How we handle personal data

Bricks PM provides property-management software to real estate agencies in the United Arab Emirates. For any privacy question, data request or security disclosure, contact privacy@brickspropertymanager.com.

Agencies using Bricks PM decide what tenant and landlord data is entered and why. They are the controller of that data. We process it on their instructions, as their processor. If you are a tenant or a landlord, your agency is your first point of contact, and we support them in answering you.

For agency staff: name, email, phone, role, and sign-in records.

For tenants and landlords: name, contact details, Emirates ID or passport number, tenancy and ownership records, payment and cheque records, and documents uploaded by the agency such as tenancy contracts, title deeds and identity documents.

To run the service the agency has asked us to run: tenancy contracts and renewals, Ejari registration, cheque tracking, maintenance, statements and notifications. We do not sell personal data, and we do not use it to advertise to anyone.

On Amazon Web Services infrastructure in Frankfurt, Germany. This means personal data is transferred outside the UAE. If AWS reopens its UAE region to new deployments, we intend to move, and this page will be updated when that happens.

• Amazon Web Services, for database, storage and infrastructure.
• Vercel, for application hosting.
• Resend, for sending email.
• Twilio, for WhatsApp notification delivery.
• Sentry, for error reporting. Page content is masked before it is sent, but Sentry may receive technical information such as the address of the page an error happened on.
• Google Maps, for property address autocomplete.
• Stripe, for agency subscription billing, once paid plans are live.

We keep the data an agency enters for as long as that agency’s workspace is open, because the service needs it to work. Deleting a record hides it immediately, and it can be restored if the deletion was a mistake. To have personal data permanently erased, ask us and we will do it. If an agency closes its workspace, we will provide an export and erase its data on request. Some records we are required to keep for longer under UAE law, including VAT records, which we keep for five years.

Under UAE Federal Decree-Law No. 45 of 2021 you may ask what data we hold about you, ask for it to be corrected, ask for it to be deleted, ask for a copy in a portable format, and object to certain processing. Ask your agency, or write to privacy@brickspropertymanager.com. You may also complain to the UAE Data Office.

Personal data is encrypted in transit and at rest, and access is limited to the agency it belongs to.

If we change this policy we will update the date above.