Privacy Policy

Account Information

When you create an account, we collect your email address and password (managed securely through Supabase Authentication). You may optionally provide your full name and upload a profile photo, which is stored in Supabase Storage.

Google Sign-In

If you choose to sign in with Google, we receive your basic Google account information (name, email address, and profile picture) as authorized by your Google account permissions. We do not access any other Google services or data beyond what is required for authentication.

Agent Preferences

If you use our real estate agent tools, you may provide professional information including your agent name, phone number, company name, and default commission split percentage. This information is stored in your Supabase user metadata and is used solely to personalize the tools for your workflow.

Usage Data

We may collect anonymized usage data about which tools you use and how you interact with the platform. In the future, this may be facilitated through Firebase Analytics. We do not currently use tracking cookies or Google Analytics on our website.

Device Information

In the future, we may collect device tokens for push notifications via Firebase Cloud Messaging (FCM). This data is used exclusively to deliver notifications you have opted into.

We use the information we collect for the following purposes:

• To create and manage your account
• To authenticate your identity when you sign in
• To personalize the real estate tools with your agent preferences
• To display your profile photo and name within the application
• To improve our tools and services based on aggregated, anonymized usage patterns
• To send push notifications you have opted into (future feature)
• To communicate important service updates or changes

Your data is stored securely using industry-standard infrastructure:

• Authentication and database services are provided by Supabase, hosted on Amazon Web Services (AWS) with encryption at rest and in transit
• Profile photos are stored in Supabase Storage with access controls
• Our website is hosted on Vercel with HTTPS encryption
• Passwords are hashed and never stored in plain text
• We do not store financial or payment card data directly — any future payment processing will be handled by Stripe, a PCI-compliant payment processor

While we implement reasonable security measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

We use the following third-party services to operate our platform. Each has its own privacy policy governing the data they process:

• Supabase — authentication, database, and file storage (hosted on AWS)
• Vercel — website hosting and deployment
• Google OAuth — sign-in authentication
• OpenStreetMap — map tile rendering for the yield heatmap tool
• Firebase (future) — push notifications and anonymized analytics
• Apple App Store / Google Play (future) — app distribution and in-app purchases
• Stripe (future) — payment processing

We do not sell, rent, or trade your personal information to any third party. Third-party services receive only the minimum data necessary to perform their function.

You have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you
• Correction — Request correction of inaccurate or incomplete data
• Deletion — Request deletion of your account and associated data
• Portability — Request your data in a portable, machine-readable format
• Objection — Object to the processing of your data for specific purposes
• Withdrawal of Consent — Withdraw consent for data processing at any time, where consent is the legal basis

To exercise any of these rights, please contact us at contact@asadiqbal.com. We will respond to your request within 30 days.

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory obligations.

Anonymized, aggregated usage data that cannot be linked back to an individual may be retained indefinitely for analytics and service improvement purposes.

Our services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@asadiqbal.com and we will delete such information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. When we make material changes, we will notify you by updating the "Effective Date" at the top of this page and, where appropriate, through in-app notifications.

We encourage you to review this policy periodically. Your continued use of our services after changes are posted constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Asad Iqbal Dubai, United Arab Emirates Email: contact@asadiqbal.com