Privacy Policy

Effective date · 2026-05-05Last updated · 2026-05-05Version · 1.0

RE Intelligence (“we”, “us”, “our”) operates the market intelligence platform available at reint.ae and the subdomain app.reint.ae (the “Service”). This Privacy Policy explains how we collect, use, store, share, and protect personal data when you visit our website, register an account, or use the Service.

We process personal data in compliance with the United Arab Emirates Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “UAE PDPL”), the DIFC Data Protection Law (DIFC Law No. 5 of 2020) where applicable, and — for visitors located in the European Economic Area — the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”).

Contact for any privacy matter, data subject request, or data breach notification: contact form (subject line: “Privacy”).

1.Data controller

For the purposes of the UAE PDPL and the GDPR, the data controller of personal data collected through the Service is RE Intelligence, registered in the United Arab Emirates. All requests must be addressed in writing to the contact above.

2.Personal data we collect

2.1 Data you provide

Account data: full name, work email address, password (hashed), company.
Communication data: messages you send via the in-app AI chat, support requests, feedback submissions.
Telegram linkage: your Telegram chat ID and username if you opt in to the Telegram bot.
Billing data: if you subscribe, billing information is processed by our payment processor (we do not store card numbers).

2.2 Data collected automatically

Technical data: IP address, browser type, device identifiers, operating system, referring URL.
Usage data: pages viewed (page-visit telemetry — pathname, page label, timestamp), feature interactions, search queries on aggregated market data.
Cookies and similar technologies: see our Cookie Usage Agreement.

2.3 Market data we display

The Service aggregates publicly available real-estate transaction records from the Dubai Land Department and other public sources. This data is not personal data within the meaning of the UAE PDPL or the GDPR.

3.Lawful bases for processing

We rely on the following lawful bases under Article 5 of the UAE PDPL and Article 6 of the GDPR:

Performance of a contract — to create your account, deliver the Service, process subscriptions and trial conversions.
Consent — to send marketing emails, link your Telegram account, or set non-essential cookies. You may withdraw consent at any time.
Legitimate interests — to secure the Service, prevent fraud, improve features, and analyse aggregated, non-identifying usage.
Legal obligation — to comply with tax, anti-money-laundering, and lawful disclosure requests from competent UAE authorities.

4.How we use your data

Provide, maintain, and improve the Service.
Authenticate access and protect against unauthorised use.
Send transactional notifications (account activation, password reset, trial expiry).
Send weekly digests, market reports, and signal alerts that you have subscribed to.
Generate aggregate, non-identifying analytics on platform usage (admin Analytics tab).
Investigate suspected security incidents or breaches.

5.Sharing your data

We share personal data only in the following circumstances:

Sub-processors who provide infrastructure under written data-processing agreements: Vercel Inc. (hosting), Supabase Inc. (database, authentication), the operator of our outbound SMTP relay (transactional email), n8n Cloud (workflow orchestration for digests and alerts), and AI providers (OpenAI, Anthropic, OpenRouter) for chat, forecasts, and report generation.
Competent UAE authorities when required by law or by valid court order.
Successors in the event of a merger, acquisition, or sale of all or substantially all of our assets, subject to equivalent privacy commitments.

We never sell personal data, and we do not share personal data for third-party advertising.

6.International transfers

Some of our sub-processors are located outside the UAE. Where personal data is transferred to a country that has not been recognised by the UAE Data Office as providing an adequate level of protection, we put in place appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms recognised under UAE PDPL Article 22 and GDPR Article 46.

7.Data retention

Account data: retained for the lifetime of the account plus 30 days after deletion request, then erased or anonymised.
Page-visit telemetry: retained for 12 months in raw form; aggregated indefinitely.
Chat transcripts: retained for up to 90 days for service-quality monitoring, then erased.
Backups: rolling 30-day encrypted backups; deleted records expire from backups within that window.
Legal records: retained for the period required by UAE tax and AML legislation (typically 5 years).

8.Your rights

Subject to UAE PDPL Articles 13–17 and, where applicable, GDPR Articles 15–22, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request erasure (“right to be forgotten”) where no overriding legal basis applies.
Object to processing based on legitimate interests, or to direct marketing at any time.
Restrict processing while a request is reviewed.
Receive your data in a portable, machine-readable format.
Withdraw consent at any time, without affecting the lawfulness of prior processing.
Lodge a complaint with the UAE Data Office or your local supervisory authority.

To exercise any of these rights, email contact form. We will respond within 30 calendar days.

9.Security

We apply technical and organisational measures consistent with industry standards: encryption in transit (TLS 1.2+), encryption at rest, role-based access control, audit logging, principle of least privilege, scoped service-role keys, and continuous backup. No system is impenetrable; you are responsible for keeping your account credentials confidential. We will notify affected users and the UAE Data Office of any personal-data breach without undue delay and within 72 hours where feasible.

10.Children

The Service is intended for professional use and is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.

11.Changes to this policy

We may update this Privacy Policy. Material changes will be notified by email to active account holders at least 14 days before they take effect. The “Last updated” date above always reflects the current version.

12.Contact

Questions, requests, or complaints about this Privacy Policy: contact form. You may also contact the UAE Data Office at u.ae.