Privacy Policy

Effective Date: 15 April 2026  ·  Last Updated: 15 April 2026  ·  Governing Law: United Arab Emirates

PropDirect FZ-LLC (“PropDirect”, “we”, “our”, or “us”) operates the property marketplace platform available at propdirect.ae. This Privacy Policy explains how we collect, use, store, share, and protect your personal data in accordance with the UAE PDPL and applicable UAE regulations.

By accessing or using PropDirect, you agree to the collection and use of your personal data as described in this Policy. If you do not agree, please do not use the platform.

1. Data Controller

PropDirect FZ-LLC
Dubai, United Arab Emirates
Email: cloud@propdirect.ae
WhatsApp: +971 55 513 0651

2. Personal Data We Collect

We collect the following categories of personal data depending on how you use our platform:

• Identity Data: Full name, Emirates ID, passport number, UAE Pass verification data, and for NRI users, FEMA-related identification documents.
• Contact Data: Email address, phone number, WhatsApp number, and mailing address.
• Financial Data: Mortgage application data, Open Banking API data (via Emirates NBD and participating lenders), income and credit information submitted for mortgage pre-approval.
• Property Data: Property listings, title deed documents, valuation inputs, NOC documents, EJARI registration data, and DTCM short-term rental permit information.
• KYC & AML Data: WorldCheck screening results, source-of-funds declarations, and politically exposed person (PEP) checks required under UAE AML/CFT law.
• Usage Data: IP address, browser type, pages visited, session duration, search queries, and AI interaction logs.
• Communications Data: Messages sent via our contact form, WhatsApp, and email.
• AI Interaction Data: Inputs to our AI agents including property preferences, offer strategies, and valuation queries.

3. How We Use Your Personal Data

• To provide property marketplace services including listing, buying, selling, renting, and short-term rental management.
• To perform identity verification (KYC) and AML/CFT screening as required by UAE law.
• To process mortgage pre-approval applications via Open Banking API integrations.
• To automate property transaction documents including MOUs, NOCs, EJARI registrations, and DLD title deed transfers.
• To operate our 27 AI agents for valuation, matching, negotiation, and compliance purposes.
• To send transactional communications and platform updates.
• To comply with legal obligations under UAE PDPL, AML/CFT regulations, RERA requirements, and DLD obligations.
• To improve platform performance and validate AI models (using anonymised or aggregated data where possible).
• To provide B2B Data API services to banks, developers, and PropTech firms (aggregated, non-personally identifiable data only).

4. Legal Basis for Processing

• Contractual necessity: Processing required to provide services you have requested.
• Legal obligation: Processing required to comply with UAE AML/CFT law, RERA, DLD requirements, and PDPL.
• Legitimate interests: Platform security, fraud prevention, and service improvement.
• Consent: Where we rely on your consent (e.g. marketing communications), you may withdraw it at any time.

5. Data Storage & Residency

All personal data collected through PropDirect is stored exclusively within the United Arab Emirates on Oracle Cloud Infrastructure (OCI) UAE East region (me-abudhabi-1). We do not transfer your personal data outside the UAE except where required for NRI/international buyer services (e.g. FEMA compliance), in which case appropriate safeguards are applied in accordance with PDPL Article 26.

Oracle Blockchain creates immutable hash records of title deed transactions. No personally identifiable information is stored directly on the blockchain.

6. Data Retention

• KYC and AML records: Minimum 5 years from the end of the business relationship, as required by UAE AML law.
• Transaction records: Minimum 5 years from transaction completion, in accordance with DLD and UAE commercial law.
• Marketing data: Until you withdraw consent or request deletion.
• Usage and platform logs: Up to 12 months, unless required longer for legal proceedings.

7. Sharing Your Personal Data

We may share your personal data with:

• Mortgage lenders (e.g. Emirates NBD) for mortgage pre-approval processing — only with your explicit consent.
• DLD (Dubai Land Department) for title deed registration and OQOOD processing, as required by law.
• RERA-licensed agents involved in your transaction, where applicable.
• DTCM for short-term rental compliance and permit verification.
• WorldCheck / LSEG for AML/KYC screening, as required by UAE AML law.
• Oracle Cloud as our infrastructure and data processing partner.
• UAE Financial Intelligence Unit (UAEFIU) where we are legally obligated to file suspicious transaction reports.

We do not sell your personal data to third parties. We do not share identifiable personal data through our B2B Data API — only aggregated, anonymised market intelligence.

8. Your Rights Under the UAE PDPL

Under the UAE Personal Data Protection Law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete personal data.
• Request deletion of your personal data (subject to legal retention obligations).
• Object to or restrict certain processing activities.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with the UAE Data Office.

To exercise any of these rights, contact us at cloud@propdirect.ae. We will respond within 30 days.

9. Cookies & Tracking

PropDirect uses essential cookies required for platform functionality. We may also use analytics cookies to understand how users interact with our platform. You may manage your cookie preferences through your browser settings.

10. AI & Automated Decision-Making

PropDirect uses AI agents for automated property valuation (AVM), mortgage pre-approval, offer strategy, and compliance screening. Where automated decisions may significantly affect you, you have the right to request human review. Our AI valuations are provided with 94% confidence levels and SHAP explainability — these are informational tools, not legally binding valuations.

11. Security

We implement appropriate technical and organisational security measures to protect your personal data, including encryption at rest and in transit, access controls, and regular security assessments. All data resides within Oracle’s UAE East secure infrastructure.

12. Children’s Privacy

PropDirect is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or platform notification. The “Last Updated” date at the top reflects the most recent revision. Continued use of the platform after changes constitutes acceptance of the updated Policy.

14. Contact Us

PropDirect FZ-LLC
Dubai, United Arab Emirates
Email: cloud@propdirect.ae
WhatsApp: +971 55 513 0651