1. Introduction
Zuri Society ("Zuri", "we", "us", "our") is a private members network and AI-powered intelligence platform operated by Arcadia The Label LLC, a company registered in the Shams Free Zone, Sharjah, United Arab Emirates.
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our platform at zurisociety.com, our mobile progressive web application, our Zuri Signal product, and any related services (collectively, "the Platform").
By using the Platform, you agree to the practices described in this Privacy Policy. This Policy is issued in compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL"), the EU GDPR where applicable, and the UK Data Protection Act 2018 where applicable.
2. Who We Are
Data Controller: Arcadia The Label LLC
Registration: Shams Free Zone, Sharjah, UAE
Contact: privacy@zurisociety.com
We aim to respond to all privacy-related inquiries within 7 working days.
3. What Personal Data We Collect
3.1 Data You Provide Directly
- Full name, email address, phone number
- Country of residence and professional information
- Profile photo (optional)
- Payment method details (processed by Stripe — we do not store card numbers)
- Membership tier and subscription status
- Posts, messages, and Ask Zuri queries
- Intelligence preferences (countries, sectors, topics)
- Feedback submitted via the in-app feedback widget
3.2 Data We Collect Automatically
- IP address, device type, operating system, browser
- Pages visited, time spent, interaction with intelligence tabs
- Ask Zuri query history and trial conversion behaviour
- Engagement with Morning Brief emails
3.3 Data We Generate About You
- AI-personalised intelligence recommendations
- Member fit scores for BD matching (Executive and Inner Circle)
- Content preferences inferred from usage patterns
3.4 Business Development Data
For B2B outreach, we collect publicly available business information (company names, professional roles from LinkedIn and company websites). This data is used exclusively for legitimate business development and is never sold.
4. Legal Basis for Processing
| Basis | Examples |
|---|---|
| Contract performance | Delivering your Signal or membership subscription |
| Legitimate interests | Platform security, fraud prevention, service improvement |
| Consent | Marketing communications, optional profile fields |
| Legal obligation | Tax, accounting, lawful authority requests |
You may withdraw consent at any time by emailing privacy@zurisociety.com.
5. How We Use Your Data
- Create and manage your account
- Process subscription payments and manage billing
- Deliver the Morning Brief, intelligence tabs, and personalised content
- Operate Ask Zuri and generate responses to your queries
- Match you with relevant BD opportunities (Executive and Inner Circle)
- Send service-related emails (payment confirmations, trial reminders, account notifications)
- Send marketing communications (only with your consent)
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
- Improve our Platform through aggregated analytics
6. AI Processing Disclosure
Zuri's intelligence features are powered by third-party AI models:
- OpenAI GPT-4o — Ask Zuri responses, brief generation, and content synthesis
- xAI Grok-3-mini — The Signal, real-time signal analysis, and intelligence pipeline
Your queries and relevant context may be sent to these AI providers for processing. AI providers are bound by data processing agreements with us. We do not use your personal data to train external AI models.
7. Automated Business Development
Our BD Agent and Zuri Scout systems conduct automated outreach using publicly available data. If you receive such outreach:
- You were identified through publicly available sources
- You can unsubscribe at any time via the link in every outreach email
- Your data will be deleted within 10 working days of your unsubscribe request
- You may contact privacy@zurisociety.com for complete removal
8. Who We Share Your Data With
| Processor | Purpose | Location |
|---|---|---|
| Supabase Inc. | Database and authentication | USA |
| Railway Corp | API hosting | USA |
| Cloudflare Inc. | Frontend hosting and CDN | Global |
| Stripe Inc. | Payment processing | USA / EU |
| OpenAI, LLC | AI content generation | USA |
| xAI Corp | AI signal analysis | USA |
| Resend Inc. | Transactional email delivery | USA |
We do not sell your personal data to any third party.
9. International Data Transfers
Transfers to the USA rely on Standard Contractual Clauses or equivalent safeguards. We do not transfer data to jurisdictions without adequate protection.
10. How Long We Keep Your Data
| Data Category | Retention Period |
|---|---|
| Active member account data | Duration of membership |
| Cancelled account data | 12 months after cancellation |
| Payment records | 7 years (UAE tax law) |
| Intelligence query history | 24 months rolling |
| BD prospect data | Until unsubscribe + 10 working days |
| Platform security logs | 12 months |
11. Your Rights
- Right of access — request a copy of your personal data
- Right to rectification — correct inaccurate data
- Right to erasure — request deletion of your data
- Right to restriction — restrict how we process your data
- Right to portability — receive your data in machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to withdraw consent — where processing is based on consent
To exercise any right, email privacy@zurisociety.com. We respond within 30 days.
12. Cookies and Tracking
We use cookies for: essential authentication and session management (cannot be disabled), optional analytics, and optional functional preferences. We do not use advertising cookies or cross-site tracking. Manage preferences via our cookie banner.
13. Data Security
We implement Row Level Security on all database tables, encrypted connections (TLS/HTTPS), encryption at rest, restricted access controls, and incident response procedures. In the event of a data breach, we will notify you and relevant authorities within 72 hours where legally required.
14. Children's Privacy
Zuri is intended for adults aged 21 years and over. We do not knowingly collect data from individuals under this age.
15. Changes to This Policy
Material changes will be communicated via email at least 14 days before taking effect. Continued use after the effective date constitutes acceptance.
16. Contact Us
Privacy inquiries: privacy@zurisociety.com
General inquiries: hello@zurisociety.com
Postal: Arcadia The Label LLC, Shams Free Zone, Sharjah, UAE