Privacy Policy

Last updated: 28 September 2026

BreakPass (breakpass.ai) is a product of X Labs L.L.C-FZ (“X Labs”, “we”, “us”), a company registered in Meydan Free Zone, Dubai, United Arab Emirates. X Labs is the controller of your personal data under this policy. Questions or requests: hello@breakpass.ai.

What we collect

From the website, before you have an account

Your email address, if you join early access.
Basic analytics about how you use the site (pages viewed, device type, approximate location from your IP address). We don’t use advertising trackers.

From the BreakPass service, once you have an account

Your account email address.
The phone numbers you verify, and the one-time codes used to verify them.
The content of the alerts your agents and apps send through BreakPass.
Delivery status: whether an alert was sent, delivered, answered or acknowledged, and basic call records (time, duration, which button was pressed).
Payment information. This is collected and held by our payment partner, the merchant of record who processes your payment — we never see or store your card details.

Why we use it, and our legal basis

We use your data to:

Give you the service you signed up for (deliver alerts to your verified numbers, run your account, process payments).
Keep BreakPass secure and stop abuse (rate limits, fraud checks, spam prevention).
Improve the product and reply to your questions.
Meet legal and accounting obligations.

Under laws like the EU/UK GDPR and the UAE Personal Data Protection Law, we rely on: performing our contract with you (running your account and sending your alerts), our legitimate business interests (security, fraud prevention, improving BreakPass), your consent (where we ask for it, such as marketing emails), and legal obligations (such as keeping financial records).

Who we share it with

We share data only with the service providers who help us run BreakPass, and only as needed to provide their part of the service:

Meta (WhatsApp Cloud API) — to send and receive WhatsApp messages.
Telnyx — to make phone calls and send SMS.
Twilio — as a backup channel for calls, SMS and verification codes if our main provider has an issue.
Google Workspace — to run our @breakpass.ai email.
Our payment partner (merchant of record) — to process payments, issue invoices and handle tax on our behalf.

We don’t sell your personal data, and we don’t share it with anyone for their own marketing purposes.

International transfers

Some of the providers above are based outside the UAE. Where we send your data abroad, we rely on their own data-protection safeguards (such as standard contractual clauses) to keep it protected to a similar standard.

How long we keep it

Alert content: 90 days, then deleted.
Delivery, call and acknowledgement logs: 12 months.
Verification codes and consent records: for as long as the number stays on your account, plus 12 months after.
Accounting records (invoices, payment records): 5 years, as UAE law requires.
Early-access emails: until you ask us to delete them, or your invite is used and superseded by an account.

Your rights

Depending on where you live, you can ask us to:

Show you the personal data we hold about you.
Correct it if it’s wrong.
Delete it.
Give you a copy in a portable format.
Stop, or limit, certain uses.

Email hello@breakpass.ai to ask. See also our Data deletion page.

Children

BreakPass is not for anyone under 18. We don’t knowingly collect data from children.

Security

We use reasonable technical and organisational measures to protect your data, including encryption in transit and restricted access to systems that hold it. No system is 100% secure, and we can’t guarantee perfect protection.

Changes to this policy

We may update this policy as BreakPass changes. We’ll post the new version here with a new “last updated” date, and tell you directly if a change is significant.

Text messages and calls: your consent

We only ever send alerts to a phone number after it has confirmed it’s yours, using a one-time code. Your agent or app can never message a number that hasn’t confirmed.
We do not sell, rent or share mobile phone numbers or SMS opt-in consent with third parties or affiliates for marketing purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
Message frequency depends on how you use BreakPass and varies from person to person.
Message and data rates may apply, charged by your carrier.
Reply STOP to any text to opt out at any time. Reply HELP for help, or email hello@breakpass.ai.
WhatsApp: you opt in the same way, by verifying your number. To stop WhatsApp alerts, remove the number from your account or email hello@breakpass.ai.

Contact

X Labs L.L.C-FZ, Meydan Free Zone, Dubai, United Arab Emirates. Email: hello@breakpass.ai.