Privacy policy

1. INTRODUCTION

Realize Capital Properties L.L.C. ("Company," "we," "us," or "our"), the operator of Daleel (دليل), an AI-powered real estate intelligence platform, is committed to protecting the privacy of our users ("User," "you," or "your"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our platform, website, mobile applications, and related services (collectively, the "Platform" or "Services").

The Company is registered in the United Arab Emirates with Trade License Number 1584208 and RERA Registration Number 1584208, with its registered office at Marasi Drive - Citadel Tower - Office 2106 - Business Bay - Dubai, UAE.

For the purposes of the EU General Data Protection Regulation ("GDPR") and applicable UAE data protection legislation, the Company acts as the data controller in respect of the personal data we process through the Platform.

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Platform. This Privacy Policy should be read in conjunction with our Terms of Service.

2. INFORMATION WE COLLECT

We collect information from and about you in several ways, as described below.

2.1 Information You Provide Directly

When you interact with the Platform, you may provide us with the following categories of personal information:

Account Registration Data: When you create an account, we collect your name, email address, and password (stored in encrypted form).

User Queries and Conversations: We collect the queries, prompts, and messages you submit through the AI chatbot interface, as well as the Platform's responses. This conversation history is stored to improve service quality and personalize your experience.

Payment and Billing Information: If you subscribe to a paid tier, we collect payment details necessary to process your transaction. Full payment card details are processed by our third-party payment processor and are not stored on our servers.

Feedback and Survey Responses: Any feedback, reviews, survey responses, or communications you voluntarily submit to us.

Preferences and Settings: Your account preferences, notification settings, and any customizations you configure on the Platform.

2.2 Information Collected Automatically

When you access or use the Platform, we automatically collect certain technical and usage information:

Device Information: Hardware model, operating system and version, unique device identifiers, and mobile network information.

Log and Usage Data: Pages viewed, features accessed, search queries, interaction patterns, time spent on the Platform, referring URLs, and clickstream data.

IP Address: Your Internet Protocol address, which may be used to derive your approximate geographic location.

Browser Information: Browser type and version, language preferences, and installed plug-ins.

Cookies and Similar Technologies: We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing behavior and preferences. See Section 10 (Cookies and Tracking Technologies) for details.

Approximate Location Data: Derived from your IP address or, where you have granted permission, from your device's location services.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

Payment Processors: Transaction confirmations, billing status, and payment method details from our payment service providers.

Analytics Providers: Aggregated usage and demographic data from analytics services integrated into the Platform.

Publicly Available Sources: Information from publicly accessible databases, government registries, and other lawful sources that we may use to supplement our records.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

Providing and Operating the Platform: To deliver the Services, process your queries through the AI chatbot, display market intelligence, and enable core Platform functionality.

Account Management: To create, maintain, and administer your account, authenticate your identity, and manage your subscription.

Payment Processing: To process subscription payments, manage billing cycles, handle refunds, and maintain financial records.

Personalization: To tailor the Platform experience, remember your preferences, and provide relevant market insights based on your usage patterns.

AI Model Training and Improvement: To improve the accuracy, relevance, and quality of AI-Generated Content and the overall performance of the Platform's artificial intelligence systems. Where required by law, your data will be anonymized or aggregated before being used for this purpose.

Analytics and Research: To analyze usage trends, measure the effectiveness of features, conduct research, and generate aggregated, non-personally identifiable statistics about Platform usage.

Security and Fraud Prevention: To detect, investigate, and prevent fraudulent, unauthorized, or illegal activities, protect against security threats, and enforce our Terms of Service.

Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

Communications: To send you service-related notices, respond to your inquiries, and, where you have consented, deliver marketing communications and promotional materials.

Platform Improvement: To develop new features, improve existing functionality, fix bugs, and enhance the overall user experience.

4. Data Security

Given that our data is stored within the European Union (Germany), the GDPR applies to our processing of personal data of individuals in the EU. We also process data in accordance with applicable UAE data protection legislation. Our legal bases for processing your personal data include:

Contractual Necessity (Article 6(1)(b) GDPR): Processing is necessary for the performance of a contract with you, including providing the Platform's services, managing your account, and processing subscription payments.

Legitimate Interests (Article 6(1)(f) GDPR): Processing is necessary for our legitimate interests, provided these are not overridden by your data protection rights. Our legitimate interests include improving and securing the Platform, conducting analytics, preventing fraud, and operating our business.

