Privacy policy

What we collect, why, who we share it with, how long we keep it and how you take back control of it.

Data controller

DECRYPTE IMMO LLC, Dubai Silicon Oasis, Dubai, United Arab Emirates. For any question or request about your data: info@dubaidecrypte.com.

Account

Creating an account records your first name and email address. Authentication is handled by Netlify Identity, which also sends address confirmation and password reset emails. Passwords are handled by that authentication service; the publisher has no access to them and never adds them to any mailing list. Account access is verified server-side.

Progress and watchlist

The identifiers of lessons whose quiz you pass, and the areas you choose to follow, are stored in your account so you find them again after signing in. These are explicit actions on your part, not tracking of what you read.

Simulations, files and notes

Your profile, analyses, checklist and notes are first stored on your device, in a space separated by account. From My analyses and My costed project you may choose to send a private copy to your account, hosted in Netlify Blobs. That backup is manual: it does not run on every keystroke. You can load it, export it or clear it at any time.

This content is never passed to an agent, developer or introducer. On a shared device, clear it after use.

Educational search assistant

When you ask the assistant a question, the text of your question is sent to the model provider through Netlify’s AI gateway, in order to select passages that have already been written and approved. The assistant does not write free-form answers: it chooses among existing passages.

We do not keep the text of your questions. Only a usage counter is stored, to enforce daily limits. Do not put sensitive information in your questions.

Newsletter and forms

Newsletter sign-up is optional and separate from the account; you can change it in My account. The public form sends your address, your consent and a general source to Netlify Forms.

Enquiry and feedback forms send your first name, address, message, enquiry type and an acquisition source. They are used only to answer you. They trigger neither newsletter nor payment.

Payment

Payments are handled by Stripe. Card details are entered with Stripe and never pass through our servers. We keep the transaction reference, the product purchased, the date and the amount, to justify your access and meet our accounting obligations.

Technical logs

Our technical providers record the logs needed to operate and secure the service, including IP address and request timestamps.

Private Office enquiries

The brief sends your contact details, indicative budget, timeframe and search requirements to Dubai Décrypte to handle your enquiry. Saved references are attached only with your consent. No file documents or figures are automatically sent. To amend or delete an enquiry, email info@dubaidecrypte.com with its reference.

Legal bases

Performance of the contract for the account, paid access and the backups you request. Consent for the newsletter and the optional usage measurement. Legitimate interest for security, abuse prevention and usage limits. Legal obligation for accounting retention.

What we do not do

No advertising pixel, no behavioural profiling for marketing, no sale or rental of data. Accounts and simulations are not shared with property agents. No automatic marketing sending is configured in this version.

Recipients and processors

Netlify, Inc. : hosting, authentication, backup storage, forms and the AI gateway. Stripe : payment and billing. Microsoft : delivery of transactional emails from our address. OpenAI, through the Netlify gateway, passage selection for the assistant. Google : web font delivery.

These providers act on our instructions and only for the purposes described here.

Transfers outside the European Union

Several of these providers are established in the United States, and the publisher is established in the United Arab Emirates. Your data may therefore be processed outside the European Union, on the basis of the contractual safeguards those providers offer. You may ask us for details of the safeguards that apply.

Retention

Account and associated content: kept while the account exists, then deleted after 36 months of inactivity, or immediately on your request.

Enquiries sent through forms: 3 years. Proof of newsletter consent: 3 years after consent is withdrawn. Accounting records tied to a purchase: 10 years, as required by accounting rules.

The text of questions asked of the assistant: not kept.

Storage on your device

The site uses browser storage to keep your work in progress, your language and your display preferences. That storage stays on your device. It is not used for advertising. No advertising cookie and no third-party analytics tracker is set.

The French and English versions share the same origin and the same account-linked keys: switching language neither duplicates nor translates your data.

Optional usage measurement

You may allow action counters linked to your account, without the figures or notes in your files. This measurement is off by default, separate from any commercial contact, and can be turned off with the counters erased.

Your rights

You have rights of access, rectification, erasure, restriction, objection and portability, and you may withdraw consent at any time.

Some of these you exercise directly in your account area: export your files, clear the copy stored in your account, erase local data, change your preferences. For the rest, write to info@dubaidecrypte.com; we reply within one month. If you live in the European Union, you may lodge a complaint with your national data protection authority.

Security

Access to paid content is verified server-side on every request; reserved content is not served to someone without the entitlement. Traffic is encrypted in transit. No system is infallible, so please use a password unique to this site.

Minors

The service is not aimed at minors and is not intended to collect their data.

Changes

This policy may change. The last update date appears at the foot of this document.

Last updated: 2026-09-20.