Privacy Policy

1. Information we collect

Information you provide

• Account: Full name, email, password, phone, investment profile.
• Payments: Processed by Stripe (we don't store card details).
• Communications: Messages to support, feedback, testimonials, feature suggestions.
• Content you may save: Notes, saved properties, analysis preferences stored in your account.

Information collected automatically

• Device data: IP address, device type, browser, OS.
• Usage data: Pages visited, time spent, search queries, properties viewed.
• Cookies: Session, analytics (PostHog), preferences.

Third-party data

• Property listings and floor plans from Bayut, PropertyFinder, and other online property platforms (we retrieve and analyze these via our platform).
• Ownership data from DLD (Dubai Land Department).
• Market data from real estate databases.
• Public information on property ownership (where legally available).

2. How we use your information

• Providing and improving our Services.
• Creating and maintaining your account.
• Processing payments.
• Personalizing your experience.
• Communicating with you (transactional emails, support, marketing).
• Detecting and preventing fraud.
• Complying with legal obligations.
• Analytics and research (anonymized only).

We do NOT sell your personal data to third parties.

3. Data retention

4. Data security

• In transit: TLS 1.3 encryption (HTTPS).
• At rest: AES-256 encryption.
• Access control: Role-based; employees access only what's needed.
• Audits: Regular security audits.
• Authentication: Industry-standard hashing + optional 2FA.

No security is 100% guaranteed. You use our Services at your own risk.

5. Your rights & choices

You have the right to:

• Access: Request a copy of your data.
• Correct: Fix inaccurate information.
• Delete: Remove your data ("right to be forgotten").
• Download: Export your data in standard format.
• Opt-out: Disable marketing emails anytime.

To exercise these rights, email: support@propsearchr.com. Response time: 30 days maximum.

Regional rights

• EU/UK (GDPR): Right to object, restrict processing, lodge complaints with your data authority.
• Australia (Privacy Act): Right to complain to OAIC.
• Canada (PIPEDA): Right to complain to Privacy Commissioner.
• USA (CCPA): Right to know, delete, opt-out, non-discrimination.

6. Third-party services

We share data with:

Each has signed a Data Processing Agreement ensuring GDPR compliance.

7. International data transfers

• Primary storage: Supabase (Frankfurt, EU — GDPR compliant).
• Processing: May occur in multiple jurisdictions for service improvement.
• Compliance: Standard Contractual Clauses (SCCs) with processors.

8. Children's privacy

PropSearchr is not intended for users under 18. We don't knowingly collect data from children. If we discover such collection, we'll delete it and notify the parent/guardian.

9. Cookies

Types we use

• Essential: Session management, security, compliance (required).
• Analytics: PostHog (optional, user consent).
• Preference: Language, theme, settings (optional).
• Marketing: Conversion tracking, retargeting (optional, requires consent).

Managing cookies

• Accept/reject on first visit.
• Manage in browser settings.
• Opt-out of analytics via PostHog.
• Disable optional cookies (site still works).

10. Changes to this policy

We may update this policy periodically. We'll:

• Update the "Last Updated" date.
• Notify you of material changes via email.
• Require consent for major changes.

Your continued use means you accept updates.

11. Contact us

For privacy questions, data requests, or to exercise your rights:
Email: support@propsearchr.com
Response time: 30 days maximum (as required by law).

File a complaint with

• EU/UK: Your national data protection authority.
• Australia: OAIC (oaic.gov.au).
• Canada: Privacy Commissioner of Canada (priv.gc.ca).
• USA: California Attorney General (California residents).
• Saudi Arabia: SDAIA (when regulations finalize).