claude) to read, classify, or generate content as part of an automation. Where AI processing is part of a client build, it operates under that client's instructions and agreements. On our own website, we do not use AI to make any decision that produces legal or similarly significant effects about you.

6. Sharing and service providers

We do not sell your personal information. We share it only with service providers we use to run our business, who may process it solely to provide services to us:

We may also disclose information where required by law, or in connection with a business transfer such as a merger or acquisition, in which case this policy will continue to apply to the transferred data.

7. Data retention

We keep website and lead data only as long as needed for the purposes above: enquiry and lead records for as long as there is an active conversation or a legitimate prospect relationship, and client records for the duration of the engagement plus any period required for legal, accounting, or dispute-resolution purposes. Client project data is retained or deleted according to each client's instructions and our agreement with them.

8. Your rights

Depending on your location (including under UAE data protection law and the GDPR), you may have the right to access, correct, delete, or restrict the use of your personal data, to object to certain processing, and to withdraw consent where processing is based on consent. To exercise these rights, email hello@freshstack.ai. If your data was processed as part of a client project, we may refer your request to the relevant client as controller, and will assist them in responding. We will respond in line with applicable law.

9. Data deletion

To request deletion of your data, email hello@freshstack.ai from the address you used with us, or tell us which details you shared. We will delete or de-identify your data unless we are required to retain it by law.

10. Security

We use appropriate technical and organisational measures — including encryption in transit, access controls, and secrets management — to protect your data, and we apply the same discipline to the client systems we are trusted with. No method of transmission or storage is completely secure, but we work to protect your information and continuously improve our safeguards.

11. Children

Our services and website are directed at businesses, not children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

12. International transfers

We are based in the United Arab Emirates and our service providers operate globally, so your data may be processed in countries other than your own. Where required, we put appropriate safeguards in place for such transfers.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date above.

14. Contact us

FreshStack, a subsidiary of The Mighty Bean LLC (United Arab Emirates) — email hello@freshstack.ai.