Privacy Policy

VERSION 2026-10-22 · RAISED BY FUTURE RECORDS FZE

Last updated: 22 October 2026

This Privacy Policy explains what personal data Raised by Future Records FZE, trading as BeART Production ("BeART", "we", "us"), processes when you visit beartpro.com, when you write to us, and when our Instagram application works with Instagram data, why we do it, how long we keep it, and what rights you have.

1. Who we are

Raised by Future Records FZE, trading as BeART Production
Trade Licence No. 5973/2014, Fujairah Creative City, Media Free Zone
Creative Tower, Hamad Bin Abdulla Road, P.O. Box 4422, Fujairah, United Arab Emirates
Email: info@beartpro.com

We are the controller of the personal data described below. This policy covers beartpro.com, including its page interiors.beartpro.com, and its test copy beta.beartpro.com. Our equipment rental service at rent.beartpro.com is run by the same company. Its own privacy policy is being prepared and will be published at rent.beartpro.com/privacy. Until then, you can send any question or request about personal data processed by the rental service to info@beartpro.com, and we will answer it as described in section 8.

2. What we collect on beartpro.com

Project statistics. When you open a project or a video on beartpro.com, your browser sends us its name and how many seconds you spent on it. To avoid counting the same person twice in one day, our server makes a short code from your IP address and browser type, mixed with a random value that exists only in the server's memory for that day. We do not store your IP address or browser type. When the day ends, the random value is replaced and that day's codes are deleted, so the totals can no longer be linked to anyone. We keep only daily totals per project (number of opens, number of different visitors and total seconds), use them to understand which projects visitors find interesting, and delete them after 400 days.

Your approximate city on the home page. The home page shows your approximate city on a globe ("You are here"). When the globe starts, our own server looks up the city from your IP address in a local database (DB-IP Lite), sends it back to your browser and does not store it. We do not use any outside location service.

Technical logs. Our web server keeps standard technical logs (IP address, browser type, page requested, date and time) to keep the site secure and working. We delete these logs within 15 days. Cloudflare keeps its own security logs under its own privacy policy.

Cookies and browser storage. We set no advertising cookies unless you agree. When you first open the site, a notice asks whether you accept the Meta Pixel. If you click "Accept", we turn it on and it sets Meta's advertising cookies. If you click "Decline" or close the notice, no advertising cookies are set and nothing is sent to Meta. We remember your choice in your browser for 6 months. You can change it at any time with the "Cookie settings" link at the bottom of every page. To make pages open faster, the home page installs a small script in your browser (a service worker) that keeps copies of our project preview images. It holds no information about you and is never sent to us. You can remove it by clearing the site data for beartpro.com in your browser. The home page also saves in your browser the date on which you watched the intro and the showreel, so that next time it can take you straight to our work. This note stays on your device and is never sent to us, and clearing the site data removes it too. A session cookie is used only when our own staff sign in to the site's administration area.

Meta Pixel (only with your consent). If you accept, the Meta Pixel tells Meta Platforms Ireland Limited which pages of beartpro.com you open, together with your IP address, browser type and the Meta cookies in your browser. We use this to show our ads to people who visited our site and to measure how our ads work. Meta may link this information to your Facebook or Instagram account and uses it under its own privacy policy. We do not send Meta your name, email or phone number. We keep audiences of website visitors for up to 180 days. If you withdraw your consent, the Pixel stops at once and we delete its cookies from your browser. Information Meta already received is handled under Meta's privacy policy, and you can manage it in your Facebook or Instagram ad settings.

No forms. beartpro.com has no forms that send information to us. On the home page you can fill in a short letter (your name, business, dates and contact). It stays in your browser until you press a button. "Send with light" opens your own email app with the letter addressed to info@beartpro.com, and the WhatsApp button opens WhatsApp with the letter already typed; in that case the letter is passed to WhatsApp in the link. Nothing reaches us until you send it yourself. The "concierge" box on the home page works only inside your browser: what you type there is not sent to us.

