Client data handling policy

LEGAL_PACKAGE_COMPLETE=YES · EXTERNAL_LEGAL_REVIEW=PENDING

PMGI PROJECT MANAGEMENT SERVICES L.L.C (One Person LLC) · Dubai, UAE · Commercial Licence No. 1471379 · info@pmgi.ae

Version: AITS_LEGAL_PACKAGE_20261002_V9_1_CLIENT_DATA
Published: 2026-10-02 UTC
Registration CLOSED · PAPER-only demonstration; owner actual observations separate.

Privacy and data inventory

Controller: PMGI, contact above. Necessary account fields are name, normalized email, generated immutable identifiers, language, verification/status and notice acceptance evidence. Authentication stores password hashes, hashed recovery/verification references and expiring session references; never plaintext passwords. PAPER records hold tenant-scoped simulation instructions, positions, marks and reports. Security records contain minimal event/time and rate-limit metadata. No marketing consent, identity document, biometrics or optional analytics is collected by the application. The owner read-only mapping is separate from future customer onboarding. Do not include financial records or credentials in a support message.

Deletion and request handling procedure

Responsible operational role: PMGI service operator; accountable privacy/complaints role: PMGI management through info@pmgi.ae. Record a minimal case reference, received time, request type and due-date assessment. Verify control through the authenticated account or existing verified email; never ask for password, recovery token or unnecessary identity documents. Confirm scope and applicable legal deadline, search tenant-specific profile, ledger, consent, auth, audit, mail/log and backup references; produce an export or proposed deletion inventory for review. Disable access and revoke sessions/tokens on verified closure through existing authorized operations. Review legal holds, approve the exact inventory, execute only under separately approved policy, retain minimal completion/tombstone evidence and reconcile backups on restore. Prevent cross-tenant exports. Proposed service targets: acknowledge within 5 business days and assess/escalate within 10 business days; these internal proposed targets never override a shorter applicable statutory deadline. Counsel must confirm applicable deadlines and supervisory authority before onboarding.

Incident, complaints and continuity runbook

Report suspected account compromise or a service complaint to info@pmgi.ae without secrets. The operator records scope and time, preserves minimal access-controlled evidence, contains access using existing session revocation/account restriction, investigates affected tenant boundaries, and escalates to PMGI management and qualified counsel for any notification duties and deadlines. Never suppress required reporting or promise an unverified resolution date. Complaints are reviewed by management, with outcome and escalation options recorded; unresolved legal complaints require the competent jurisdiction/authority to be established by counsel. Rollback restores verified application code; do not overwrite newer runtime records with a stale database. Restore private data only under a specific recovery procedure with integrity and tenant checks. Protected off-device real-client recovery and named key custody remain prerequisites for opening.

Change history and integrity

Content SHA-256: 1ea64815c298ced176bcc253ccc4cbdbd4e43e91a26d517ffba14a9ecb149eb3

Publication does not represent legal or regulatory approval, financial-services authorization or acceptance of new terms. No registration or execution gate is opened.