Privacy Policy

Data we collect

• Account details (name, email, brokerage name, role)
• Property and permit records you enter or upload
• Permit documents stored in secure cloud storage
• In-app assistant chat history stored locally in your browser ( localStorage) on the device you use
• Billing identifiers via Stripe (we do not store card numbers)
• Optional privacy-friendly analytics on public pages (Plausible)

How we use data

To provide dashboards, expiry calculations (Dubai timezone), email alerts, AI-assisted extraction, the in-app assistant, team access, and subscription management. Data is isolated per brokerage using database row-level security and property-scoped document storage.

Processors

We use Supabase (database, auth, storage), Stripe (payments), Resend (email), OpenAI (permit extraction and in-app assistant), and Vercel (hosting). Each processor is bound by their own terms and security practices.

Permit document extraction and the in-app assistant send content to OpenAI through the United Arab Emirates regional API endpoint (ae.api.openai.com). For extraction, that includes the uploaded permit file. For the assistant, that includes your chat messages and a live snapshot of your brokerage's permit counts and at-risk listings (scoped to your role). We do not route that content to US or other regional OpenAI endpoints from this application. OpenAI requests use zero data retention settings where supported.

Cookies

Essential cookies support authentication. Analytics cookies are optional and only loaded after you accept the cookie notice, when Plausible is configured.

Your rights

Owners may export or delete data by contacting support or removing records in the app. Agents see only data permitted by their brokerage owner and role.

This document is a template for launch — have a qualified professional review for UAE/GDPR requirements before production.