Privacy Policy

01

Who we are

Sales Link Consultancy - FZCO is a supply chain management consultancy licensed by the Dubai Integrated Economic Zones Authority (DIEZA), licence number 006-0058192-110225. Our registered address is IFZA Properties, Dubai Silicon Oasis, Dubai, United Arab Emirates. We trade under the brand name FutureEntity.

Contact: connect@futureentity.co

02

What data we collect and why

Route Pulse (no account required)

Route Pulse is a free, public tool. We do not require you to create an account or log in. When you visit, we collect standard analytics data via PostHog:

• Pages visited and sections viewed
• Approximate country, derived from IP address. PostHog processes the IP address to determine country and it may be retained by PostHog under their own retention policy; we do not store it in our own database.
• Device type, browser, and session duration
• Referral source and UTM parameters
• Anonymised interaction events (e.g. briefing opened, share clicked)

This data is used solely to improve the product and measure usage. It is never sold or used for advertising.

Registered accounts (Demand Planning Calculator)

To use the Demand Planning Calculator, you create a free or paid account. We collect:

• Identity: email address, display name
• Authentication: sign-in method (Google OAuth or magic link email)
• Calculation inputs: the origin and destination you select, average usage, supplier lead time, on-hand inventory, incoming shipment quantity and arrival, your safety-stock policy, target cover, and landed cost per unit
• Calculation results: the outputs generated from those inputs — effective lead time, safety stock, order quantity, reorder point, days of cover, urgency signal, and any financial figures where you supplied a landed cost
• Usage data: calculations run, features used, session timestamps
• Billing data (paid subscribers only): subscription plan and status, managed via Stripe. We do not store card numbers — these are held by Stripe.

03

Your calculation data is confidential

Each user's data is isolated at the database level using row-level security, so no other customer account can access your calculations. FutureEntity technical staff may access calculation data only where required to operate or support the service, and are bound by confidentiality obligations.

04

Legal basis for processing

We process personal data under the UAE PDPL on the following bases, mapped to each data type:

• Contract performance (Article 5(b)): email address, display name, authentication method, calculation inputs, billing status — all required to provide the Calculator service you signed up for.
• Legitimate interests (Article 5(c)): anonymised analytics data (pages visited, device type, interaction events, session duration, approximate location) — used to improve the product and understand usage patterns. Our interest in product improvement is balanced against your right to privacy; we mitigate risk by not retaining IP addresses in our own database and by aggregating all analytics before retention.
• Legal obligation (Article 5(a)): billing and transaction records, held by Stripe as our payment processor and retained under Stripe's retention policy to meet accounting and tax record-keeping obligations.

We do not currently rely on consent as a legal basis for any processing. The emails we send — account, billing and service messages about the product you have signed up to — are sent on the contractual basis above, not as optional marketing. If we later introduce optional communications, such as scheduled delivery of the daily briefing to a channel you choose, we will ask for your consent separately and you will be able to withdraw it at any time.

05

Where your data is stored

Personal data is transferred to the following countries as part of our service delivery:

• India (ap-south-1, Mumbai) — Supabase, our database and authentication provider
• United States — Stripe, our payment processor
• United States — PostHog, our analytics provider
• United States — Resend, our transactional email provider

None of these countries currently hold a formal adequacy determination under UAE PDPL. In accordance with the cross-border transfer provisions of the PDPL, all transfers outside the UAE are conducted under appropriate contractual safeguards — specifically, data processing agreements that impose data protection obligations equivalent to those required under UAE law. You may request information about the specific safeguards in place for any transfer by contacting us at connect@futureentity.co.

06

Third-party services

We use the following sub-processors. We have executed data processing agreements with each, binding them to protect personal data in accordance with applicable law:

• Supabase (India) — database and authentication
• Stripe (US) — payment processing
• PostHog (US) — product analytics
• Resend (US) — transactional email (magic links, notifications)
• Crisp (EU) — customer support chat. Your email address and display name are shared with Crisp when you open a support conversation, so we can identify you.
• Vercel (US) — application hosting. All requests to the service, including IP address and session tokens, pass through Vercel's infrastructure.
• Anthropic Claude API (US) — used to generate Route Pulse briefings from aggregated public intelligence data (PortWatch port statistics and news summaries). Only public pipeline data is sent to this API. No user account data, calculation inputs, or personal information is included in any API request.
• Upstash / QStash (US) — background pipeline scheduling. No personal data is processed.

