Privacy Policy

in5 Tech DDA Free Zone LLC ("DealPilot", "we", "us") is the data controller for all personal data collected through the DealPilot platform.

Registered address: in5 Tech, Knowledge Building, Dubai Silicon Oasis, Dubai, UAE.

Data Protection Officer: founder@dealpilot.ae

We collect the following categories of personal data:

• Account data: Name, email, phone number, company name, RERA license number.
• Lead data: Name, phone, email, budget, preferred location, conversation logs.
• Deal data: Property details, transaction values, contract documents, party data.
• Compliance data: KYC documents, sanctions screening results, consent records.
• Usage data: Access logs, session data, device information.

• Providing and operating the platform services
• Complying with RERA, TDRA, and UAE AML law requirements
• Improving AI models (anonymized data only)
• Sending product updates and security notifications
• Responding to support requests

All customer data is stored in Google Cloud Platform — europe-west1 region (Belgium). We are migrating to me-central2 (Dubai) when fully available.

[REVIEW] Confirm actual GCP region before publishing.

Encryption: AES-256-GCM for PII at rest. TLS 1.3 in transit.

We use the following sub-processors to deliver the service:

• AML records: 7 years (UAE AML Law)
• KYC documents: 5 years after relationship ends
• Conversation logs: 2 years
• System logs: 90 days
• Account data: until deletion + 30 days

Under UAE PDPL and GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion (subject to legal retention requirements)
• Portability: Receive your data in machine-readable format
• Objection: Object to certain processing

To exercise these rights, contact: founder@dealpilot.ae

Some data may be transferred to sub-processors outside the UAE (see list above). We ensure appropriate safeguards per UAE PDPL Article 26, including Standard Contractual Clauses where applicable.

We use only essential cookies for authentication and session security. We do not use tracking or advertising cookies.

Our services are intended for professionals aged 18 or older. We do not knowingly collect data from children.

We will notify you of material changes via email or in-platform notice at least 30 days before they take effect.