SpeakUp – Privacy Policy
SpeakUp Privacy Policy. How Shelp FZ-LLC collects, uses, shares and protects your personal data on the SpeakUp speaker booking platform.
01
1. Introduction
This Privacy Policy explains how Shelp FZ-LLC (“SpeakUp”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you use the SpeakUp platform, including our website at speak-up.pro and our iOS and Android applications (together, the “Platform”). It also describes your rights and how to exercise them.
For most personal data described in this Policy, Shelp FZ-LLC is the data controller. Where we process personal data on behalf of a Business User (for example, data a company adds about its team), that Business User may be the controller and we act as a processor under a separate arrangement.
02
2. Who This Policy Applies To
This Policy applies to all users of the Platform, including Speakers, experts, event and conference organizers, podcasters, journalists, media companies, brands and corporate teams, as well as visitors to our website. The Platform is intended only for users aged 18 and over, as explained in Section 13.
03
3. Personal Data We Collect
3.1 Data you provide
- Account and profile data: name, email, password, photo, country, languages, biography, areas of expertise, topics, availability, social links, videos, ratings and testimonials, and any other information you add to your profile.
- Content: opportunity listings, applications, messages, reviews and other Content you submit.
- Payment-related data: when you purchase, our payment provider Stripe collects and processes your card or payment details. We do not store full card numbers; we receive limited information such as transaction status and the last digits of your card.
- Support and communications: information you provide when you contact us or respond to surveys.
3.2 Data we collect automatically
- Usage data: pages and screens viewed, features used, searches, matches viewed, and interactions with Content.
- Device and technical data: device type, operating system, app version, language, approximate location derived from IP address, identifiers, and crash and performance data.
- Cookies and similar technologies: as described in Section 7 and in our Cookie Policy.
3.3 Data from third parties
- Sign-in providers, if you register or log in using a third-party account.
- Analytics and advertising partners, who may provide aggregated or attribution data.
- Publicly available sources we use to discover relevant speaking opportunities, where permitted by law.
04
4. How and Why We Use Personal Data (Legal Bases)
We use personal data for the purposes below. Where the EU or UK GDPR applies, the legal basis is shown in brackets.
- To create and manage your account and provide the Platform (performance of a contract).
- To enable AI matching, search, recommendations and booking features (performance of a contract; legitimate interests in providing a useful service).
- To process payments and manage subscriptions (performance of a contract; legal obligation for tax and accounting).
- To communicate with you about service, security and account matters (performance of a contract; legitimate interests).
- To send marketing communications where permitted (consent, or legitimate interests with an opt-out where the law allows).
- To measure, analyse and improve the Platform (legitimate interests; consent for non-essential analytics where required).
- To advertise the Platform, including through advertising partners (consent where required for tracking technologies).
- To keep the Platform safe, prevent fraud and abuse, and enforce our Terms (legitimate interests; legal obligation).
- To comply with law and respond to lawful requests (legal obligation).
05
5. AI Matching, Recommendations and Automated Decisions
The Platform uses artificial intelligence and automated systems to suggest, rank and recommend Speakers, Organizers and opportunities, and to support search, onboarding and certain Content features. These systems consider information such as topics, expertise, languages, audience, event format, profile data and your activity on the Platform.
These matches and recommendations are suggestions only and do not replace your own judgment. We do not use them to make decisions that produce legal effects on you, or similarly significant effects, without a lawful basis and appropriate safeguards.
06
6. Marketing and Push Notifications
Push notifications also require permission through your device operating system. You can disable push notifications at any time in your device settings.
09
9. International Data Transfers
We are based in the United Arab Emirates. Our platform is hosted on Amazon Web Services across several regions, and we use other service providers located in various countries, including the United States and the European Union. We host personal data of users in the EEA, the UK, the United States and the rest of the world in the AWS Europe (Frankfurt) region, personal data of Indian users in the AWS India (Mumbai) region, and personal data of Asia Pacific users in the AWS Singapore region. As a result, your personal data may be transferred to, stored in, or accessed from countries other than your own, whose data-protection laws differ from those where you live.
10
10. Data Retention
We keep personal data only for as long as needed for the purposes described in this Policy, after which we delete or anonymise it. Typical retention periods are:
- Account and profile data: for the life of your account, then deleted or anonymised within a reasonable period after account closure, unless we must keep it longer by law.
- Content and messages: until you delete them or close your account, subject to copies retained by other users or required by law.
- Payment and transaction records: for the period required by tax, accounting and anti-fraud laws.
- Analytics and device data: for a limited period consistent with the relevant tool’s settings and applicable law.
- Marketing data: until you withdraw consent or opt out, and for a short period afterwards to honour your choice.
11
11. How We Protect Personal Data
We use technical and organisational measures designed to protect personal data, such as encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal data breach is likely to affect your rights, we will notify you and the relevant authorities where the law requires.
12
12. Your Rights
Depending on where you live, you may have some or all of the following rights regarding your personal data: access; correction; deletion; restriction; objection; portability; the right to withdraw consent; and the right not to be subject to certain automated decisions. You also have the right to complain to your local data-protection authority.
13
13. Children
14
14. United States (including California)
If you are a US resident, you may have rights under state privacy laws, including in California, Colorado, Virginia, Connecticut, and others. These can include the right to know, access, correct and delete personal data, and to opt out of targeted advertising and of the “sale” or “sharing” of personal data.
15
15. European Economic Area and United Kingdom
If you are in the EEA or the UK, Shelp FZ-LLC is the controller of your personal data. You have the rights described in Section 12 under the GDPR and UK GDPR, and you may lodge a complaint with your local supervisory authority. We rely on the legal bases set out in Section 4, transfer data using the safeguards in Section 9, and obtain consent for non-essential cookies and advertising technologies as described in Section 7.
16
16. Brazil (LGPD)
17
17. India (DPDP Act)
If you are in India, you have rights under the Digital Personal Data Protection Act, including access, correction, completion, updating, erasure, grievance redressal, and nomination. We process personal data based on consent or other lawful uses recognised by the Act. Because the Platform is restricted to users aged 18 and over, we do not knowingly process the personal data of children as defined under the Act.
18
18. Singapore (PDPA)
19
19. Malaysia (PDPA)
If you are in Malaysia, you have rights under the Personal Data Protection Act as amended in 2024, including access, correction, and data portability, and we apply the Act’s data-protection principles. We handle cross-border transfers in line with the applicable transfer guidelines.
20
20. United Arab Emirates (PDPL)
21
21. Changes to This Policy
We may update this Policy from time to time. If we make material changes, we will give reasonable notice, for example by posting the updated Policy with a new effective date or notifying you in the app or by email. Your continued use of the Platform after the effective date means you acknowledge the updated Policy.
22
22. AI Assistant Connector (MCP)
What data the connector can access
What the connector cannot do
What we share with the AI provider
Authorization scope and duration
Logging and audit
No additional data collection
23