We do not sell, rent, or share your personal data with any third party for marketing or advertising purposes.

07

How long we keep your data

• Account data: retained while your account is active. Deletion is immediate and permanent — we do not keep a recovery copy, so a deleted account cannot be restored.
• Calculation data: retained while your account is active, and deleted permanently along with it. We keep it for two reasons: so we can reconstruct exactly which route and port conditions produced a given result if you ever query one, and so we can diagnose errors. It is not retained for any other purpose.
• Session recordings: screen replays are retained for 30 days, then deleted automatically by PostHog and cannot be restored
• Analytics data: aggregated and anonymised event data, retained according to the retention period applied by PostHog, our analytics provider
• Billing records: invoices and payment records are held by Stripe, our payment processor, and retained under Stripe's own retention policy. We retain only subscription status and plan in our database, which is deleted with your account.

08

Your rights

Under the UAE PDPL, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Delete your account and all associated personal data
• Portability — receive your personal data in a structured, machine-readable format to transfer to another provider
• Withdraw consent at any time for any processing that relies on it, without affecting the lawfulness of prior processing. As set out in section 04, we do not currently rely on consent for any processing.
• Object to processing based on legitimate interests, where your individual circumstances justify it
• Object to automated processing — we do not make legally significant decisions about you through automated means. If you believe otherwise, you have the right to request human review.

To exercise any of these rights, email connect@futureentity.co. We will respond within 30 calendar days. For complex or multiple requests, we may extend this by a further 60 days and will notify you of the extension.

Cancelling a subscription and deleting an account are two separate things. You can cancel a paid subscription yourself at any time from “Manage billing” in your account menu. That ends billing, but your account, profile and calculation history remain — you keep a free account and continue to have access to Route Pulse.

To delete the account itself, email us at connect@futureentity.co. There is no self-service deletion button in the product yet, so we action these requests manually: we remove your account, profile and all calculation data, permanently and without a recovery copy.

If you are not satisfied with our response, you have the right to lodge a complaint with the UAE Data Office.

09

Security & data breaches

We apply industry-standard security measures including encrypted connections (HTTPS/TLS), database-level row security, and access controls limited to service roles. No system is perfectly secure, and we cannot guarantee absolute security — but we take reasonable and appropriate technical and organisational measures to protect your data.

In the event of a personal data breach, we will:

• Notify the UAE Data Office within 72 hours of becoming aware of the breach, in accordance with Article 9 of the PDPL
• Notify affected users directly where the breach poses a high risk to their rights and privacy

If you suspect a security issue or unauthorised access to your data, please contact us immediately at connect@futureentity.co.

10

Cookies & local storage

We use minimal browser storage. PostHog sets a first-party analytics cookie on page load to measure returning visits and usage patterns (anonymised). This is processed on the basis of legitimate interests as described in Section 04. No advertising cookies or third-party tracking pixels are used.

We use PostHog session recording to capture screen replays, which we review to find and fix usability problems. All form inputs are masked — we do not record what you type, including any demand figures, inventory levels or cost data you enter into the Calculator. The replay shows where you clicked and where you got stuck, not the contents of your fields. Recordings are kept for 30 days and are then deleted automatically.

You can opt out of PostHog analytics, including session recording, at any time by enabling the “Do Not Track” setting in your browser, which we honour, or by clearing your browser cookies. Opting out does not affect your ability to use Route Pulse or the Calculator.

11

Changes to this policy

We may update this policy as the product evolves. The effective date at the top of this page reflects the most recent version. Material changes that affect how we use your data will be communicated to registered users by email before they take effect.

12

Governing law

This Privacy Policy is governed by the laws of the United Arab Emirates. Any disputes relating to this policy or to our processing of your personal data shall be subject to the exclusive jurisdiction of the onshore courts of Dubai, United Arab Emirates.