3. Messages you send us

If you write to us by email, WhatsApp, Telegram, Instagram or LinkedIn, we receive what you choose to send and use it to reply to you and to discuss and carry out your project. Emails and WhatsApp and Telegram messages are also used for our internal project records (see "Project records" below). We read and answer LinkedIn messages in LinkedIn ourselves and do not connect any automated tool to our LinkedIn accounts. If LinkedIn sends us an email notice about your message, that email is handled like other emails, as described below. Our email is hosted by Google. We copy new messages into our internal work queue on our server, send our staff a short notice through Telegram, and may use an AI assistant (Claude, by Anthropic) to help us sort messages and prepare replies. We keep messages, including these copies and notices, for up to 24 months after our last contact with you, unless they become part of a contract or of invoice records that the law requires us to keep.

Project records. For each project, and for each request that may become one, our software makes a short internal record from the emails and the WhatsApp and Telegram messages about it, with the help of the same AI assistant. It does not use Instagram messages or comments, which we use only as described in section 5. From the personal WhatsApp number of our founder, Artur Begel, it uses only the chats that he has marked as work chats. The record says when the request came, the main steps and dates, what we delivered, our budget by department (taken from our own invoices) and how many people worked on our side. It also lists the names and roles of the people on the client's side we worked with. Before messages are sent to the AI assistant for this purpose, email addresses and phone numbers in them are replaced with placeholders. We do not store the messages for this purpose: only the record is kept. We do not record health, religion, family or other personal details that are not about the work, and we do not name the freelancers who worked with us. We may add the name, role and work email of a new contact on the client's side to our customer records in Zoho CRM. We also make such records for recent past projects from earlier messages, within the same time limits. The records are used only inside our company, for example to prepare our answer to your next request, and are never published. We keep a record linked to an invoice for as long as we keep that invoice: seven years after the end of the financial year in which it was issued, or longer if a tax audit or a dispute requires it. We delete a record of a request that did not lead to an invoice 24 months after the last event in it.

Instagram direct messages and Eva. When you write to one of our Instagram accounts, the first reply may come from Eva, our AI assistant. Eva is software, not a person. It answers general questions, asks about your project and can suggest a call. Prices, discounts, dates and any commitments come only from Artur Begel or another member of our team. You can ask for a person at any time, and Artur will take over the conversation. To prepare Eva's replies, we send the text of the conversation to Anthropic (see section 4). Under its commercial terms, Anthropic may not use it to train its models, and we do not use your messages to train any AI model. We keep these conversations, including draft replies, as described above: for up to 24 months after our last contact with you.

4. Services that process data for us

• Cloudflare, Inc. delivers and protects the website. Your IP address and technical request data pass through Cloudflare's network, which operates worldwide, including in the United States. Cloudflare Web Analytics also counts page views and measures how fast our pages load. It does not use cookies. It receives the address of the page, the page you came from, your browser type and loading times, and we see only totals.
• Hetzner Online GmbH hosts our server in Germany: the website, the project statistics, our internal work queue and the Instagram data described in section 5.
• Vimeo, Inc. plays the videos on our pages. The home page loads the Vimeo player for our showreel shortly after the page opens on larger screens, and on phones when you scroll close to the showreel; other pages load it when you open a video. Vimeo then receives your IP address and technical data about your browser. We load the player in Vimeo's "do not track" mode, in which Vimeo does not track your viewing or set analytics cookies. Vimeo may still set a short-lived security cookie to protect its service from automated traffic.
• Google LLC hosts our email (info@beartpro.com).
• Zoho (Zoho Corporation and its group companies) provides our customer records (Zoho CRM) and our accounting and invoicing system (Zoho Books). Our Zoho account is hosted in Zoho's data centre in the United States.
• Todoist Inc. provides our internal task list. A task may contain a client's name or phone number and the subject or a short summary of an email or message that we need to answer or follow up on. We do not put Instagram data there. Todoist stores data in the United States.
• Telegram delivers internal notices to our staff about new messages and comments sent to us, and carries the project group chats that some clients hold with us in Telegram.
• Anthropic PBC provides the AI assistant (Claude) that helps our staff sort and answer messages, prepare internal work such as quotes, invoices and customer records, and make the project records described in section 3. It also powers Eva, which prepares replies to Instagram direct messages (see section 3). Anthropic processes this data under its commercial terms and data processing addendum, and may not use it to train its models.
• Windsor.ai is a data connector service. It reads public information of the Instagram business and creator accounts we choose to follow, through its own application registered with Meta, and stores it for us (see section 5).
• Meta Platforms Ireland Limited receives data from the Meta Pixel, only if you accept it (see section 2).
• WhatsApp and Instagram (Meta) and LinkedIn receive data when you follow a link to them or write to us there; their own privacy policies then apply.