Consent (Article 6(1)(a) GDPR): Where we rely on your consent, such as for marketing communications, the use of non-essential cookies, and certain data sharing activities. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Legal Obligation (Article 6(1)(c) GDPR): Processing is necessary to comply with legal obligations to which we are subject, including tax reporting, regulatory requirements, and responding to lawful requests from authorities.

Where applicable, we also process personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL") and any implementing regulations issued thereunder.

5. Your Rights and Choices

We do not sell your personal data. We share your information only in the circumstances described below.

5.1 Third-Party Service Providers

We engage trusted third-party companies and individuals to perform services on our behalf. These providers have access to your personal data only to the extent necessary to perform their functions and are contractually obligated to protect your data. Our key service providers include:

5.2 Legal and Regulatory Disclosures

We may disclose your personal data where required to do so by law or in response to valid requests by public authorities (such as a court order, subpoena, or government agency request), or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of the Company, our Users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will provide notice before your personal data becomes subject to a different privacy policy.

5.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so, or at your direction.

5.5 Aggregated and Anonymized Data

We may share aggregated or anonymized data that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes.

6. INTERNATIONAL DATA TRANSFERS

6.1 Primary Data Storage

Your personal data is primarily stored on servers located in Nuremberg and Frankfurt, Germany, within the European Union. This means your data benefits from the protections afforded by the GDPR.

6.2 Transfers Outside the EU

Some of our third-party service providers operate outside the European Economic Area ("EEA"). Where we transfer your data outside the EEA, we ensure that appropriate safeguards are in place, including: European Commission adequacy decisions recognizing the destination country as providing adequate data protection; Standard Contractual Clauses ("SCCs") approved by the European Commission; and other lawful transfer mechanisms recognized under the GDPR.

6.3 UAE Operations

As the Company is incorporated in the United Arab Emirates, certain administrative and operational data may be processed in the UAE. We ensure that any such processing complies with both the UAE PDPL and the GDPR.

7. DATA RETENTION

7.1 General Retention Policy

We retain your personal data for as long as your account is active, as needed to provide you with the Services, and as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. User data, including account information and chat logs, is retained indefinitely unless you request deletion.

7.2 Specific Retention Periods

7.3 Data Deletion

You may request deletion of your personal data at any time by contacting us at contact@realize.capital. Upon receiving a valid deletion request, we will delete or anonymize your personal data within thirty (30) days, except where retention is required by law or for legitimate business purposes (such as fraud prevention or financial record-keeping).

8. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Encryption: Data is encrypted in transit using TLS/SSL protocols and at rest using industry-standard encryption algorithms.

Access Controls: Strict role-based access controls limit access to personal data to authorized personnel who require it for their job functions.

Infrastructure Security: Our hosting infrastructure, managed through Cloudflare, AWS, and Netcup, incorporates firewalls, intrusion detection systems, DDoS protection, and regular security patches.

Security Monitoring: Continuous monitoring of systems for unauthorized access attempts, unusual activity, and potential vulnerabilities.

Incident Response: We maintain an incident response plan to address data breaches promptly. In the event of a breach affecting your personal data, we will notify you and the relevant supervisory authorities as required by applicable law.

Vendor Security: Third-party service providers are evaluated for their security practices and are contractually required to maintain appropriate safeguards.

While we strive to use commercially acceptable means to protect your personal data, no method of electronic storage or transmission over the Internet is completely secure. We cannot guarantee absolute security.

9. YOUR RIGHTS

If you are located in the European Economic Area, you have the following rights regarding your personal data:

Right of Access (Article 15): You have the right to request a copy of the personal data we hold about you, along with information about how we process it.

Right to Rectification (Article 16): You have the right to request correction of inaccurate personal data and completion of incomplete personal data.

Right to Erasure (Article 17): You have the right to request deletion of your personal data in certain circumstances, including where the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing (Article 18): You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability (Article 20): You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to Object (Article 21): You have the right to object to processing based on legitimate interests, including profiling, and to object to processing for direct marketing purposes.

Rights Related to Automated Decision-Making (Article 22): You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. See Section 12 for more information.

9.2 Rights Under UAE Law

Under the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and its implementing regulations, you may have the following rights: the right to access your personal data; the right to request correction of inaccurate data; the right to request deletion or destruction of data; the right to withdraw consent; the right to restrict or stop processing of your data; the right to request transfer of data to another controller; and the right to object to decisions based solely on automated processing.

9.3 Exercising Your Rights

To exercise any of these rights, please contact us at contact@realize.capital. We will respond to your request within thirty (30) days, or within the timeframe required by applicable law. We may request verification of your identity before processing your request. The exercise of these rights is free of charge, except where requests are manifestly unfounded or excessive.

