Privacy policy

2. Who is responsible

2.1 For account data, we decide how it is used. For tenant data that an Owner enters, the Owner decides, and we process it on the Owner’s behalf. Tenants should contact their landlord first about their data.

3. What we collect

3.1 Account: name, email, WhatsApp number, username, password (stored only in a form that cannot be read back), business name, logo, and language and display settings.

3.2 Tenant and rental data entered by the Owner: names, phone numbers, email, nationality, sponsor, a business tenant’s registration and owner, an optional Civil ID number, units, leases, rent, payments, balances and notes.

3.3 Technical: IP address and sign-in records, a log of changes inside the account, and usage counts.

4. Why we use it

4.1 To run the account and its features, confirm email addresses and reset passwords, manage plans and payments, give support, keep the Service secure and meet legal duties.

4.2 To fix a problem, our staff may view an account read-only; each visit appears in the Owner’s Log.

4.3 We do not sell data, show advertising, or use tenant data for our own purposes.

5. Cookies

5.1 We use only the cookies needed to keep you signed in, remember your language and display settings, and stop automated abuse. No advertising or tracking cookies.

6. Who receives data

6.1 Our service providers: Cloudflare (hosting, database, backups and security), Resend (account emails) Google Drive (an encrypted backup copy) and, only if the owner switches the assistant on, Anthropic (the assistant: the question and the figures it reads; not used to train models). They use the data only to provide their service to us.

6.2 WhatsApp reminders are sent by the Owner from their own phone; we do not send them.

6.3 We may disclose data where the law requires it.

7. Storage outside Oman

7.1 These providers store or process data outside Oman, including in Europe and the United States. By creating an account the Owner agrees to this.

8. How long we keep data

8.1 Account and tenant data: while the account exists; after the account is closed it is deleted, except what the law requires us to keep.

8.2 Sign-in and IP records: up to 90 days.

8.3 Backups: each copy is deleted when it expires, within a few months.

9. Security

9.1 We protect data with encrypted connections, passwords stored only in unreadable form, separated accounts and regular backups. No system is completely secure. If a breach puts people at risk, we inform those affected and the authorities as the law requires.

10. Your rights

10.1 You can ask to see, correct or delete your personal data, withdraw consent or object to its use. Write to the email in section 1. We answer within the time the law sets.

10.2 You can also complain to the personal data protection department of the Ministry of Transport, Communications and Information Technology.

11. Changes and language

11.1 Each version has a number and a date. We tell Owners about important changes before they apply.

11.2 This Policy is in Arabic and English. If they differ, the Arabic text prevails.