The Privacy Policy
You Will Actually Read.

Who is actually behind all this?

Caijo is a product of Caijo Inc., registered and operating at Fairview Residency, 172 Marasi Drive, Office Suite 906, 9th Floor, Business Bay, Dubai, UAE.

For the purposes of this policy, "we", "us", and "Caijo" mean Caijo Inc. "You" means you, the human reading this. "The site" means caijo.com and its subdomains. "The app" means app.caijo.com. Caijo Inc. is the data controller, which means we decide how your data is handled and we take responsibility for it.

What data do we actually collect?

When you register or fill in a form, we collect your name, email address, and the content of your message. We also log the time of submission and which page the form was on.

When you use the Caijo app, we collect the domains you submit for scanning, your scan results, your saved reports, and your account preferences. This data is tied to your account and is yours.

When you browse the site, standard analytics tools may collect anonymised data: which pages you visited, how long you spent, your approximate location at country or city level, the device and browser you used, and how you found us. Think of it as knowing "roughly 500 people visited today, most from Dubai, most arrived via LinkedIn." Nothing creepy.

We do not collect your date of birth, financial information, health data, political opinions, or what you had for breakfast. None of that is relevant to whether your brand is visible to AI search engines.

Why do we even need any of this?

• To provide the service. Running a scan, saving a report, and showing you your results all require storing data tied to your account. There is no way around that one.
• To reply to you. If you contact us, we need your email address to respond. Revolutionary concept.
• To send account emails. Welcome emails, password resets, scan completion notifications. You need these. So do we.
• To understand how the product is performing. Analytics help us know which features are useful and which are quietly ignored. We use this to make Caijo better.
• To comply with legal obligations. Sometimes we have to keep records for legal or tax reasons. We do the minimum required and nothing more.

What we will never do: sell your data, rent it, swap it for a favour, or use it to bombard you with stuff you did not ask for.

How long do we keep your data?

Not forever. We keep your data for as long as there is a legitimate reason to have it, and then we delete it.

• Account data is kept for the duration of your account plus 90 days after deletion, to allow for any disputes or recovery requests.
• Scan results and reports are kept according to your plan limits. Free users do not have saved reports. PRO+ users have up to 25. Agency users have unlimited.
• Analytics data is aggregated and anonymised within 14 months in line with standard platform settings.
• Email correspondence is kept for up to three years, in case we need to refer back to what was agreed.

Want your data deleted sooner? Email gdpr@caijo.com and say "please delete my data." We will confirm it is done within 30 days. No hoops to jump through, no automated response asking you to please hold.

Do we sell your data? Absolutely not.

We do not sell your personal data. We never have. We never will. Here are the third-party tools we use, in the interest of total transparency:

All third-party tools we use are required to handle data responsibly. If one ever changes their practices in a way we are not comfortable with, we find a different one.

Your rights. They are quite good, actually.

Under GDPR and applicable data protection law, you have a proper set of rights. Most companies bury these in paragraph nineteen of their policy. We are putting them front and centre.

• The right to know. Ask us at any time what personal data we hold about you. We will tell you clearly within 30 days.
• The right to a copy. Request a copy of your data in a portable, readable format. No charge. No fuss.
• The right to correct it. If something we have is wrong, ask us to fix it. We will. Promptly.
• The right to delete it. Ask us to delete your personal data and, unless we have a legal obligation to keep it, we will do exactly that.
• The right to object. If you think we are using your data unjustifiably, you can object. We will respond within 30 days.
• The right to withdraw consent. Changed your mind about something you agreed to? Withdraw consent at any time. No penalties. No guilt trip.
• The right to complain to a regulator. If we have not resolved things to your satisfaction, you can complain to the TDRA (UAE) or ICO (UK). We would rather you came to us first, but the right is yours.

To exercise any of these rights, email gdpr@caijo.com with the subject line "Data Request." That is all you need to do.

Cookies. Not the chocolate chip kind.

The site uses cookies. For the full breakdown of which cookies are used, why they exist, and what you can do about them, we have written a dedicated Cookies Policy that is, if we do say so, also worth reading.

Read the Cookies Policy

Changes and how to reach us.

We will update this policy when necessary. The date at the top reflects the last update. If we make a significant change, we will do our best to let you know.

Email: gdpr@caijo.com
Subject line: "Privacy Question" or "Data Request" works perfectly.
Response time: Within two business days. Usually same day.

Caijo Inc.
Fairview Residency, 172 Marasi Drive, Office Suite 906, 9th Floor
Business Bay, Dubai, UAE