PropertyGPT — AI Real Estate Assistant for Dubai | Listings, Valuations and Market Insights

Company: PropertyGPT Tech Ltd (“PropertyGPT,” “we,” “us,” or “our”)
Registered office: Innovation Hub DIFC, DIFC, Dubai, United Arab Emirates
Contact: management@propertygpt.com • +971 54 558 4010

1) Scope and Who This Applies to

This Privacy Policy explains how we collect, use, disclose, and protect personal data when you use our services:

Our websites, web apps, and mobile apps (together, the “Services”);
Any tools we provide to discover, list, rent, buy, sell, finance, analyze, or value property;
Our customer support, marketing, and in-person interactions (e.g., property viewings, events).

By using our Services, you acknowledge this Policy.

2) Who We Are (Controller Role)

PropertyGPT Tech Ltd is the primary decision-maker for personal data processed through the Services. For certain activities (e.g., transactions with developers, brokers, payment providers, or property managers), we may act as a joint controller or a processor. Where required, we will define roles in a written agreement.

3) The Data We Collect

a) Data You Provide

Identity and Contact: Full name, email, phone, address, nationality, date of birth, ID numbers (where lawful and necessary), copies of ID (e.g., passport/Emirates ID), selfies for verification (where you opt in).
Account and Profile: Login details, preferences, saved searches, alerts, watchlists, communication settings.
Property and Transaction: Ownership or tenancy status, property details, title information you submit, viewing appointments, offers, contracts, signatures.
Financial: payment details (tokenized by payment partners), rent/fee/price info, affordability inputs you share.
Communications: Messages, emails, call notes, chat transcripts, feedback, survey responses.
Job applications: CVs, work history, references (for careers pages).

b) Data We Collect Automatically

Usage and Diagnostics: Device identifiers, app version, browser type, pages viewed, time stamps, clicks, referrers, crash logs.
Location: IP-based location; precise geolocation if you grant permission.
Cookies/SDKs: Essential, analytics, and (where you opt in) advertising cookies or mobile identifiers. See Cookies and Tracking Technologies.

c) Data from Third Parties

Partners: Developers, brokers/agents, landlords, property managers, owners’ associations, payment providers.
Verification and Screening: Identity/KYC and sanctions screening service providers (where legally required).
Public and Commercial Sources: Property registers, listings, valuation datasets, credit/utility references (where permitted).

We collect special-category data only if you choose to provide it and only when strictly necessary for a specific, lawful purpose (e.g., facial image for identity verification), using additional safeguards.

4) Why We Use Your Data (Purposes) and Legal Bases

We process personal data for the purposes below, relying on one or more lawful bases as appropriate:

Deliver the Services and Perform Contracts: Create/manage your account; facilitate property discovery, viewings, offers, contracts, payments; provide support.
Compliance and Risk: Identity verification; fraud, AML and sanctions checks; record-keeping; responding to lawful requests.
Product safety and Operations: Securing systems; preventing abuse; monitoring uptime; fixing bugs.
Insights and Improvement (Legitimate Interests): Analytics, service enhancements, new features, quality assurance.
Personalized content and Recommendations (Legitimate Interests or Consent): Search results, property suggestions, pricing/valuation insights.
Marketing and Communications (Consent or Legitimate Interests as Applicable): Newsletters, alerts, surveys, events; you can opt out anytime.
Automated decisions and Profiling (see Section 8): Price/valuation estimates, lead routing, fraud flags, eligibility hints—subject to safeguards and your rights.
Vital or public interest: Only if strictly required (e.g., urgent safety issues).

Where we rely on consent, you may withdraw it at any time without affecting prior processing.

5) Who We Share Data With

We share data only as needed for the purposes above, under appropriate confidentiality and security commitments:

Transaction partners: Developers, brokers/agents, landlords, property managers, owners’ associations.
Service providers (processors): Hosting, cloud, data storage, analytics, search, communications, identity/KYC, payments, document e-signature, customer support, marketing tools, error monitoring, security vendors.
Ad/measurement partners: Only if you opt in to marketing cookies/identifiers.
Professional advisers and auditors: Legal, financial, compliance, insurance.
Authorities: If required by applicable law or to protect rights, safety, and property.
Business transfers: In the context of a merger, sale, or restructuring, with continuity safeguards.

