Privacy Policy

Last updated: August 2026

This Privacy Policy describes how PropNexa collects, uses, and protects your personal data in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

1. Introduction

PropNexa ("we", "us", or "our") is a cloud-based property management and accounting platform operating in the United Arab Emirates. This Privacy Policy explains how we collect, use, store, and protect your personal data when you register for and use the PropNexa platform. This policy is published in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL").

2. Data We Collect

We collect the following categories of personal data: (a) Account data — your full name, email address, phone number, company name, and business details provided during registration; (b) Usage data — IP address, browser type, access times, and platform activity logs; (c) Business data — tenant, building, unit, lease, cheque, payment, and financial records you enter into the platform; and (d) Document data — files and documents you upload to the platform or to your connected Google Drive account.

3. How We Use Your Data

We use your personal data to: (a) provide, operate, and maintain the PropNexa platform and its features; (b) create and administer your company workspace and user accounts; (c) process subscription payments and issue invoices; (d) send service notifications, rent reminders, and platform alerts; (e) provide customer support and respond to your inquiries; and (f) comply with legal and regulatory obligations under UAE law. We do not sell your personal data to any third party.

4. Legal Basis for Processing

We process your personal data on the following legal bases: (a) your express consent provided at registration and through your continued use of the platform; (b) the performance of a contract — providing the property management services you subscribed to; (c) our legitimate business interests in operating and securing the platform; and (d) compliance with legal obligations under UAE tax, financial, and data protection regulations.

5. Data Sharing & Disclosure

We do not share, sell, or disclose your personal data to third parties except: (a) with your consent; (b) with our trusted service providers (such as cloud hosting, payment processors like Stripe, and Google Drive integration) who process data on our behalf under strict confidentiality obligations; (c) when required by law, court order, or competent UAE authority; and (d) in connection with a merger, acquisition, or asset sale, subject to continued confidentiality. All third-party providers are bound by data protection agreements.

6. Data Security & Row-Level Isolation

We protect your personal data using industry-standard administrative, technical, and physical safeguards. The platform enforces Row-Level Security (RLS) so that each registered company can only access its own data — no company can view, edit, or delete another company’s records. Sensitive credentials (such as Google Drive OAuth tokens) are encrypted at rest using AES-256-GCM. Data is transmitted over encrypted (TLS/HTTPS) connections.

7. Data Retention

We retain your personal data for as long as your account is active and for the period necessary to fulfill the purposes outlined in this policy. Upon account termination, you may export your data for a period of 30 days, after which it will be permanently deleted from our systems, except where retention is required by UAE tax or legal regulations.

8. Your Rights

Under the PDPL, you have the right to: (a) access the personal data we hold about you; (b) request correction of inaccurate or incomplete data; (c) request deletion of your personal data, subject to legal retention requirements; (d) withdraw consent for processing at any time, which may affect your ability to use the platform; (e) request a copy of your data in a portable format; and (f) object to or restrict certain processing activities. To exercise these rights, contact us through the support channels within the platform.

9. Cookies & Tracking

The platform uses essential cookies to maintain your session and authenticate your access. We may also use analytics cookies to understand platform usage and improve our services. You can control cookie preferences through your browser settings, though disabling essential cookies may affect platform functionality.

10. International Data Transfers

Your data is primarily stored and processed within the United Arab Emirates. Where we use cloud service providers with data centers outside the UAE, we ensure appropriate safeguards are in place — including standard contractual clauses and data protection agreements — to keep your personal data secure and compliant with the PDPL.

11. Children’s Privacy

The PropNexa platform is a business-to-business service intended for property management companies and professionals. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us so we can delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated via email or in-app notification at least 30 days before they take effect. Continued use of the platform after changes are posted constitutes acceptance of the revised policy.

13. Contact

For questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us through the support channels available within the platform or via the contact information provided on our website at propnexa.net.

Back to Home