Privacy Policy

This policy covers how we handle personal data we collect when you use Aradi. "Personal data" means any information that identifies or relates to you as an individual. It does not cover the practices of third-party companies we do not own or control.

Data you give us directly

• Account data — your name, email address, and information provided during sign-up or onboarding.
• Billing data — billing address, country, and VAT/TRN number if applicable. Payment card details are handled by our payment processor and are not stored by Aradi.
• User content — properties you save, portfolio notes, title-deed images you upload, and messages you send through the AI assistant.
• Communications — emails, support tickets, and any other messages you send us.

Data collected automatically

• Usage data — features you use, searches you run, properties you view, filters you apply, and timestamps.
• Device and network data — IP address, browser type, operating system, language settings, and approximate location derived from IP.
• Precise location — only if you grant browser location permission (for example, to centre the map). You can revoke this at any time in your browser settings.
• Error data — when something goes wrong in the app, we may collect diagnostic information to help us fix it. This is disabled in development environments.

Data from third parties

When you sign in with Google, we receive basic profile data (name and email) from Google. When you complete a payment, our payment processor confirms the transaction to us.

To provide Aradi

• Creating and managing your account.
• Processing payments and managing your subscription.
• Powering the map, analytics, portfolio tools, and AI assistant.
• Providing customer support.
• Detecting fraud, abuse, and security issues.

To improve Aradi

• Internal analytics, testing, and product development.
• We may use anonymised, aggregated interaction data — including AI assistant conversations — to improve the quality of our features, unless you opt out.

To stay in touch

• Responding to your support requests and messages.
• Sending you product updates and relevant notifications.
• Sending marketing communications, only if you have opted in.

To meet legal obligations

We may use your data to comply with applicable UAE law, respond to lawful requests from authorities, enforce our Terms of Service, and protect the rights and safety of Aradi and its users.

We do not sell your personal data. We share it only in the following circumstances:

Service providers

We work with trusted third-party companies that help us operate the Services — including cloud hosting, authentication, analytics, payment processing, and error monitoring. These providers act as data processors on our behalf and are contractually required to protect your data.

AI providers

When you use the AI assistant, your prompts are processed by third-party AI model providers acting under our instructions. We do not use your identified personal data to train foundational models without your explicit consent.

Business transfers

If Aradi undergoes a merger, acquisition, or other corporate transaction, your data may be transferred to the acquiring entity, subject to the same privacy protections.

Legal and safety disclosures

We may disclose your data to government authorities or other parties when required by UAE law, court order, or to protect the rights, property, or safety of Aradi or its users.

Anonymised data

We may create aggregated or anonymised data that cannot identify you personally and use it for business and product purposes, including sharing it with third parties.

We use cookies and similar technologies (such as local storage and analytics scripts) to operate the Services and understand how users interact with them. These include:

• Essential cookies — required for authentication and core platform functionality.
• Analytics — to understand feature usage and improve the product.
• Preferences — to remember your settings between sessions.

We do not use cookies for targeted advertising. You can manage cookies through your browser settings, but disabling essential cookies will affect how the platform works.

We protect your data using appropriate technical and organisational measures, including encryption in transit (TLS 1.2+), encryption at rest, role-based access controls, audit logging, and Web Application Firewall (WAF) protection.

No system is completely secure. You are responsible for keeping your login credentials safe. If you suspect unauthorised access to your account, contact us at [email protected] immediately.

We keep personal data for as long as necessary to provide the Services, run our business, or as required by law. When deciding how long to keep specific data, we consider why we collected it, whether we still need it, and how sensitive it is.

For example:

• Account data is kept for the life of your account and deleted 90 days after closure.
• Billing records and invoices are kept for a minimum of 5 years, as required by UAE tax law.
• Usage and analytics data is kept for up to 24 months.
• AI conversation logs are kept for up to 12 months.
• Error and diagnostic data is kept for up to 90 days.

We may retain anonymised or aggregated data indefinitely, as it no longer identifies you.

The Services are not intended for anyone under the age of 18. We do not knowingly collect personal data from children under 18. If you are under 18, do not use the Services or send us any personal data.

If we learn we have collected data from a child under 18, we will delete it promptly. If you believe this has happened, contact us at [email protected].

The Services may contain links to third-party websites or integrate with external services. We do not control and are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before sharing any personal data with them.

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you have the right to:

• Access your personal data and receive a copy of it.
• Correct inaccurate or incomplete data.
• Request erasure of your data.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests.
• Request portability of your data in a structured, machine-readable format.
• Withdraw consent at any time, without affecting prior lawful processing.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days. We may need to verify your identity before acting on your request.

If you are unsatisfied with our response, you have the right to lodge a complaint with the UAE Data Office at tdra.gov.ae.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or in-app notice at least 14 days before the change takes effect. Continued use of the Services after that date means you accept the updated policy.

Email: [email protected]