Privacy Policy

1. What Data We Collect

SIVE collects the following types of information when you use our Platform:

• Account information: Full name, email address, date of birth
• Contact information: Phone number (for verification and communication)
• Social profiles: Instagram handle (for verification purposes)
• Photos: Profile photo and gallery photos you upload
• Voice intro (optional): A short voice recording you may upload as part of your application — used solely for application review and member-to-member context after approval, never broadcast publicly or used to train external AI models
• Identity verification data: Government ID and selfie collected by our verification provider (Sumsub) when required — processed under their controller terms; SIVE retains only the verification result and a reference token, not the underlying ID document
• Device data: Browser type, device type, IP address, and basic analytics
• Activity data: RSVPs, applications, event attendance (including no-show, late-arrival, check-in / check-out times recorded at the door, and cancellation records), chat messages exchanged with hosts and approved members, reports and blocks you submit or receive, post-event host feedback and ratings about member conduct (used to maintain network quality and not visible to other members), and moderation or trust-and-safety notes recorded by our team
• Account & security data: Session and sign-in logs, password-reset and OTP attempts, push-notification tokens, and admin audit logs of any decisions affecting your account
• Support data: Messages you send to support@joinsive.com or to our in-app concierge, and our replies

By uploading a profile photo, gallery photo, or voice intro to SIVE, you grant SIVE a non-exclusive, revocable, royalty-free licence to store and display that content solely (i) to approved members of the SIVE network for the purpose of in-app verification and curation, and (ii) to SIVE`s admin reviewers for the purpose of vetting your application and moderating the network. The licence does not permit public broadcast, marketing use, sale, sub-licensing to third parties, or use to train any external AI model.

You may withdraw this licence at any time by deleting the asset in-app, by requesting account deletion through your account settings, or by writing to $support@joinsive.com. On account deletion, all profile photos, gallery photos, and voice intros are removed from our object storage (Cloudflare R2) within 30 days, save where retention is required by UAE law (e.g. fraud or law-enforcement holds, in which case the asset is quarantined and access is restricted to authorised personnel only).

2. Why We Collect Your Data

We use your information to:

• Create and manage your SIVE account
• Verify your identity and approve your membership application
• Ensure platform safety and community quality
• Communicate important updates, event information, and notifications
• Improve our Platform and user experience
• Comply with legal obligations

2a. Lawful Basis for Processing

SIVE relies on the following lawful bases when processing your personal data, mapped to both the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where relevant, the EU General Data Protection Regulation (GDPR, Regulation 2016/679):

• Your explicit consent (PDPL Article 6; GDPR Articles 6(1)(a) and 7) — collected at signup with a logged timestamp and policy version, and required for processing your application photos, identity verification, and Instagram handle.
• Performance of a contract (GDPR Article 6(1)(b); PDPL Article 4) — processing required to operate your membership, RSVPs, and event entry once you accept our Terms.
• Compliance with a legal obligation (GDPR Article 6(1)(c); PDPL Article 4) — UAE record-keeping, anti-fraud, and law-enforcement-cooperation duties.
• Legitimate interests (GDPR Article 6(1)(f)) — community safety (vetting, abuse prevention) and product improvement, balanced against your rights and only relied on where the impact on you is minimal.

You may withdraw your consent at any time by writing to $support@joinsive.com or by deleting your account. Withdrawal does not affect the lawfulness of any processing carried out before the withdrawal.