We do not sell your personal data.

6) International Transfers

Our teams, partners, and providers may be located in the UAE, free-zones, the EU/EEA, the UK, and other countries. When data moves across borders, we use recognized transfer safeguards and contractual protections, and we assess local legal environments to help ensure your data receives an equivalent level of protection.

7) How Long We Keep Data

We keep personal data only as long as necessary for the purposes described, including:

While you maintain an account;
For transactions, for the period needed to establish, exercise, or defend legal claims and to meet retention duties (e.g., financial, KYC/AML);
For analytics/marketing based on consent or legitimate interests, until you withdraw consent or object, or until data is aggregated/anonymized.

We apply clear retention schedules and securely delete or anonymize data when it is no longer needed.

8) Automated Decisions and Profiling

Parts of our Services use algorithms to provide estimates or to prioritize leads (e.g., property valuations, price suggestions, fraud or spam screening). You have the right to obtain human review of decisions that have a significant effect on you, to express your point of view, and to contest the decision. You can also object to profiling used for direct marketing at any time.

9) Your Privacy Rights

Depending on where you live and how we interact, you may have some or all of the following rights:

Access to your data and portability (a copy in a commonly used format);
Rectification of inaccurate or incomplete data;
Erasure (deletion) in defined circumstances;
Restriction of processing;
Objection to processing based on legitimate interests, including profiling;
Withdraw consent where processing is based on consent;
Complaint to a supervisory authority.

We will respond within applicable statutory time limits. To exercise rights, contact us at [privacy@yourdomain]. We may need to verify your identity before acting on a request. If someone acts on your behalf, we’ll require proof of authority.

10) Security

We use technical and organizational measures designed to protect personal data, including encryption in transit, access controls, network segregation, secure development practices, employee training, vendor due-diligence, and incident response. No system is perfectly secure; if we become aware of a breach affecting your data, we will notify you and regulators where required.

11) Cookies and Tracking Technologies

We use:

Essential cookies/SDKs: Required for login, security, load balancing.
Analytics and Performance: To understand usage and improve features.
Personalization and ads (optional): To tailor content or measure campaigns (only with your consent where required).

You can manage preferences via our cookie banner/settings and your browser or device controls. Disabling certain cookies may impact functionality.

12) Property Viewings, Premises and CCTV

Where we host or coordinate physical viewings or operate premises, we may use visitor logs and CCTV for safety, security, and incident investigation, retained for a limited period unless an incident requires longer retention.

13) Payments

Card and bank details are processed by vetted payment providers. We receive only limited tokens/metadata necessary to confirm transactions, reconcile accounts, and prevent fraud.

14) Communications and Marketing Choices

Service communications: Transactional emails/SMS (e.g., confirmations, legal notices) are essential.
Marketing: You can opt in/out via links in messages, in-app settings, or by contacting us.
Property alerts: You can adjust frequency or unsubscribe at any time.

15) Children’s Data

Our Services are not intended for individuals under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided data, contact us to delete it.

16) Third-party links and Integrations

Our Services may link to or integrate with third-party sites, tools, or widgets. Their privacy practices are governed by their own policies. Please review them before sharing data.

17) Acting on behalf of Organizations

If you use the Services for a company (e.g., as an agent, developer, property manager, or corporate tenant/landlord), you confirm you have authority to share data and will ensure relevant privacy notices are provided to your personnel and clients where required.

18) Changes to This Policy

We may update this Policy to reflect changes in our Services or legal requirements. We will post the updated version with a new effective date and, where required, provide prominent notice or ask for your consent.

19) How to Contact Us

Data protection contact:
PropertyGPT Tech Ltd
Dubai Innovation Hub DIFC, DIFC, Dubai, United Arab Emirates
Email: management@propertygpt.com
If you have unresolved concerns, you may have the right to lodge a complaint with your local supervisory authority. *