We do not sell personal data. We share it for advertising only with Meta, and only if you accept the Meta Pixel.

5. Our Instagram application

We work with Instagram and Facebook only through Meta's official interfaces (the Instagram Graph API): through our own application registered with Meta, "BeArt Social Agent", and, for public business and creator accounts, through Windsor.ai, a data connector that uses its own application registered with Meta. We do not scrape Instagram or collect Instagram data in any other way.

Our own accounts. The application is connected to four Instagram accounts and their linked Facebook Pages: @beartpro.ae, @interiorphotographydubai and @dubaifoodphotography, which belong to BeART, and @begelart, the professional account of our founder, Artur Begel. For these accounts we:

• read account statistics (insights) and our own posts;
• publish our own posts and manage our own advertising;
• read comments on our posts and direct messages sent to these accounts: for each, the sender's username or name, the text and the time;
• send replies to direct messages. Our team writes them, or Eva, our AI assistant, prepares them (see section 3);
• see public posts in which these accounts are tagged;
• read public posts and comments in which other Instagram accounts mention these accounts with @. We read such mentions only in public posts and comments. For each mention we keep the author's username, the text, the time and the ID of the post or comment, and we do not keep the image or video;
• receive story mentions: when someone mentions these accounts in their story, Instagram places a notice in our inbox. We handle it like a direct message and do not save the story itself.

We use comments, messages and mentions only to read and answer them. If a message, comment or mention comes from an account that we already work with, we note this in our internal work queue so that the right person replies. Comments, messages and mentions are handled as described in section 3: copied into our internal work queue, with a short notice to our staff through Telegram, and kept for up to 24 months after our last contact with you. We do not use them to build advertising audiences or to train AI models.

Public business and creator accounts. Through Meta's Business Discovery feature we read publicly available information of Instagram business and creator accounts: the username, public profile details (including the number of followers), and public posts with their links, dates and numbers of likes and comments. We read two groups of accounts: our clients' accounts, using our application or Windsor.ai; and the business accounts of venues and brands we would like to work with, using Windsor.ai only. We do not add accounts of individual people to the second group. Business Discovery does not give access to personal accounts or to private information.

Why. We use this information:

• to find which of our photographs and videos our clients publish, so that we can choose our best work for our portfolio;
• to show on our website, next to our own photograph, a text link to the client's public post (for example "Published by @account");
• to check that our photographs are used within the licence the client bought from us;
• to understand how popular our clients' accounts are, so that we can decide which of our work to show first on our website;
• to assess the public business accounts of venues and brands we would like to work with before we contact them.

The figures are used only inside our company and are not published.

How we check a post. Our software downloads the post image into memory and compares it with our own photographs. The image is not saved, and we do not try to identify anyone shown in it. We check our clients' public websites for our photographs in the same way; images that do not contain our work are deleted after the comparison.

