Privacy Policy
1. Who we are
Auto Nexus is an insurance aggregator platform operated by Xergex Technologies FZCO, licence no. 58076, Building A1, Dubai Digital Park, Dubai Silicon Oasis, United Arab Emirates. For anything in this policy, write to contact@autonexus.ae.
2. Who this policy covers
This policy covers three groups of people: visitors to autonexus.ae; brokers, insurers and aggregators who use the platform ("clients") and their staff; and the customers of those clients whose details are entered into the platform to obtain an insurance quote or policy ("insured persons").
3. Our role
For the website and for client accounts we are the data controller. For insured persons' data entered by a client, the client is the controller and we act as the processor under our agreement with the client. Insurers who receive a quotation request are independent controllers of the data they receive.
4. What we collect
Website visitors
- Contact details you send us through the demo form: name, company, work email, WhatsApp number, team size.
- Technical data: IP address, browser, device and pages viewed, as described in the Cookie Policy.
Client users
- Name, work email, phone number, role and login credentials.
- Activity on the platform: enquiries created, quotes shared, policies issued, reports viewed. This forms the audit trail.
Insured persons
- Identity and contact details: name, Emirates ID number, nationality, date of birth, mobile number, email and address.
- Vehicle details from the Mulkiya (registration card): plate, chassis number, make, model, year, registration dates.
- Documents uploaded or collected by the chatbot: Mulkiya, Emirates ID, driving licence, RTA files, previous policy.
- Quotation, policy and payment status. Card details are entered on the insurer's payment gateway and are never stored by Auto Nexus.
- Messages exchanged over WhatsApp, SMS and email through the platform.
5. Why we use it
| Purpose | Legal basis |
|---|---|
| Obtaining quotations from insurers and issuing policies | Performance of a contract; the client's legitimate interest in serving its customer |
| Sending comparisons, reminders and documents by WhatsApp, SMS or email | Consent recorded by the client, or contract |
| Renewal reminders up to 60 days before expiry | Contract and legitimate interest; the customer can opt out at any time |
| Anti-money-laundering and sanctions screening (where enabled) | Legal obligation |
| Audit trail, security and fraud prevention | Legal obligation and legitimate interest |
| Replying to demo requests and support tickets | Consent and legitimate interest |
| Improving the platform using aggregated statistics | Legitimate interest; data is anonymised first |
6. Who we share it with
- Insurers the client chooses to quote with, so they can rate the risk, take payment and issue the policy.
- Communication providers for WhatsApp Business, SMS and email delivery.
- Hosting and storage providers, in the UAE by default. A client may instead choose to keep documents on its own premises.
- Screening providers when AML checks are enabled by the client.
- Regulators, courts and law enforcement where the law requires.
We do not sell personal data and we do not use insured persons' data for our own marketing.
7. Where data is kept
Platform data is hosted in the United Arab Emirates. Clients may choose on-premise storage for documents. Where a service provider processes data outside the UAE, we put in place the safeguards required by UAE law, including contractual protections, before any transfer.
8. How long we keep it
Insured-person data is kept for the period the client instructs, and in any case for as long as UAE insurance and anti-money-laundering rules require records to be retained (normally at least five years after the policy ends). Demo enquiries are kept for 12 months. Audit logs are kept for the life of the client account plus the statutory period.
9. Your rights
Under UAE law you may ask for access to your data, correction, deletion, restriction, a copy in a portable format, and you may object to processing or withdraw consent. If your data was entered by a broker, we will pass your request to that broker and help them respond. Write to contact@autonexus.ae. We answer within 30 days.
10. Security
Data is encrypted in transit and at rest, access is role-based and logged, and the platform is tested regularly. See the Security & Compliance page for detail.
11. Children
The platform is for adults arranging insurance. We do not knowingly collect data from anyone under 18.
12. Changes
We will post any change here and update the date at the top. Material changes are notified to clients by email.