Privacy Policy

1. Introduction

R.Space ("we", "us", "our") operates the rspace.ae platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection and applicable international data protection standards.

2. Information We Collect

Personal Information:

• Name, email address, phone number (provided during registration)
• Profile information (photo, company, RERA number for brokers)
• Communication data (messages, comments, posts)
• Property preferences and saved searches

Automatically Collected Information:

• Device information (browser type, operating system)
• Usage data (pages visited, features used, timestamps)
• IP address and approximate location
• Cookies and similar tracking technologies

3. How We Use Your Information

• To provide and maintain the Service
• To facilitate communication between brokers and clients
• To personalize your experience and provide relevant property recommendations
• To process and manage offers, listings, and transactions
• To send notifications about matches, updates, and important account information
• To improve our Service through analytics and usage patterns
• To ensure security and prevent fraud
• To comply with legal obligations

4. Data Sharing and Disclosure

We do not sell your personal data. We may share information with:

• Other Users: Brokers can see client inquiries; clients can see broker profiles
• Service Providers: Supabase (database), Vercel (hosting), Resend (email), OpenAI (AI features)
• Legal Requirements: When required by UAE law or regulatory authorities

5. Data Storage and Security

Your data is stored on Supabase infrastructure with encryption at rest and in transit. We implement industry-standard security measures including:

• Row-Level Security (RLS) policies on all database tables
• Encrypted authentication tokens
• Rate limiting on all API endpoints
• URL sanitization to prevent injection attacks
• Regular security testing

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us.

7. Your Rights

Under UAE data protection law, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

8. Cookies

We use essential cookies for authentication and session management. We also use analytics cookies (Vercel Analytics) to understand how the Service is used. You can control cookie settings through your browser.

9. Third-Party Services

• Supabase: Database and authentication (PostgreSQL, hosted in AWS)
• Vercel: Hosting and edge delivery
• Google OAuth: Optional sign-in method
• OpenAI: AI-powered property search and recommendations
• Sentry: Error monitoring (anonymized)

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Email: [email protected]
Website: rspace.ae