3. How We Share Your Data

We do not sell your personal data. We share limited information with the following categories of recipient, only as required to operate the Platform:

• Service providers (sub-processors): We use carefully selected third parties to operate the Platform. Each receives only the data required to perform its function:
  • Replit & Neon (hosting and database): secure storage of your account and application data.
  • SendGrid (transactional email): delivery of account, event and verification emails.
  • Sumsub (identity verification): Sumsub acts as an independent controller for the underlying identity document and selfie it collects from you under its own privacy notice; SIVE receives only the verification outcome (pass / fail) and a reference token. Sumsub is listed here for transparency about every third party that touches your data, even where SIVE is not the controller of the underlying record.
  • Twilio (phone verification & messaging): delivery of one-time codes and event-related SMS or WhatsApp messages where you have provided a phone number.
  • Cloudflare R2 (object storage): secure storage of profile photos, gallery photos, and voice intros, served to approved members via short-lived signed URLs.
  • Google Places (venue search): when a host or admin searches for a Dubai venue, the search query is sent to Google Places; member personal data is never included in the query.
  • Anthropic & OpenAI (AI assistance): on-demand text generation for concierge, copilot and moderation features. Direct identifiers — your raw email address, phone number and surname — are not sent. Limited non-identifying context (first name, city, profession, founding-member status, event titles you have RSVPed to) may be included so responses feel personal. Under both providers` default API terms — which we rely on and have not opted out of — inputs sent through the API are not used to train their general-purpose models. The AI features are optional helpers, not gatekeepers: you may choose not to use them and continue to use the Platform without any reduction in service.
  • Web-push providers (Google/Apple/Mozilla): delivery of browser and PWA push notifications when you opt in.
• Legal authorities: When required by UAE law or to protect our rights, members, or the public.
• Event partners and venues: For events at a SIVE partner venue (a venue that has signed a written partnership agreement and whose portal status is "active"), limited guest-list information — typically your first name, membership status, and seat allocation — is shared with the venue's designated door team solely for guest-list and entry purposes. For events at non-partner venues, no member data is shared electronically with the venue; the host runs check-in manually using the SIVE host tools and the venue sees only the guest list the host chooses to share at the door. In both cases, venues do not see your email, phone number, identity document, or private reports.
• Hosts: Once you RSVP to an event, the host running that event sees your first name, profile photo, and any private notes the moderation team has flagged as relevant for the host (e.g. dietary or accessibility needs you have asked us to share). Hosts do not see your email, phone number, date of birth, or full surname unless you choose to share it directly with them in chat.

All sub-processors are bound by confidentiality and data-protection obligations consistent with the UAE Personal Data Protection Law (PDPL).

4. Storage & Security

We take the security of your data seriously. Your information is:

• Stored on secure, encrypted servers
• Protected by industry-standard security measures
• Accessible only to authorized personnel on a need-to-know basis

While we implement robust security measures, no system is 100% secure. We encourage you to use strong passwords and protect your account credentials.

SIVE operates in the United Arab Emirates and processes personal data in accordance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), commonly referred to as the PDPL.

5. Data Retention

We retain personal data only for as long as needed to operate SIVE, keep members safe, comply with legal obligations, prevent fraud, and maintain a defensible audit trail. If you request account deletion, the following applies (the full breakdown is on our Account & Data Deletion page):

• Removed within 30 days of a verified deletion request: your profile is anonymised on our database — your full name is replaced with "Deleted Member", your email is replaced with an irreversible hash, and your phone, Instagram and other social handles, website, bio, voice-intro transcript and avatar are cleared. Your profile and gallery photos and voice intro are permanently deleted from our media storage (Cloudflare R2), and the encrypted-at-rest mirrors of your name, email, phone, Instagram handle, bio and city are cleared. After this runs, the account can no longer be signed into.
• Anonymised but retained: historical RSVPs, event attendance, and chat messages stay attached to a "Deleted Member" label so other members' records stay intact. They no longer carry your identifying details.
• Retained where law or operations require: identity-verification verdict and Sumsub reference (up to 5 years, consistent with UAE regulatory guidance on risk-based identity verification and fraud-prevention record-keeping); append-only admin audit log (action + reason code only, retained for the lifetime of the platform for fraud defence); minimal email/phone hash for re-registration blocking where the account was closed for safety reasons; email bounce/unsubscribe state held indefinitely by our email provider.
• Aggregate, anonymised analytics that cannot be linked back to you may be retained for product analytics.