What we keep. When a post contains our work, we keep the account's username, the link to the post, its date, its numbers of likes and comments, which image in the post matches, which of our photographs it matches and how closely, and when we first and last saw the post. For posts that do not contain our work we keep only the post ID, so that we do not check them again. For every account in both groups we also keep the number of followers and, for recent posts, their dates and numbers of likes and comments, so that we can compare accounts over time. For venues and brands we would like to work with, we keep only these figures and the username, not links to their posts. We do not keep images or videos from other Instagram accounts, and we do not collect information about the people who liked or commented on their posts.

How long. We delete this information 24 months after we last saw the post or the account. For venues and brands we would like to work with, we delete it 12 months after we last saw the account, unless they become our clients. You can ask us to delete it earlier (see section 8).

Sharing. We do not sell Instagram data and do not use it to build advertising audiences. Apart from the public link described above, it is processed only by the service providers listed in section 4 that run our systems for us.

6. Legal basis

We apply UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). Under Article 4 of the PDPL, personal data may be processed without consent only in the cases that Article lists. We rely on:

• Article 4(9), when you write to us or send a direct message to our Instagram accounts: we use your message to take the steps you ask for with a view to a contract;
• Article 4(9) and Article 4(3), for the project records described in section 3: we make them to carry out the work you ask for, and we keep them while we keep the related invoices so that we can defend our rights if a dispute about a project arises;
• Article 4(2), for information that a person has made public on Instagram themselves: public business and creator accounts, comments posted under our posts, and public posts, comments and stories in which a person mentions our accounts;
• Article 4(3), for server logs that we keep for a short time to detect attacks and defend our rights;
• Article 4(10), for contracts, quotes, invoices and related records that UAE tax law requires us to keep.

Our project statistics do not store your IP address, and the one-day code is deleted when the day ends (see section 2).

We use the Meta Pixel only with your consent (Articles 4 and 6 of the PDPL). You give it by clicking "Accept" in the cookie notice, and you can withdraw it at any time with the "Cookie settings" link. Withdrawing does not affect what happened before. We keep a record of each choice (its date and the version of this policy, without your name) so that we can show that consent was given. If we add another feature that needs your consent, we will update this policy and ask for your consent before the feature starts.

7. Transfers outside the UAE

We are based in the UAE, but the data described in this policy is processed outside it: on our server in Germany (Hetzner), and by Cloudflare, Vimeo, Google, Telegram, Anthropic, Windsor.ai, Zoho and Todoist, and, if you accept the Meta Pixel, by Meta, which may process it in the United States and other countries. The UAE Data Office has not published a list of countries recognised as providing adequate protection, so we do not rely on such recognition. We limit what each provider receives to what it needs for the task described in section 4, and we do not store more than this policy describes. Data sent by the Meta Pixel goes to Meta outside the UAE only with your explicit consent (Article 23(1)(b) of the PDPL).

8. Your rights

You may ask us:

• what personal data about you we process, why, who receives it, how it is protected when it is sent outside the UAE, and how long we keep it;
• to correct inaccurate data;
• to delete your data, including data we received about your Instagram account;
• to stop or restrict processing, or object to it.

Send your request to info@beartpro.com. We reply within 30 days and do not charge for it. Instructions for deleting Instagram-related data are at beartpro.com/data-deletion.

If you believe we have not handled your data properly, you may complain to the UAE Data Office (the Emirates Data Office established by Federal Decree-Law No. 44 of 2021), which receives complaints under Article 24 of the PDPL, through the channels it publishes.

9. Security and incidents

We protect data with access control, encrypted connections (HTTPS) and by keeping as little data as possible. If a data breach is likely to affect your privacy, we will notify you and the UAE Data Office as required by law.

10. Children

beartpro.com is a website for businesses and is not directed at children. We do not knowingly collect data from children.

11. Changes

We may update this policy. The date at the top shows the latest version. Significant changes will be highlighted on this page.