Privacy policy

This policy explains what Ayo collects, why we collect it, and what we do with it. It is written to be read, not to be skimmed past. If anything here is unclear, write to us at support@ayo.ae.

What we collect

• Account details. Your name, email address, phone number and delivery addresses.
• Instructions. The messages you send Ayo, so the agent can understand and complete what you asked for.
• Order history. What was bought, from which merchant, at what price, and what happened to the delivery.
• Preferences. Dietary rules, allergies, brands, sizes, household details and spending rules you set.
• Payment references. Tokenised references to your card. We do not store your full card number.
• Technical data. Device, browser and coarse location information used to keep the service secure and working.

Payment data

Card details are held by a PCI DSS compliant payment partner, inside a vault that Ayo cannot read. When you approve a purchase, a single use credential is issued for that merchant and that amount, and it stops working after settlement. Neither Ayo nor the merchant receives your real card number.

Why we use it

• To understand your instruction and plan the order you asked for.
• To place, pay for and track that order with the merchant.
• To apply your mandates, spending caps and blocked categories.
• To improve results over time, such as remembering your usual order.
• To detect fraud and protect your account.
• To meet legal, accounting and regulatory obligations.

Who we share it with

We share the minimum necessary with merchants (to fulfil your order), payment and acquiring partners (to take payment), delivery providers (to reach your door), and infrastructure providers that host the service. We do not sell your personal data, and we do not share your order history with advertisers.

The waitlist form

When you ask to join the waitlist we receive the name, email address, emirate and message you typed, and nothing else. Before the form is accepted, Cloudflare Turnstile checks that a person and not a script sent it; that check sees your IP address and basic browser signals, and it is not used to profile you or to track you across sites. The message is then delivered to us by Resend, our email provider, from do-not-reply@ayo.ae. We use what you send only to reply and to invite you when a slot opens. Ask us at support@ayo.ae and we will remove you from the list.

Agent decisions

Ayo uses automated systems to search, compare and prepare orders. Payment happens against a mandate you signed, and by default a purchase requires your approval. Where you have enabled hands off execution, it applies only inside the limits you set, and you can revoke it at any time. Every step is logged so you can review what the agent did and why.

Retention

We keep account and order records for as long as your account is open and for the period required by UAE tax, accounting and anti money laundering rules after it closes. Conversation history used to personalise results can be cleared from your settings at any time.

Your rights

You can ask for a copy of your data, correct it, delete your account, export your order history, or object to specific processing. Write to support@ayo.ae and we will respond within thirty days.

Security

Data is encrypted in transit and at rest. Access to production systems is restricted, logged and reviewed. Payment credentials are tokenised and scoped, so a compromised token cannot be reused elsewhere.

Changes

If this policy changes in a way that affects you, we will say so on this page and, where the change is material, contact you directly before it takes effect.