Privacy Notice

1. Who is responsible

[registered entity name], licensed by [issuing authority] under trade licence [trade licence number], at [registered address], is the controller of the account data described in section 3. For data protection questions: privacy@fixyourdata.ae.

2. Two very different kinds of data

Everything in this notice depends on a distinction, so it comes first.

• Owner data — the names, phone numbers, unit numbers, sizes and prices inside the spreadsheet you upload. This belongs to other people. We never receive it.
• Account data — your email address, whether you have purchased, and, and a reference from the payment provider. This is about you, and we do hold it.

For owner data, you are the controller and we are not a processor, because the processing happens on your own device and we play no part in it. Your obligations for that data are set out in section 4 of the Terms.

3. What happens to the file you upload

The file is opened, unzipped and parsed by code running inside your browser tab, in a background worker. The rows are held in your device’s memory for as long as the tab is open.

• It is never uploaded to us, and there is no endpoint that would accept it.
• It is never written to disk, saved to a database, or backed up.
• Refreshing or closing the tab erases it. There is nothing to delete afterwards, and no “my files” to come back to. That is deliberate.
• Exports you create are generated in your browser and saved by your own browser to your own device. They do not pass through us.

4. What does reach our servers

One feature sends something. When you type an instruction, we send it to be turned into a filter. What we send is:

• the sentence you typed;
• the column headings of your file (for example “Owner Name”, “Mobile”) — the headings only, never the values beneath them;
• the sheet names in the workbook;
• the building and project names present in the file, up to 250 of them, so that your wording can be matched to the file’s spelling.

No owner rows are included — no names, no phone numbers, no unit numbers, no prices.

One thing to be aware of: the sentence you type is sent as you wrote it. If you type a person’s name into the instruction box — “find the owner Mohammed Ali” — then that name is sent, because it is part of your sentence. If you would rather it were not, search by building and unit and filter by name afterwards in the results.

This request is processed by Anthropic to interpret the instruction. It is not used to train models. If the feature is unavailable, the app falls back to an interpreter that runs entirely in your browser and sends nothing.

Our servers also see your IP address on that request, as every web server does. It is used only to count requests per minute for abuse protection, is held in memory, and is not written to a database or used to build a profile.

5. Account data we hold about you

• Email address — to sign you in and to send service messages such as receipts and important service notices. Sign-in is by emailed link; we do not store passwords because we do not use them.
• Purchase status — whether you have paid, the date you paid, and a reference identifying that payment with the payment provider. There is no renewal date, because the purchase is one-time.
• Session information — enough to enforce one active session per account, which is a term of the licence.

We never see your card details. Payment is handled by the payment provider on their own systems; we receive only a reference and the result.

6. Why we are allowed to hold it

Under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, we rely on:

• Performance of a contract — for your email, purchase status and session data. We cannot give you an account without them.
• Legal obligation — for keeping transaction records for the period UAE tax and commercial law requires.
• Legitimate interest — for the rate-limiting described above, to keep the service available.

We do not sell personal data, we do not share it for advertising, and we do not use it for marketing unrelated to your purchase.

7. Who else is involved

These providers process data on our behalf, each limited to its purpose:

• Anthropic — interprets your typed instruction, as described in section 4.
• Hosting and delivery — [hosting provider] serves the application and processes request metadata.
• Payments — [payment provider] takes payment and holds card details.
• Email delivery — [email provider] sends sign-in links and receipts.

Some of these operate outside the UAE, so account data and the instruction text may be processed abroad. Where that happens we rely on the transfer provisions of the PDPL and on contractual safeguards with each provider. Owner file contents are not transferred anywhere, because they never leave your device.

8. How long we keep it

• Owner file contents — not kept at all. Gone when the tab closes.
• Account data — while your account is open, then deleted within 90 days of closure, apart from records we must retain for tax and accounting.
• Instruction text — not stored by us beyond serving the request.
• Rate-limit counters — minutes, in memory.

9. Your rights

Over the account data we hold about you, you can ask us to:

• tell you what we hold and give you a copy;
• correct it if it is wrong;
• delete it, subject to records we must legally keep;
• restrict or object to how we use it;
• provide it in a portable form;
• stop sending you anything that is not essential to your account.

Email privacy@fixyourdata.ae and we will respond within 30 days. You can also complain to the UAE Data Office.

If you are a property owner who was contacted by an agent using this tool: we do not hold your data and cannot find, correct or delete it, because it never reached us. The broker who messaged you is the controller of that data and is the one who must answer you. If you tell us which brokerage it was, we will pass your request on and remind them of their obligations.

10. Cookies and browser storage

We use no advertising cookies, no third-party trackers and no cross-site analytics. The application stores your sign-in state in your browser’s local storage so you are not signed out on every visit. Clearing your browser data signs you out.

11. Children

The service is for licensed real-estate professionals and is not intended for anyone under 18. We do not knowingly collect data from children.

12. Changes

If we change what we collect or who processes it, we will update this notice and, where the change is material, email you before it takes effect.