Privacy Policy
سياسة الخصوصية — آخر تحديث: مايو ٢٠٢٦
Effective: 1 May 2026 | Governing Law: UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law — PDPL)
1. Data Controller
Dubaire.ai ("Platform", "we", "us") is operated by UAE AI House, registered in the United Arab Emirates. We are the data controller responsible for your personal data processed through this platform.
2. Data We Collect
| Category | Examples | Purpose |
|---|---|---|
| Identity | Name, Emirates ID (brokers only), email, phone | Account creation, broker verification |
| Search & Preference | Property searches, saved listings, language preference | AI matching, personalised recommendations |
| Transaction | Token purchases, viewing history, deal stage | Service delivery, billing |
| Communication | Chat messages with Furqan, WhatsApp exchanges | Service delivery, quality improvement |
| Technical | IP address, device type, browser, usage analytics | Security, performance optimisation |
3. Legal Basis for Processing
- Consent — provided at registration and before each new data use
- Contractual necessity — to deliver the property matching service
- Legitimate interest — platform security, fraud prevention
- Legal obligation — RERA/DLD reporting requirements, AML compliance
4. AI Processing
Our AI system (Furqan) processes your search queries and preferences to provide property recommendations. This processing:
- Does not make legally binding decisions without human confirmation
- Can be opted out of — you may request manual matching
- Uses data only within the platform — never sold to third parties for advertising
- Is subject to regular bias audits
5. Data Sharing
We share personal data only with:
- Verified brokers — when you request a viewing or contact (name + phone only)
- Developers — aggregated interest data (never individual profiles)
- Payment processors — Stripe/tap.com for token purchases
- Regulators — DLD/RERA when legally required
- Infrastructure — Vercel (hosting), Supabase (database) — all data stays in UAE/EU regions
We never sell personal data. We never share data with advertisers.
6. Data Retention
- Active accounts: data retained while account is active
- Inactive accounts: deleted after 24 months of inactivity
- Transaction records: 7 years (UAE commercial law requirement)
- Chat history: 12 months, then anonymised for AI improvement
7. Your Rights (PDPL Article 13)
- Access — request a copy of all data we hold about you
- Correction — update inaccurate data
- Deletion — request erasure (subject to legal retention requirements)
- Portability — receive your data in machine-readable format
- Withdraw consent — at any time, without affecting prior processing
- Object to AI profiling — request human-only service
To exercise these rights, email privacy@dubaire.ai — we respond within 14 days.
8. Data Security
- AES-256 encryption at rest
- TLS 1.3 in transit
- Row-Level Security on all database tables
- No secrets in client-side code
- Regular penetration testing
- SOC 2 Type II compliant infrastructure (Vercel + Supabase)
9. Cross-Border Transfers
Data is stored in EU/UAE data centres. If transferred outside the UAE, we ensure adequate protections per PDPL Article 22, including standard contractual clauses.
10. Children
This platform is not intended for users under 18. We do not knowingly collect data from minors. If discovered, such data will be deleted immediately.
11. Changes to This Policy
We will notify registered users by email 30 days before any material changes take effect. Continued use after notification constitutes acceptance.
12. Contact
Data Protection Officer
UAE AI House
Email: privacy@dubaire.ai
UAE Regulatory Authority: uaedpc.gov.ae