Privacy Notice
Version 2026-11-08.v6 · effective 1 November 2026
Pilot version, under review by UAE counsel. The Arabic text is a working translation pending certified legal translation; for consumers the Arabic text prevails.
This notice explains what personal data Leasifys processes, why, where, for how long, and how you can control it.
- 1. Who is responsible
- 2. What we process
- 3. Why, and on what basis
- 4. Who sees your data
- 5. Where your data is processed
- 6. How long we keep it
- 7. Automated processing
- 8. Your rights
- 9. Security and breaches
- 10. Cookies
- 11. Complaints and changes
1. Who is responsible
AY&R Management Consultants LLC OPC (licence CN-2697191, Abu Dhabi, United Arab Emirates) operates Leasifys and is the controller of your account, security and platform data. Contact for privacy questions and requests: [email protected]. We have not yet appointed a dedicated data protection officer; requests to this address are handled by the person responsible for data protection at AY&R.
2. What we process
Account: name, email, mobile number, language and display preferences, sign-in sessions (device and IP address), and a salted hash of your password if you set one.
Identity documents (only if you add them): images of your passport, Emirates ID or visa, and the details read from them. The document number is stored encrypted, with a one-way fingerprint used only to detect duplicates, and is shown masked.
Property records: units, title deeds or Oqood you upload and the details read from them, owners and their shares, purchase costs, valuations, property-manager terms, tenancy details and the documents attached to them.
Tenant ID copies on a lease: copies of the tenant's Emirates ID, passport or visa, shared by the tenant or added by the landlord or manager with the tenant's permission, for registering, renewing and cancelling the lease and for Rental Dispute Centre cases.
Records of what you agreed: each consent and acceptance (document version, exact wording, language, time, a hash of your IP address and your browser type) and an audit log of sensitive actions.
Newsletter: if you join the waitlist, your email address and confirmation.
3. Why, and on what basis
To provide the service you signed up for — your account, units, invitations, reviews, reminders and service emails: performance of our contract with you.
Identity verification: your consent, given on the identity screen. Storing and processing outside the UAE: your explicit consent plus contractual safeguards with our providers.
WhatsApp service messages and marketing messages: your consent, which you can withdraw at any time in Settings.
Security, fraud prevention and keeping records of what was agreed: our legitimate need to run a safe service and to prove consent, and legal obligations where a law applies.
4. Who sees your data
Other Users see only what their Role on the same Unit needs: co-owners see each other's names and shares; managing owners and property managers see contact details of people on their units. Nobody else sees your full ID number.
A tenant's ID copies on a lease are seen only by the landlord running that lease and its active property manager (not by investor co-owners, later tenants or a former manager). Each opening is recorded and shown to the tenant.
The Leasifys platform administrator sees uploaded title deeds when checking ownership with the land department.
Our providers process data for us under contract: see the Sub-processors page. We do not sell personal data and do not use it for advertising.
5. Where your data is processed
During the pilot, Leasifys runs on DigitalOcean servers in Singapore and sends email through Resend in the United States, under contractual safeguards (PDPL Art. 23). Service providers that read documents for us may process them in other countries; the Sub-processors page lists who they are and where. If we move hosting, we will update this notice.
6. How long we keep it
Identity document images: deleted automatically 30 days after you confirm the details. The extracted details stay while your account exists.
Tenant ID copies on a lease: kept while the tenancy runs (renewals included), while a security deposit is held or its settlement is disputed, and then for 12 months after the lease ends; then deleted automatically. A renewed copy replaces the old one, which is deleted at once.
Account and property records: while your account exists. When you close it, we delete or anonymise them within 30 days, except records other Users rely on (for example, a tenancy record kept by the landlord) and records we keep as evidence.
Consent and audit records: for the life of your account and five years after it closes, to prove what was agreed and when.
Backups roll over within 30 days.
7. Automated processing
Documents you upload are read by automated tools — on your device, on our servers or by service providers we engage, including AI-based document reading — and you check the result before it is saved. AI reading is on by default and you can turn it off in Settings. No decision with legal or similarly significant effect is made solely by automated means; you can ask for human review at [email protected].
8. Your rights
Free of charge, you can ask to: know what data we hold and how we use it; receive a copy; correct it; delete it; restrict or stop its processing; object to automated decisions; and withdraw any consent (this does not affect processing before withdrawal).
Most of this you can do yourself in Settings (profile, identity documents, notifications). For anything else, write to [email protected] from your account email. We reply within 30 days. Self-service account deletion is coming; until then we delete accounts on request.
9. Security and breaches
We use encryption in transit and at rest, encrypt identity numbers separately, keep files in private storage with short-lived links, require a fresh confirmation before sensitive changes, and log sensitive actions. If a breach puts your data at risk we will tell you and the competent authority without undue delay.
11. Complaints and changes
If you are unhappy with how we handle your data, contact [email protected] first. You can also complain to the UAE Data Office or its successor, the Federal Authority for Artificial Intelligence and Data. We change this notice only with 30 days' notice, as described in clause 21 of the Terms of Service.