Legal
Privacy Policy
Effective date: 1 June 2025 · Last updated: March 2026
This Privacy Policy describes how PAI Real Estate LLC ("PAI", "we", "us") handles personal data collected through the Dubai Deal Index platform. We process personal data in compliance with the UAE Federal Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and applicable Dubai data regulations.
1. Data Controller
PAI Real Estate LLC
Office 313, Al Wasl Building, Sheikh Zayed Road, Dubai, UAE
Trade Licence: 1198280 · RERA Licence No. 36372
Privacy contact: privacy@prop-ai.com
2. Data We Collect
Information you provide directly:
- Email address (on registration or deal alert sign-up)
- User type (investor, owner, broker, or developer) — self-selected
Information collected automatically:
- Secure session token (stored as an HTTP-only cookie for authentication)
- Basic usage data — pages visited and features accessed (used in aggregate only)
- Device type and browser (for platform compatibility)
We do not collect financial account details, government-issued IDs, or any special category personal data.
3. How We Use Your Data
- Account and access: Verifying identity via OTP and maintaining your authenticated session
- Deal alerts: Sending deal summaries and market updates — only where you have explicitly opted in
- Security: Detecting and preventing fraudulent or abusive access
- Legal compliance: Responding to lawful requests from competent UAE regulatory or judicial authorities
- Platform improvement: Analysing aggregated, anonymised usage patterns
We do not use your data for automated decision-making that produces legal or similarly significant effects on you.
4. Legal Basis for Processing
- Consent — for marketing emails and deal alerts; withdrawable at any time
- Contract performance — for account creation and service delivery
- Legitimate interests — for security, fraud prevention, and anonymised analytics
- Legal obligation — where required by UAE law
5. Email Delivery — Customer.io
We use Customer.io to send transactional and marketing emails. Your email address is transferred to Customer.io solely for this purpose under a data processing agreement. Customer.io is contractually prohibited from using your data for its own purposes.
Customer.io processes data outside the UAE. This transfer is made with appropriate contractual safeguards in place. Every marketing email contains a one-click unsubscribe link.
6. Data Sharing
We do not sell or rent your personal data. We share data only:
- With service providers (email delivery, hosting) who are bound by data processing agreements and prohibited from independent use
- Where required by a court order or lawful request from a competent UAE authority
- In connection with a sale or restructuring of PAI, subject to the same privacy commitments
7. Data Retention
- Active accounts: Retained while your account remains active
- Inactive accounts: Deleted or anonymised after 24 months of no login activity
- Unsubscribes: Email retained on a suppression list only, to permanently honour your opt-out
- Legal obligations: Where required by UAE law, certain records may be retained for longer periods
8. Security
We use TLS encryption, HTTP-only session cookies, and server-side access controls. No transmission over the internet is completely secure. In the event of a data breach affecting your personal data, we will notify affected users and relevant authorities as required by UAE law.
9. Your Rights
Under the UAE Federal Personal Data Protection Law, you have the right to:
Access
Request a copy of the personal data we hold about you
Correction
Ask us to correct any inaccurate or incomplete data
Deletion
Request erasure where no lawful basis remains for processing
Objection
Object to processing based on legitimate interests
Withdraw consent
Opt out of marketing at any time, without penalty
Complaint
Lodge a complaint with the UAE Data Office
To exercise any of these rights, email privacy@prop-ai.com. We will respond within a reasonable period. To escalate, contact the UAE Data Office at uaedataoffice.ae.
10. Cookies
We use a single secure, HTTP-only session cookie for authentication. We do not use advertising cookies, third-party tracking pixels, or any cross-site tracking.
11. Changes to This Policy
We may update this Policy at any time. Registered users will be notified of material changes by email. The current version is always available at /privacy. Continued use of the platform after an update constitutes acceptance.