Privacy Policy

Last updated: March 30, 2026

1. Introduction

PropFlow Pro ("we," "our," or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information about you when you use our property management platform and marketing website ("Services").

This policy applies to all users of PropFlow Pro, including property management companies, their staff, property owners, and tenants. We comply with the UAE Personal Data Protection Law (PDPL, Federal Decree-Law No. 45 of 2021), the EU General Data Protection Regulation (GDPR), and applicable data protection laws in Saudi Arabia, Qatar, Bahrain, Oman, and Kuwait.

2. Data We Collect

Account Data: Name, email address, phone number, company name, job title, and billing information when you register or subscribe.

Property & Tenant Data: Property details, lease agreements, tenant information, financial transactions, and maintenance records entered into the platform by you or your team as part of your property management operations.

Usage Data: Log files, IP addresses, browser type, pages visited, features used, and session duration for analytics and service improvement.

Payment Data: We use PCI-compliant payment processors. We do not store full card numbers. Bank account details for direct debit are encrypted and stored securely.

Communications: Emails, support tickets, and chat transcripts when you contact our team.

3. How We Use Your Data

  • Providing and improving the PropFlow Pro platform and its features
  • Processing payments and managing your subscription
  • Sending service notifications, product updates, and compliance alerts
  • Responding to support requests and providing customer success services
  • Analytics and platform improvement (using aggregated, anonymized data)
  • Compliance with legal obligations (tax, regulatory, and government requirements)
  • Marketing communications (with your consent, and you may opt out at any time)

4. Legal Basis for Processing (GDPR & UAE PDPL)

We process your data on the following legal bases: (a) performance of the contract between you and PropFlow Pro; (b) legitimate interests in operating and improving our business; (c) compliance with legal obligations; and (d) your consent where explicitly obtained.

5. Data Storage & Residency

By default, PropFlow Pro stores customer data in UAE-based data centers (Microsoft Azure UAE North). Professional plan customers receive UAE or KSA data residency options. Enterprise customers may select dedicated data residency in UAE or KSA as an add-on.

We do not transfer personal data outside the GCC/UAE without appropriate safeguards. Where we use sub-processors (such as payment providers or email delivery services) that operate outside the UAE, we ensure adequate data transfer mechanisms are in place.

6. Data Retention

We retain your account data for the duration of your subscription plus 90 days after cancellation, after which it is deleted upon your request. Regulatory audit trail data (financial records, compliance submissions) is retained for 7 years per UAE FTA and regulatory requirements for Enterprise customers. You may export all your data at any time during your subscription.

7. Your Rights

Under UAE PDPL and GDPR, you have the right to: access your personal data; correct inaccurate data; request deletion (subject to legal retention obligations); data portability; object to certain processing; and withdraw consent where applicable. To exercise these rights, contact: privacy@propflowpro.com

8. Security

We implement industry-standard security measures including: AES-256 encryption at rest; TLS 1.3 in transit; SOC 2 Type II compliance (in progress); multi-factor authentication; role-based access controls; regular penetration testing; and 24/7 security monitoring. Enterprise customers receive dedicated security configurations and SIEM log export capabilities.

9. Cookies

We use essential cookies (required for the platform to function), analytics cookies (to understand usage), and marketing cookies (to track conversions from advertising). See our Cookie Policy for full details and your opt-out options.

10. Third-Party Services

We use select third-party services: payment processing (Stripe, local GCC gateways), email delivery (Amazon SES), analytics (internal), and cloud infrastructure (Microsoft Azure). All sub-processors are contractually bound to handle data only per our instructions and applicable law.

11. Changes to This Policy

We may update this policy periodically. We will notify registered customers of material changes via email at least 30 days before they take effect. Continued use of PropFlow Pro after changes constitutes acceptance of the updated policy.

12. Contact

For privacy inquiries, data requests, or to report a concern: privacy@propflowpro.com
PropFlow Pro, DIFC Gate Village, Dubai, UAE

ℹ️ This policy is provided in English. Customers requiring an Arabic version should contact privacy@propflowpro.com. In case of conflict, the English version prevails unless applicable local law requires otherwise.