Global Privacy Policy

1. Introduction and Scope

Welcome to [abuda.com] ("we," "us," or "our"). We are a leading real estate technology platform utilizing advanced data analytics and Artificial Intelligence to provide property valuations, market insights, and portfolio management services.

This Privacy Policy explains how we collect, process, use, and protect your personal information when you interact with our website, mobile applications, and professional services across Europe, Israel, and the Middle East (including the UAE and Dubai). We are committed to a "Privacy by Design" approach, ensuring that your data is handled with the highest level of integrity and in accordance with global regulations such as the General Data Protection Regulation (GDPR), Israel's Privacy Protection Law (Amendment 13), and the UAE Federal Decree-Law No. 45 of 2021 (PDPL).

2. The Data Controller and Contact Information

The entity responsible for your personal data is abuda.com, located at HaHarash St 20, Tel Aviv-Jaffa, Israel.

To ensure the highest standards of protection, we have appointed a Data Protection Officer (DPO) who oversees our global privacy strategy. For any inquiries or to exercise your rights, please contact our privacy team at:

Email: hello@abuda.com

Mailing Address: HaHarash St 20, Tel Aviv-Jaffa, Israel.

3. Categories of Personal Data We Collect

We collect information that identifies or relates to an identifiable natural person ("Personal Data"). This includes:

• Identifiers: Name, email address, telephone number, and postal address.
• Professional and Financial Information: Job title, company name, and payment information for our subscription services.
• Property and Geolocation Data: Precise property addresses, ownership details (sourced from public registries like DLD/RERA), and GPS coordinates if you enable location services.
• Digital Identifiers: IP addresses, browser types, device IDs, and online activity collected through cookies and tracking pixels.
• AI Interaction Data: Logs of your interactions with our automated valuation models (AVMs), chatbots, and predictive analytics tools.

4. Purposes and Legal Basis for Processing

We process your data based on the following legal frameworks:

• Performance of a Contract: To provide our PropTech services, manage your account, and process transactions.
• Informed Consent: For marketing communications, the use of certain cookies, and processing of "especially sensitive" data.
• Legitimate Interests: To improve our AI models, enhance website security, and conduct market research.
• Legal Obligation: To comply with tax laws, anti-money laundering regulations, and real estate transparency requirements (e.g., RERA/DLD compliance in Dubai).

5. Artificial Intelligence and Automated Decision-Making

6. Data Sharing and Third-Party Disclosure

We do not sell your personal data. We only share information with:

• Service Providers: Cloud hosting (e.g., AWS/AzureStack), payment processors, and analytics partners who are contractually bound to protect your data.
• Real Estate Authorities: Government bodies such as the Dubai Land Department (DLD) and RERA for transaction verification and QR code compliance.
• Legal Compliance: Law enforcement or regulatory bodies when required by a valid court order or statutory obligation.

7. International Data Transfers

Operating across Europe, Israel, and the Middle East requires your data to be transferred across borders. We ensure that such transfers are protected by:

• Adequacy Decisions: Transfers between the EU and Israel are protected by mutual adequacy recognitions.
• Standard Contractual Clauses (SCCs): We implement EU-approved SCCs for transfers to jurisdictions without an adequacy decision.
• Data Localization: Certain sensitive real estate and financial data in the UAE may be stored locally in accordance with sector-specific regulations.

8. Data Security and Retention

We implement industry-standard security protocols, including AES-256 encryption for data at rest and TLS 1.2+ for data in transit. For large-scale databases, we conduct mandatory penetration tests and risk assessments every 18 months as required by Israeli law.

We retain your data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory retention periods (e.g., 7 years for financial records or 25 years for specific health-related data in some jurisdictions).

9. Your Global Privacy Rights

Depending on your location, you may exercise the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request the deletion of your data when it is no longer required.
• Right to Restriction & Objection: Object to processing for direct marketing or restrict processing in specific scenarios.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Withdraw Consent: Revoke your consent at any time without affecting the lawfulness of previous processing.

We will respond to all valid requests within 30 days at no cost to you.

10. Children’s Privacy

Our services are intended for adults. In accordance with the UAE Child Digital Safety Law (2025) and the GDPR, we do not knowingly collect or process data from individuals under the age of 18 without explicit parental consent.

11. Changes to this Policy

We may update this policy periodically to reflect changes in technology or law. Significant changes will be communicated via our website or email.