Legal

Privacy Policy

1. Introduction

ONE ON ONE is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services, and sets out your rights regarding that data and how to exercise them.

ONE ON ONE handles personal data in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia.

Geographic Scope: ONE ON ONE services are available exclusively to users located in the Gulf Cooperation Council (GCC) region. Users located in any jurisdiction outside the GCC are not eligible to use ONE ON ONE services.

2. Information We Collect

We may collect information about you in the following ways:

• Personal Data: Name, email address, phone number, company name, job title, and professional role.
• Project Information: Enquiry messages, project requirements, content briefs, scripts, and topic outlines shared with us during an engagement.
• Usage Data: Interaction logs, device information, and anonymised analytics data to improve our service.

We do NOT collect:

• Photographs or facial images
• Voice recordings or voice samples
• Biometric data of any kind (fingerprints, facial recognition data, voiceprints)
• Genetic data or health data
• Any data used to create a digital likeness of any real person

All AI presenters used in ONE ON ONE productions are original AI-generated characters. No real person's likeness, photograph, or voice is used or replicated in any production.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Service
• Produce your commissioned AI video content using our AI presenters
• Process your service engagement
• Communicate with you about your productions and account
• Improve our platform and services

4. Data Sharing

We share your data only with:

• AI production partners (under data processing agreements, for content production only)
• Email delivery provider (for enquiry notifications)
• Cloud infrastructure providers (for secure data storage)
• Authorities (only if legally required by applicable law)

We do NOT sell your data. We do NOT use your data for advertising. We do NOT share your data beyond what is listed above.

5. Your Rights

Under the Personal Data Protection Law (PDPL) and applicable GCC data protection frameworks, you have the following rights regarding your personal data:

• Right to Access: You may request a copy of the personal data we hold about you, including information you have provided directly and information collected through your use of our services.
• Right to Rectification: You may request that we correct any inaccurate or incomplete personal data we hold about you, including updating your contact details or professional information.
• Right to Erasure: You may request that we delete your personal data, including your account information, project briefs, scripts, and any other data associated with your engagement. We will action deletion requests within 30 days of receipt. Data is removed from our active systems when the request is actioned, and is permanently erased from platform backups within a further 30 days, except where retention is required by applicable law.
• Right to Data Portability: You may receive your personal data in a structured, commonly used, and machine-readable format and transmit that data to another controller without hindrance from ONE ON ONE.
• Right to Withdraw Consent: Where we process your personal data on the basis of your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
• Right to Object to Processing: You may object to the processing of your personal data for direct marketing purposes. Where you object for direct marketing, we will stop processing your data for that purpose immediately.
• Right to Restrict Processing: You may request that we restrict the processing of your personal data in certain circumstances, such as while we investigate a claim of inaccuracy or where you have contested the accuracy of your data pending verification.

6. Exercising Your Rights & Response Times

To exercise any of the rights listed in Section 5, contact our Data Protection Officer at privacy@one-on-one.social. We will respond within 30 days of receiving your request.

In complex cases, we may extend the response period and will inform you of any extension and the reasons for it within the initial 30-day period.

7. AI-Generated Content Disclosure

All content produced through ONE ON ONE is clearly labelled as AI-generated synthetic media. All delivered content carries an AI-produced content disclosure label. ONE ON ONE does not use any client data to train AI models under any circumstances.

8. Saudi Arabia PDPL Compliance

ONE ON ONE processes account and project data in accordance with Saudi Arabia's Personal Data Protection Law (PDPL). Processing is conducted on the basis of contractual necessity and explicit user consent obtained through our standard service engagement process. The rights set out in Section 5 apply to all users. Data deletion requests are actioned within 30 days.

9. Regional Data Handling

ONE ON ONE handles personal data in accordance with applicable data protection regulations across all served regions: GCC (Saudi Arabia PDPL and equivalent frameworks). All users have the same data rights as described in Section 5 of this policy.

10. Data Storage

ONE ON ONE's website is operated on a third-party cloud application platform. Enquiry details submitted through our website forms — name, email address, telephone number, company name, job title, and any message you include with your enquiry — are stored on that platform's infrastructure in the United States, under a data processing agreement which requires the provider to process data only on our instructions and to maintain appropriate security measures. The platform provider maintains SOC 2 Type II and ISO 27001 certification.

Project material is not handled through this website. Scripts, working files, and delivered content are exchanged directly with the client and held separately under the terms agreed for each engagement.

All data is encrypted in transit and at rest.

11. Data Retention

• Account data is retained for as long as your account or service engagement is active.
• Content briefs and scripts are retained for 90 days after production completion unless you request earlier deletion.
• Invoicing and tax records are retained as required by Saudi commercial and tax law.
• Anonymised usage analytics are retained for service improvement purposes.

In certain circumstances, we may be required to retain some of your personal data even after you request deletion:

• Invoicing and tax records — retained as required by Saudi commercial and tax law.
• Records of your consent and any withdrawal of consent — retained for evidence of compliance.
• Records of data subject requests — retained for audit and regulatory compliance purposes.
• Content produced for you — retained for 90 days after delivery, after which it is permanently deleted unless you request earlier deletion.

You may request deletion of your data at any time by contacting privacy@one-on-one.social.

12. Cookies

ONE ON ONE uses session cookies for authentication and platform functionality only. We do not use advertising trackers, cross-site tracking cookies, or third-party analytics cookies that identify individual users.

13. Changes to This Policy

We may update this Privacy Policy at any time to reflect changes in applicable law or our data handling practices. We will notify you of any material changes by email or by posting a prominent notice on our platform. Changes take effect immediately upon posting. Continued use of the Service constitutes acceptance of updates.

Contact

For questions about this Privacy Policy or to exercise your rights, contact our Data Protection Officer: