Privacy Policy

1. Who we are

ListdPro is a customer relationship management service for real estate brokers in the United Arab Emirates. It is operated by STRATAGEN GLOBAL TECH FZE LLC, a free zone company registered in Ajman, United Arab Emirates (“ListdPro”, “we”, “us”).

Registered address: [to be published — see trade licence]. Privacy enquiries: privacy@listdpro.com.

This policy explains what personal data we handle, why, who we share it with, how long we keep it, and what you can ask us to do with it. It is written against the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the “PDPL”) and its implementing decisions.

2. Two roles: when we decide, and when your brokerage decides

ListdPro handles two different kinds of personal data, and our legal responsibility differs between them. This distinction determines who you should contact about a request.

• Broker and agency account data — we are the controller. When you register, subscribe, and use ListdPro, we decide how your account data is processed and we are accountable for it.
• Client and lead data your brokerage puts into ListdPro — we are the processor. When a broker enters a buyer’s name and phone number, imports leads, or forwards a client’s messages, the brokerage is the controller. They decided to collect that data and they are responsible for having a lawful basis to do so. We process it only on their instructions, and we act on their decisions about deletion and disclosure.

If you are a buyer, seller, or tenant and your data is in ListdPro because a brokerage put it there, see section 9.

3. What we collect

Account and identity data

• Full name, mobile number (also used as your WhatsApp number), and email address
• Agency name and your role within it (admin, manager, agent, viewer)
• RERA / BRN broker registration number and Trakheesi advertising permit numbers, where you provide them
• Profile photo, if you upload one

We do not store passwords. Sign-in uses a one-time code sent to your phone; the code is stored only as a salted hash and is deleted once used or expired.

Content you create

• Listing details: property attributes, prices, locations, and descriptions
• Listing copy in English and Arabic, whether you wrote it or generated it
• Voice notes you record to dictate a listing, and property photographs you upload
• Deals, commissions, tasks, notes, and generated PDF documents

Client and lead data you enter or import

• Lead name, phone number, email address, budget, property requirements, and your notes
• WhatsApp conversation history between you and your clients through our integration
• Leads delivered to you by property portals you have connected

Usage and technical data

• IP address, device and browser type, operating system, and app version
• Feature usage events and timestamps
• Your conversations with the in-product AI assistant, retained so it can follow the thread of a conversation

Billing data

• Subscription plan, billing dates, invoices, and payment references
• Card numbers never reach ListdPro servers. Payment details are entered on our payment provider’s hosted checkout and we receive only a transaction reference and status.

4. Why we process it, and on what basis

5. Who we share it with

We use the following service providers. Each receives only what it needs for the stated purpose, and each is bound by contract to process it on our instructions.

We do not sell personal data. We do not share it with advertising networks, data brokers, or for any third party’s own marketing. Under our agreements with the AI providers named above, your content is not used to train their models.

We may also disclose data where a UAE court, regulator, or law requires it, and to professional advisers under a duty of confidentiality.

6. Transfers outside the UAE

Your data is processed outside the United Arab Emirates. We want you to know exactly where. Our servers and database are located in Malaysia. AI processing by Anthropic and OpenAI takes place in the United States. Message delivery through the WhatsApp Cloud API is handled by Meta on infrastructure outside the UAE.

The UAE has not issued an adequacy decision covering these countries. We therefore rely on Article 23 of the PDPL, which permits transfer to a jurisdiction without an adequacy decision where the transfer is necessary to perform a contract with you, and where it is made under a contract that obliges the recipient to protect the data to the standard the PDPL requires. Every provider named in section 5 is engaged under such terms.

If your brokerage’s own policy requires that client data remain inside the UAE, tell us before you upload it. We will not be able to meet that requirement on our current infrastructure.

7. How long we keep it

8. Your rights under the PDPL

You have the right to:

• Access the personal data we hold about you, and be told how it is processed
• Correct data that is inaccurate or incomplete
• Request deletion of your data
• Receive a copy of the data you gave us in a structured, machine-readable format, and have it transferred where technically feasible
• Object to processing based on our legitimate interest, and to automated decision-making
• Restrict processing while a dispute about accuracy or lawfulness is resolved
• Withdraw consent at any time, where we relied on it
• Complain to the UAE Data Office

To exercise any of these, email privacy@listdpro.com or use the data deletion request form. We will respond within 30 days, free of charge. We will ask you to verify that you control the phone number or email address on the account before we act — this protects you against someone else making a request in your name.

9. If you are a client or lead, not a broker

Your data is most likely in ListdPro because a brokerage entered it. That brokerage is the controller and decides what happens to it. Contact them first, since they can action your request immediately.

If you cannot reach them, or you do not know which brokerage holds your data, submit the deletion request form or email privacy@listdpro.com. We will identify the controller, forward your request, and act on their instruction. We will tell you what happened.

10. How we protect it

• All traffic is encrypted in transit using TLS
• No passwords exist to be stolen: authentication is a one-time code plus a signed session token
• Every database query is scoped to a single agency, so one brokerage cannot read another’s data
• Administrative access is limited to staff who need it, and is logged
• Regular backups, held under the retention schedule above

No service can promise perfect security. If a breach affects your personal data, we will notify you and the UAE Data Office as the PDPL requires.

11. Automated processing and AI features

ListdPro uses AI to draft listing descriptions, translate them into Arabic, transcribe voice notes, score leads, and answer questions in the assistant. Two things follow:

• Content you put into these features is sent to the providers named in section 5. Do not enter personal data you are not permitted to share with them.
• AI output is a draft. A lead score is a suggestion, not a decision about a person. No AI output is published, sent, or acted on without a human choosing to do so.

12. Children

ListdPro is a professional tool for licensed brokers and is not intended for anyone under 18. We do not knowingly collect data about children. If you believe we have, contact us and we will delete it.

13. Changes to this policy

We may update this policy. The date at the top always reflects the current version. For changes that materially affect your rights or how we use your data, we will notify you by email or in the product at least 30 days before they take effect.

14. Contact us

Privacy questions and data-subject requests: privacy@listdpro.com
General support: support@listdpro.com
STRATAGEN GLOBAL TECH FZE LLC, Ajman, United Arab Emirates

If you are not satisfied with our response, you may complain to the UAE Data Office.