6. Your Rights

You have the following rights in relation to your personal data, exercisable under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where you are a resident of the European Economic Area or the United Kingdom, the GDPR (Regulation 2016/679):

• Right of access (GDPR Article 15; PDPL Article 13) — request a copy of the personal data we hold about you and the purposes for which it is processed.
• Right to rectification (GDPR Article 16; PDPL Article 14) — ask us to correct or complete inaccurate or incomplete information.
• Right to erasure (GDPR Article 17; PDPL Article 15) — request deletion of your account and personal data, subject to limited legal-retention exceptions documented in §5.
• Right to restriction of processing (GDPR Article 18; PDPL Article 16) — ask us to pause processing of your data while a dispute or correction request is resolved.
• Right to data portability (GDPR Article 20; PDPL Article 14) — receive your personal data in a structured, machine-readable format.
• Right to object (GDPR Article 21) — object to processing based on legitimate interests, including profiling and direct marketing.
• Right to withdraw consent (GDPR Article 7(3); PDPL Article 6) — withdraw consent at any time without affecting the lawfulness of prior processing.
• Right not to be subject to solely automated decisions (GDPR Article 22; PDPL Article 11) — SIVE does not make solely-automated decisions with legal effects; admission decisions involve human review.
• Right to lodge a complaint (GDPR Article 77; PDPL Article 22) — with the UAE Data Office or, for EEA residents, your local supervisory authority.

To exercise any of these rights, contact us at support@joinsive.com. We will respond within 30 days of receiving a verifiable request. Where required by law, we may ask for additional information to verify your identity before acting on the request.

7. Cookies & Analytics

SIVE uses a small set of strictly-necessary cookies to keep you signed in and to protect requests against cross-site forgery. The marketing site does not set any tracking, advertising, or third-party analytics cookies at launch. Cookies are host-only — scoped to the exact host that issued them, so the marketing host and the app host cannot read each other’s cookies.

The full list of cookies (name, purpose, lifetime, strictly-necessary y/n) is published on our Cookie Policy page. You can manage or clear cookies through your browser settings.

7a. Payments

SIVE does not process payments in its current launch phase. There are no in-app purchases, subscriptions, or fees, and the Platform does not integrate any third-party billing provider. No card or banking data is collected, stored, or transmitted by SIVE. Membership is merit-based and granted by invitation, verification, and admin review.

7b. Account & Data Deletion

You may request deletion of your SIVE account and the personal data we hold about you at any time. Signed-in members can use Settings → Privacy → Request account deletion in the app. If you cannot sign in, email support@joinsive.com with the subject line “Account deletion request”. The full process, including what is removed, what is retained under UAE law, and the 30-day completion window, is published on our public Data & Account Deletion page.

8. International Transfers

Your data may be processed in countries other than where you reside, where our service providers operate. Any cross-border transfer of personal data is carried out in accordance with the UAE Personal Data Protection Law (PDPL) and other applicable data protection laws, with appropriate safeguards in place to protect your information.

9. Minors

SIVE is strictly for adults aged 21 and over. We do not knowingly collect personal data from anyone under 21. If we learn that a minor has provided us with personal data, we will delete that data promptly. If you believe a minor has provided us with information, please contact support@joinsive.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide notice at least 15 days in advance, either by email or by a prominent notice within the Platform. Continued use of SIVE after changes take effect constitutes acceptance of the updated policy.

11. Contact

The data controller for the SIVE Platform is:

• Sive Global Holdings L.L.C-FZ
• 6th Floor, Meydan Grandstand, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates
• Meydan Free Zone, Dubai, UAE · Business License 2643617.01 · Formation Number 2643617 · D-U-N-S 57-116-5285
• Email: support@joinsive.com

If you have any questions about this Privacy Policy or how we handle your data, please contact us using the details above. Privacy and data-protection requests are handled by email only; SIVE does not operate a public telephone line at launch.