Privacy Policy

PropVista is operated by UB Realty and its affiliated entities in the UAE and Canada. The data controller for personal information collected through the Services is the PropVista entity established in the jurisdiction in which you reside.

For questions about this policy or to exercise your rights, contact us at support@propvista.io or by mail at the address provided on request.

We collect personal information in the following categories:

• Account information you provide when registering: name, email address, phone number, employer brokerage, professional credentials.
• Authentication data required to verify your identity: password hashes, one-time codes, social sign-in identifiers from Google or Facebook where you choose to use them.
• Service content you create or upload: property listings, client records, communications, marketing assets, and related metadata.
• Usage data automatically generated when you use the Services: IP address, device and browser information, pages viewed, actions taken, timestamps, and similar diagnostic logs.
• Communications you send to us: support tickets, feedback, survey responses.

We use personal information for the following purposes:

• To provide, maintain, and improve the Services.
• To authenticate users and prevent unauthorised access.
• To process transactions and send transactional communications.
• To comply with legal and regulatory obligations, including those imposed by the Dubai Land Department, the Toronto Real Estate Board, and applicable tax authorities.
• To detect, investigate, and prevent fraudulent, harmful, or unauthorised activity.
• To send service-related notices, security alerts, and (with your consent) product updates.

We process personal information on the bases of (a) performance of the contract under which the Services are provided to you or your brokerage, (b) compliance with our legal obligations, (c) our legitimate interests in operating the Services, and (d) your consent where required by applicable law.

We share personal information only as described in this policy:

• With your brokerage. If you are an agent or staff member of a brokerage using PropVista, your activity within that brokerage's account is visible to authorised administrators of that brokerage.
• With service providers. Cloud infrastructure (Amazon Web Services, Mumbai region), transactional email (Resend), SMS / phone verification (Twilio), payment processing, error monitoring, and analytics providers process data on our behalf under written agreements.
• With regulators. Where required by applicable real-estate regulators including the Dubai Land Department and the Toronto Real Estate Board, we transmit listing and broker data as part of regulated reporting.
• For legal reasons. We may disclose information if required by law, court order, or to protect the rights, property, or safety of PropVista, our users, or others.
• In the event of a corporate transaction. If PropVista undergoes a merger, acquisition, or sale of assets, personal information may be transferred subject to this policy.

We do not sell personal information.

PropVista's primary infrastructure is hosted in Mumbai, India (ap-south-1). Personal information may be processed in jurisdictions outside your country of residence. We rely on standard contractual safeguards and adequacy mechanisms recognised by the UAE PDPL and PIPEDA to govern such transfers.

We retain personal information for as long as necessary to provide the Services and to comply with legal, accounting, and regulatory obligations, and we delete or anonymise it when it is no longer required. You may ask us to delete your account data at any time. Where the law requires us to keep a record, we retain only the minimum needed for that purpose. See our data deletion instructions for how to make a request and what we are required to retain.

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, role-based access controls, audit logging, and routine security review. No system is perfectly secure; we cannot guarantee absolute security but commit to notifying affected users of any material breach as required by law.

Subject to applicable law, you have the right to access, correct, delete, or obtain a portable copy of your personal information, to object to or restrict certain processing, and to withdraw consent where processing is based on consent. To exercise these rights, contact support@propvista.io. We will respond within the timeframes required by applicable law.

For account deletion specifically (including what we delete, what we are required to retain, and how long the process takes), see our data deletion instructions.

Users in the UAE may complain to the UAE Data Office. Users in Canada may complain to the Office of the Privacy Commissioner of Canada or the applicable provincial commissioner.

We use cookies and similar technologies to operate the Services, remember your preferences, and analyse usage. You can control cookies through your browser settings; disabling cookies may limit functionality.

The Services are intended for users aged 18 and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will take prompt action to delete it.

PropVista offers optional integrations with Google services. When you use them, we access Google user data strictly as described here.

Google Sign-In (scopes: openid, email, profile): we receive your name, email address, and profile picture to create and sign you into your PropVista account. We do not receive your Google password.

Gmail (scope: gmail.readonly): if you connect your Gmail account, PropVista reads messages you have sent in order to build a private writing-style profile used to draft outreach in your own voice, and to associate email conversations with your contacts inside your workspace. We do not send email from your account through this scope, and we never read your mailbox for advertising or profiling unrelated to the feature you enabled.

Google Calendar (scopes: calendar.readonly, calendar.events): if you connect your calendar, PropVista reads your availability to offer booking slots and creates events for appointments you or your clients confirm.

Google user data is stored encrypted at rest, is never sold, is never used to train generalised artificial-intelligence or machine-learning models, and is not shared with third parties except service providers necessary to operate the feature (per section 5). Disconnecting an integration in your workspace settings revokes our access and deletes the stored tokens; derived data (such as your writing-style profile) is deleted on request or when your account is deleted, per section 7.

PropVista’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We may update this policy from time to time. Material changes will be announced through the Services or by email. The “Last updated” date at the top of this page reflects the most recent revision.

Questions, requests, or complaints about this policy: support@propvista.io.