Privacy policy

Who we are

BROKXO (brokxo.com) is operated by [BROKXO legal entity name], [licence number], Dubai, United Arab Emirates ("BROKXO", "we"). We are the controller of personal data processed through our website and app, except client data that agents add to their own account, for which the agent is the controller and BROKXO acts as processor.

Data we collect

Account data: name, email, mobile number, profile photo, brokerage details, RERA/ORN/BRN and permit numbers.

Client data added by agents: contact details, requirements, notes, documents (for example Emirates ID, passport, visa, Form A/B/F, tenancy contracts) and deal records.

Usage and device data: pages viewed, features used, IP address, browser type — analytics only with your consent.

Payment data is handled by Stripe. We never store full card numbers.

How we use data

To provide the service, generate AI content and valuations, process payments, send service messages, prevent abuse and meet legal obligations.

We do not sell personal data. We do not use client data added by agents to train AI models.

Legal basis

We process personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and its regulations: to perform our contract with you, with your consent (for example analytics), to comply with law, and for legitimate interests such as security.

Where data is stored

Client documents are encrypted and stored in a UAE data centre (AWS me-central-1). Other service data is processed by our providers listed below, which may be outside the UAE under appropriate safeguards.

Providers: Vercel (hosting), Neon (database), Amazon Web Services (documents), Stripe (payments), Resend (email), Anthropic via Vercel AI Gateway (AI text), PostHog EU (analytics, with consent), Sentry (error monitoring). Partner services: Financify Mortgages and Wynxo receive data only when you choose to refer a client or run a campaign.

Retention

We keep account data while your account is active and for up to [X] months after closure, unless law requires longer. You can delete client records at any time.

Your rights

You can access, correct, export or delete your data, withdraw consent and object to processing. Export and account deletion are available in your account settings, or email us.

Contact: privacy@brokxo.com.

Security

Encryption in transit and at rest, field-level encryption for identity document numbers, role-based access and audit logs for admin actions.

Changes

We will notify you of material changes by email or in the app.