Privacy Policy

1. Information we collect

• Account data: name, email, and authentication identifiers when you sign up via Supabase Auth (including Google sign-in if enabled).
• Property & analysis data: deal inputs (city, society, prices, optional map coordinates), AI reports, portfolio assets, and usage counters.
• Payment data: subscription status and Stripe customer IDs. Card numbers are collected and processed by Stripe; we do not store full payment card details on our servers.
• Technical data: device/browser type, IP address, cookies required for session security, and error logs for reliability.

2. How we use your information

• Provide and improve deal analysis, market intelligence, portfolio tracking, and saved reports.
• Process subscriptions, invoices, and billing events through Stripe.
• Authenticate users, enforce plan limits, and prevent abuse.
• Send service-related communications (e.g., account or billing notices).
• Comply with legal obligations and protect the security of our platform.

3. Third-party services

We share data only as needed with trusted processors that help us operate the service:

• Stripe — payment processing and subscription management (see Stripe's Privacy Policy).
• Supabase — authentication, database hosting, and row-level security for user data.
• OpenAI — server-side processing of anonymized deal context to generate investment narratives (API keys are never exposed to the browser).
• Google Maps — optional location search when you enable map features (subject to Google's policies).

4. Data storage & retention

Cloud data is stored in Supabase (PostgreSQL) with row-level security so users can only access their own records where applicable. Analyses may also be cached locally in your browser for guest or offline-style use.

We retain account and billing records as long as your account is active and as required for tax, fraud prevention, and legal compliance. You may request deletion of your account data by contacting us.

5. Cookies

We use essential cookies and similar technologies for authentication sessions and security. We do not use third-party advertising cookies. You can control cookies through your browser settings; disabling essential cookies may prevent sign-in.

6. Your rights

• Access, correct, or delete personal data associated with your account.
• Export your analyses and portfolio where the product provides export features.
• Withdraw consent for optional features (e.g., map location tagging).
• Cancel subscriptions at any time via Stripe Customer Portal or by contacting support.

7. Security

We use industry-standard practices including HTTPS, server-side API keys, Supabase RLS policies, and least-privilege access. No method of transmission over the Internet is 100% secure; we cannot guarantee absolute security.

8. International users

Our service is designed for Pakistan real estate markets. If you access the service from outside Pakistan, you understand that data may be processed in regions where our subprocessors operate.

9. Children

The service is not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated date. Continued use after changes constitutes acceptance of the updated policy.