SourceIQ

Privacy Policy

Last updated: June 2026

1. Data Controller

Integra IT Solutions FZE LLC ("we", "us") is the data controller for personal data processed through SourceIQ. We are registered in the UAE and comply with the UAE Personal Data Protection Law (PDPL), Federal Decree-Law No. 45 of 2021.

2. Data We Collect

  • Account data: name, email address, organization name, role
  • Authentication data: password hash, OAuth tokens (Google, Microsoft)
  • Usage data: search queries, research history, export activity
  • Technical data: IP address, browser/device info, session data
  • Payment data: processed by Stripe; we do not store card details
  • AI provider keys: encrypted at rest (AES-256-GCM) when BYOK is used

3. How We Use Data

  • Providing product research and supplier discovery services
  • Processing searches through third-party AI providers (using your BYOK keys or our configured providers)
  • Generating market analysis, trade data, and compliance reports
  • Billing, account management, and customer support
  • Audit logging for security and compliance
  • Improving the Service through aggregated, anonymized analytics

4. Third-Party Services

We share data with the following categories of processors:

  • AI providers: Google (Gemini), OpenAI, Anthropic, or your configured BYOK provider. Search queries and product data are sent for analysis.
  • Google Places API: used for local supplier discovery. Location queries are sent to Google.
  • UN Comtrade: trade flow data is retrieved using HS codes (no personal data sent).
  • Stripe: payment processing. Subject to Stripe's privacy policy.
  • Email provider: transactional emails (notifications, verification).

5. Data Retention

  • Account data: retained while account is active, deleted within 30 days of account closure
  • Research data: retained while account is active
  • Audit logs: retained for 2 years for compliance
  • AI provider keys: deleted immediately upon removal by user
  • Payment data: retained by Stripe per their retention policy

6. Your Rights (UAE PDPL)

Under the UAE Personal Data Protection Law, you have the right to:

  • Access: request a copy of your personal data
  • Rectification: correct inaccurate data
  • Erasure: request deletion of your data
  • Data portability: export your data in a machine-readable format
  • Withdraw consent: where processing is based on consent

To exercise these rights, use the "Export All Data" feature in Settings > Audit Log, or contact us at support@sourceiq.app.

7. Data Security

  • All data transmitted over HTTPS/TLS
  • Passwords hashed with bcrypt
  • API keys encrypted with AES-256-GCM at rest
  • Database access restricted to application layer
  • Audit logging of all data access and modifications

8. Cookies

We use essential cookies for authentication (session tokens). We do not use tracking cookies or third-party analytics cookies.

9. Children

The Service is not intended for users under 18 years of age. We do not knowingly collect data from minors.

10. Changes

We may update this Privacy Policy. Material changes will be communicated via email. Continued use after changes constitutes acceptance.

11. Contact

Data Protection Inquiries: Integra IT Solutions FZE LLC
Email: support@sourceiq.app