10. COOKIES AND TRACKING TECHNOLOGIES

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites function efficiently, provide information to site owners, and enhance the user experience.

10.2 Types of Cookies We Use

10.3 Third-Party Cookies

Certain cookies are placed by third-party service providers that we use, including Cloudflare for security and performance optimization, and analytics providers for usage measurement. These third parties may collect information about your online activities over time and across different websites.

10.4 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, view cookies stored on your device, and set preferences for certain types of cookies. Please note that disabling essential cookies may impair Platform functionality. For more information about cookie management, please refer to your browser's help documentation.

10.5 Do Not Track

Some browsers offer a "Do Not Track" ("DNT") setting. There is currently no universally accepted standard for how companies should respond to DNT signals, and we do not currently respond to DNT signals.

11. CHILDREN'S PRIVACY

The Platform is not designed for or directed at children under the age of thirteen (13), or the applicable minimum age in your jurisdiction. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take reasonable steps to delete such data promptly. If you believe that we may have collected information from a child, please contact us at contact@realize.capital.

12. AI AND AUTOMATED PROCESSING

12.1 How We Use AI

Daleel's core functionality is powered by artificial intelligence, including large language models provided by Anthropic (Claude). When you interact with the Platform, your queries are processed by these AI systems to generate responses, market analyses, and real estate intelligence.

12.2 Data Processing by AI

Your queries and conversation context are transmitted to our AI service providers for processing. We implement data handling agreements with these providers to ensure your data is protected. AI responses are generated based on your query, the available real estate datasets, and the model's training, and may not always be accurate or complete.

12.3 Automated Decision-Making

The Platform does not make fully automated decisions that produce legal effects or similarly significantly affect you without human oversight. All AI-generated market analyses, valuations, and insights are provided for informational purposes only and should not be relied upon as the sole basis for any decision with legal or financial consequences.

12.4 Your Rights Regarding AI Processing

You have the right to: obtain meaningful information about the logic involved in AI processing of your data; request human review of any output you believe to be materially inaccurate; object to profiling or automated processing under applicable law; and request that your conversation data not be used for AI training purposes (subject to anonymization limitations).

13. MARKETING COMMUNICATIONS

13.1 Opt-In Consent

We will only send you marketing and promotional communications where you have provided your prior opt-in consent. You may be asked to consent to marketing communications during account registration or at other points during your use of the Platform.

13.2 Unsubscribe

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in any marketing email, adjusting your communication preferences in your account settings, or contacting us at contact@realize.capital. Please note that opting out of marketing communications does not affect transactional or service-related messages.

13.3 Service Communications

We may send you non-promotional communications related to your account and use of the Platform, including security alerts, subscription confirmations, payment receipts, and important service updates. These communications are not subject to marketing opt-out preferences.

14. THIRD-PARTY LINKS AND SERVICES

The Platform may contain links to third-party websites, applications, or services that are not owned or controlled by the Company. This Privacy Policy applies only to the Platform. We are not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Platform.

Property listing data displayed on the Platform originates from third-party sources, including Property Finder and Bayut. Your interaction with listings or listed brokers and agents is governed by the terms and privacy practices of those respective platforms.

15. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated policy on the Platform with a revised "Last Updated" date, sending an email notification to the address associated with your account, and displaying a prominent notice on the Platform.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Privacy Policy, you should discontinue use of the Platform and request deletion of your data.

16. CONTACT INFORMATION

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: contact@realize.capital

Address: Marasi Drive - Citadel Tower - Office 2106 - Business Bay - Dubai, UAE

Trade License: 1584208

RERA Registration: 1584208

We aim to respond to all privacy-related inquiries within thirty (30) days of receipt.

17. SUPERVISORY AUTHORITY

If you are located in the European Economic Area and believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. Given that our servers are located in Germany, you may also contact the German Federal Commissioner for Data Protection and Freedom of Information (Bundesbeauftragter für den Datenschutz und die Informationsfreiheit, or BfDI).

If you are located in the United Arab Emirates, you may contact the UAE Data Office established under the UAE PDPL for complaints regarding the processing of your personal data.

We encourage you to contact us first at contact@realize.capital so that we may address your concerns directly.

© 2026 Realize Capital Properties L.L.C. All rights reserved.
Daleel is a registered trademark of Realize Capital Properties L.L.C.

Contact: contact@realize.capital
Address: Marasi Drive - Citadel Tower - Office 2106 - Business Bay - Dubai, UAE
Trade License: 1584208 | RERA Registration: 1584208