Privacy Policy

DRAFT: not legal advice. Have a UAE-licensed lawyer review before launch.

Last updated: [date] · Controller: [SnagGO legal entity name], trade license no. [___], [emirate], United Arab Emirates ("SnagGO", "we").

1. What this policy covers

This policy explains what personal data SnagGO collects when you use our website and apps (customers, inspection companies and administrators), why we use it, who we share it with, and your rights. We follow UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

2. What we collect

2.1 Account data: full name, email address, password (stored only as a one-way hash by our sign-in provider; we never see it) and, optionally, mobile number.

2.2 Booking data (customers): full name, email, mobile number with country code, developer name, building, unit number, the developer handover team's email, the chosen property size, date and time slot, and your order history.

2.3 Inspection data: the defects recorded for your unit (location, description, severity), the photos taken during the inspection (including any drawings added to a photo), the report and its status.

2.4 Payment data: the amount paid, the date, the payment method type and, for cards, the card brand and last four digits. Your full card number, expiry and security code are entered on our payment provider's secure page. We never see or store them.

2.5 Company data (inspection companies): company name, area, trade licence and certification details (DED, RERA and InterNACHI numbers and expiry dates), who checked them and when, bank details (IBAN) for payouts, and the jobs a company accepts.

2.6 Enquiries: if you request a call back or leave details without booking, we keep your name, contact details and interest so we can follow up.

2.7 Technical data: your sign-in session, device and browser type, and basic server logs (such as IP address and time) kept by our hosting providers for security and fault finding.

3. Why we use it

• To create your account and let you sign in (contract).
• To arrange, carry out and report on your inspection, including assigning an inspection company and sending the report to you and to the developer handover team (contract and your instructions).
• To take payment, issue tax invoices, and pay inspection companies (contract and legal obligation).
• To contact you about your booking by email, phone, SMS or WhatsApp (contract).
• To verify that inspection companies hold valid licences (legitimate interest and legal obligation).
• To prevent fraud and misuse, keep the service secure, and resolve disputes (legitimate interest).
• To keep records for tax, accounting and legal claims (legal obligation).
• To follow up on enquiries and, where you agree, to send offers. You can opt out at any time.

We do not sell your personal data and we do not use it for automated decisions that have legal effects on you.

4. Who we share it with

4.1 The inspection company assigned to your booking receives your name, mobile, email and the unit details so it can carry out the inspection and contact you (including by phone and WhatsApp).

4.2 The developer's handover team receives your report, photos and unit details at the email you provide, so the developer can see and fix the defects.

4.3 Service providers (processors) that run SnagGO for us, under contract:

• Supabase: database, sign-in and private photo storage (data centre in Mumbai, India).
• Vercel: website hosting.
• Our payment provider ([Stripe / Network International / Checkout.com]): card payments.
• Our email and messaging providers ([to be named]): booking emails and notifications.
• Google Fonts: the website loads fonts from Google, which receives your IP address when the page loads.

4.4 Authorities and advisers where the law requires, or to protect our rights, and our lawyers, auditors and insurers.

4.5 If SnagGO is sold or merges, your data may move to the new owner under the same protections.

5. Transfers outside the UAE

Some providers store or process data outside the UAE, including India (database) and the United States (hosting and payments). We take steps to make sure your data stays protected, including contracts with our providers and, where required, your consent. By using SnagGO you agree to these transfers.

6. How long we keep it

• Account and booking data: while your account is open, and for [5] years after your last booking for accounting and legal claims.
• Photos and reports: for [5] years after the inspection, so you can rely on them in a dispute with the developer.
• Enquiries that do not become a booking: up to [12] months, then deleted.
• Company licence and payout records: for the length of the relationship and [5] years after.

You can ask us to delete your account earlier; we will delete or anonymise everything we are not legally required to keep.

7. How we protect it

• All traffic is encrypted (HTTPS).
• Each person can see only their own data. Customers see only their own orders; companies see only open paid jobs and their own jobs; only administrators see everything. This is enforced in the database, not only in the app.
• Photos are stored privately and shown through short-lived links.
• Text you type cannot contain characters that could be used to inject code into other people's screens.
• Only administrators can change roles, prices and company approvals.

No system is perfectly secure. If a breach affects your data we will tell you and the authorities as the law requires.

8. Your rights

Under the PDPL you may ask us to: give you a copy of your data; correct it; delete it; restrict or object to some uses; move it to another provider; and withdraw consent you gave (this does not affect earlier use). Write to the address in section 12. We reply within [30] days and may ask you to prove who you are. You may also complain to the UAE Data Office.

9. Cookies and local storage

We use only what the service needs: a sign-in session so you stay logged in, and small settings in your browser (for example your dashboard layout). We do not use advertising cookies. If we add analytics later we will update this policy and ask for your consent where required.

10. Children

SnagGO is for adults. We do not knowingly collect data from anyone under 18.

11. Changes

We may update this policy. We will post the new version here with a new date and, for important changes, tell you in the app or by email.

12. Contact

Data protection contact: [name / DPO] · privacy@snaggo.ae · [address]