We take your privacy seriously. This policy explains clearly what data we collect, why we collect it, and your rights over it. We will never sell your personal data.
Ardhi is a UAE property intelligence platform ("Ardhi", "we", "us"). We are the data controller for personal data collected through the platform. Contact us at support@ardhiuae.com for any privacy-related enquiries.
When you register, we collect your email address and the password you create (stored as a secure hash — we never see your actual password). If you choose to provide your name, we store that too.
We log property searches, building clicks, areas viewed and features used. This helps us understand how the platform is used and improve it. Logs include timestamps, search queries and approximate location data derived from property coordinates you view — not your device's GPS location.
When you use the AI analysis feature, your messages and the property context (building name, area, AVM value) are sent to Anthropic's Claude API to generate a response. We log the number of messages and token usage for billing and rate-limiting purposes. We do not store the full text of AI conversations beyond the current session.
Payments are processed entirely by Stripe. We never see or store your card details. We receive confirmation of payment status and your Stripe customer ID for subscription management only.
Standard server logs including IP address, browser type, device type and pages visited. Used for security, debugging and performance monitoring. Retained for 30 days.
We use essential cookies to keep you logged in and remember your preferences. We do not use advertising cookies or third-party tracking cookies. The cookies we set are:
| Cookie | Purpose | Duration |
|---|---|---|
| sb-auth-token | Keeps you logged in (Supabase authentication) | Session / 7 days |
| ardhi_onboarded | Remembers if you've seen the welcome screen | 1 year |
| ardhi_brand | Stores your white-label brand settings locally | 1 year |
| Purpose | Data used | Legal basis |
|---|---|---|
| Provide the service and your account | Email, usage data | Contract performance |
| Process payments and manage subscriptions | Email, Stripe customer ID | Contract performance |
| Send transactional emails (confirmations, receipts) | Contract performance | |
| Enforce rate limits and fair usage | User ID, usage counts | Legitimate interest |
| Improve the platform and fix bugs | Usage data, error logs | Legitimate interest |
| Detect fraud and abuse | IP address, usage patterns | Legitimate interest |
| Send product updates (with your consent) | Consent |
We do not sell your personal data. We share data only with the following trusted service providers who process it on our behalf:
We may also disclose data where required by UAE law or a valid court order.
We implement industry-standard security measures including:
No system is 100% secure. In the event of a data breach affecting your personal data, we will notify you within 72 hours as required under UAE PDPL.
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you have the right to:
To exercise any of these rights, email support@ardhiuae.com. We will respond within 30 days.
Ardhi is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe a minor has registered, contact us and we will delete the account promptly.
Your data may be processed outside the UAE by our service providers (Supabase in EU, Anthropic in USA, Stripe in USA). We ensure appropriate safeguards are in place in line with UAE PDPL requirements.
We may update this Privacy Policy from time to time. We will notify registered users by email before material changes take effect. The current version is always available at this URL.
For any privacy questions or to exercise your rights, contact us at support@ardhiuae.com.
If you are not satisfied with our response, you may lodge a complaint with the UAE Data Office at tdra.gov.ae.