Data Handling
Account

Data Handling & RERA Stance

Effective 18 May 2026

Our position

  • We are a software platform for licensed brokers. We are not a brokerage, are not RERA-licensed, and do not advise on or execute transactions ourselves.
  • We do not sell your data, your contacts' data, or any data about your transactions. Ever.
  • We do not share data with other tenants on the platform. Each brokerage and each agent operates in a scoped workspace.
  • We are not affiliated with, endorsed by, or operating on behalf of RERA, the DLD, Bayut, PropertyFinder, Dubizzle or any other listed third party.

How broker data is scoped

Every database query is scoped by the signed-in user's ID, and cross-user reads are blocked at the application layer (and increasingly at the database layer via row-level security). A broker on one brokerage cannot see another brokerage's contacts, listings, deals or messages.

Sensitive PII

Contact phone numbers and email addresses are stored encrypted at rest and indexed using a blind index for matching, so the platform can deduplicate without storing plain-text PII in additional places.

Deletion requests

Anyone whose details appear in a broker's contact list — whether the broker themselves or one of their leads — may request deletion of their personal data by emailing privacy@nelkins.app. We process deletion requests within 30 days. If the requester is a lead of a broker on the platform we will:

  • Verify the identity of the requester.
  • Notify the broker so they have the opportunity to retain a legally required record where one exists (e.g. for an in-flight transaction).
  • Remove personal data on completion, except where retention is required by law.

WhatsApp and email consent

Brokers using the platform are responsible for having appropriate consent before adding a contact and sending automated messages. WhatsApp Business Cloud API sends are subject to Meta's policies on opt-in and template categories. Email blasts must comply with UAE Federal Decree-Law on personal data protection and applicable anti-spam laws.

Audit trail

Significant actions (sends, exports, role changes, deletions) are recorded in an activity log scoped to the broker's workspace, so the brokerage has a defensible record of what was done by whom and when.

Reporting concerns

Security or privacy concerns: security@nelkins.app