Legal

Privacy Policy

In short: this website sets no cookies, uses no analytics and no ad tracking. We only process your data when you actively write to us or fill out the application form.

01Controller

Company
HUNDREDHANDS AI - FZCO
Address
IFZA Properties, Premises DSO-IFZA
Dubai Silicon Oasis
Dubai, United Arab Emirates
Vertreten durch
Ferhat Kacmaz

Further details can be found in the legal notice. For privacy inquiries, an email to the address above is sufficient.

We treat personal data according to the standard of the EU General Data Protection Regulation (GDPR), even though our company is based in the United Arab Emirates.

02No Cookies, No Tracking

This website sets no cookies, uses no analytics or statistics tool (no Google Analytics, no Matomo, no Plausible) and no advertising or retargeting pixels (no Meta pixel, no Google Ads tag). No cross-device profiling takes place. That is why there is no cookie banner here: there is nothing to consent to.

03Hosting and Server Log Data

This website is served via Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Cloudflare acts as our data processor and delivers the pages through a worldwide network.

When you access the website, technically necessary access data is processed:

This data is necessary to deliver the site at all, fend off attacks and detect disruptions. It is not combined with other data and not used to identify individual persons.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, stable operation). Retention: short-term within Cloudflare's security and operations logs.

04Application Form and Live Demo

When you apply for an AI employee via the form on the live demo page, we process the details you enter there yourself:

The sole purpose is processing your application: review, feedback, setup and execution of your 24-hour test phase, and the subsequent contract initiation. We need your WhatsApp number because that is exactly where the test takes place.

Transmission is encrypted (TLS). The details are stored in a Cloudflare D1 database and processed via a Cloudflare Worker.

Legal basis: Art. 6(1)(b) GDPR (initiation and performance of a contract). Retention: until your inquiry is resolved; after that we delete the data unless statutory retention obligations apply. Without these details we cannot process your application.

05Contact by Email

Some buttons on this website open your email program with a prepared message to [email protected]. When you write to us, we process your email address and the content of your message in order to reply. Please do not send us particularly sensitive data by email.

Legal basis: Art. 6(1)(b) or (f) GDPR. Retention: for the duration of the matter, then within statutory periods.

06Email Delivery

For sending confirmation and access emails we use Resend (Resend, Inc., USA) as a data processor. Your email address and the content of the respective message are transmitted. Open and click tracking is disabled in our account: we do not measure whether or when you open an email.

Legal basis: Art. 6(1)(b) GDPR.

07Communication via WhatsApp

The test phase and ongoing operation of your AI employee take place, at your request, via WhatsApp (WhatsApp Ireland Ltd., a Meta group company). If you choose this channel, WhatsApp's privacy terms additionally apply to the transmission and storage of messages; we have no control over them. On request, we communicate exclusively by email instead.

Legal basis: Art. 6(1)(b) GDPR or your consent through actively choosing this channel.

08Fonts and Scripts

All fonts (Fraunces, Inter, IBM Plex Mono) and script libraries (GSAP) on this website are delivered locally from our own hosting. Loading the page establishes no connection to Google Fonts, jsDelivr or other third-party CDNs; no data is transmitted to third parties.

09Data Transfers to Third Countries

Our company is based in the United Arab Emirates. The service providers named above (Cloudflare, Resend) process data in the USA, among other places. Transfers are based on the EU Commission's standard contractual clauses or (where applicable) the respective provider's certification under the EU-US Data Privacy Framework. A level of protection fully equivalent to the European one cannot be guaranteed in every case for third-country transfers.

Legal basis for the transfer: Art. 44 et seq. GDPR.

10Your Rights

You have the right at any time to:

An email to [email protected] is sufficient. We respond without undue delay, at the latest within one month. In addition, you have the right to lodge a complaint with a data protection supervisory authority, usually the authority of your place of residence.

11No Automated Decision-Making

A human decides on your application. No exclusively automated decision within the meaning of Art. 22 GDPR and no profiling takes place.

12Data Security

This website is delivered exclusively over an encrypted HTTPS connection. Only the people in our company who need application data for processing have access to it; access is protected by keys.

13Changes to This Policy

We adapt this privacy policy when the website or the legal situation changes. The version published here applies in each case.

Last updated: August 2026