Privacy Policy

Thaman (thaman.ae) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our real estate price estimation service. By using Thaman, you consent to the data practices described in this policy.

Account Information: • Name, email address, and phone number (provided during registration) • Authentication provider (Google, email, or phone) • Account preferences (language, unit system, dark mode) Usage Data: • Property search history (district, property type, layout, results) • Price alert configurations • Report generation history Payment Information: • Transaction records (amount, plan type, date) • Payment is processed by Stripe — we do not store your credit card numbers, CVV, or full card details on our servers Technical Data: • Browser type and version • Device type • IP address (for rate limiting and security) • Timestamps of access

We use your information to: • Provide property price estimates and market analysis • Maintain your search history and saved alerts • Process payments and manage your subscription • Send price alert notifications when thresholds are met • Generate and store PDF reports • Improve our estimation algorithms using anonymized, aggregated data • Prevent fraud and enforce our Terms of Service • Respond to your inquiries and provide support We do not sell, rent, or trade your personal information to third parties for marketing purposes.

Thaman uses browser localStorage (not traditional cookies) to store: • Your language preference • Dark mode / light mode setting • SQM / SQFT unit preference • Authentication session tokens • CSRF security tokens These are stored locally on your device and are not transmitted to third parties. You can clear this data at any time through your browser settings, though this will reset your preferences and require re-authentication.

We use the following third-party services: Firebase Authentication (Google): • Handles user sign-in and identity verification • Privacy policy: https://firebase.google.com/support/privacy Stripe: • Processes all payment transactions • PCI DSS compliant — your card data is handled securely by Stripe • Privacy policy: https://stripe.com/privacy Abu Dhabi Real Estate Centre (ADREC): • Source of property transaction data used in estimates • Only publicly available transaction records are used We do not use third-party analytics, advertising, or tracking services.

We implement appropriate security measures to protect your data: • All data is transmitted over HTTPS/TLS encryption • Database encryption for sensitive data • Rate limiting to prevent abuse • CSRF protection on all state-changing requests • Content Security Policy (CSP) headers • Regular security reviews While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

We retain your data as follows: • Account information: retained as long as your account is active • Search history: retained indefinitely for your reference (you can delete individual entries) • Payment records: retained for 7 years as required by UAE financial regulations • Generated PDF reports: retained for 12 months, then automatically deleted • Technical logs: retained for 90 days Upon account deletion, your personal data is permanently removed within 30 days, except where retention is required by law.

You have the right to: • Access your data: View all information we hold about you through your account dashboard • Delete your account: Request permanent deletion of your account and associated data by contacting [email protected] • Export your data: Download your search history and account information • Correct your data: Update your profile information at any time through account settings • Opt out of emails: Disable alert and marketing emails in your account settings • Delete search history: Remove individual or all search history entries from your dashboard To exercise any of these rights, contact us at [email protected] or use the relevant feature in your account settings.

Thaman is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete that information.

Thaman operates from servers located in Europe (Helsinki, Finland). Your data may be processed in jurisdictions outside of the UAE. We ensure appropriate safeguards are in place for any international data transfers in accordance with applicable data protection laws.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Significant changes will be communicated via email to registered users. Continued use of Thaman after changes are posted constitutes acceptance of the updated policy.

For privacy-related inquiries, data requests, or concerns: Email: [email protected] Website: thaman.ae Seller: Thaman.ae, Abu Dhabi, United Arab Emirates We aim to respond to all privacy inquiries within 7 business days.