Privacy Policy

Valid8.ae ("Platform", "we", "us", "our") is owned and operated by FIKA TECHNOLOGIES - FZCO, a free zone company established under the laws of the United Arab Emirates, holding Trade Licence No. 10731, registered with the Dubai Integrated Economic Zones Authority (DIEZ).

Registered Address: Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates

We provide an AI-powered real estate compliance and transaction management platform for UAE-based real estate agents, brokerages, and property developers. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE Data Protection Law") and applicable DIFC/ADGM data protection regulations where relevant.

We collect the following categories of personal data:

• Account Information: Full name, email address, phone number, professional licence numbers (RERA, ADREC, DED), brokerage or developer affiliation, and job title.
• Buyer/Seller Client Data: Full name, nationality, Emirates ID number, passport details, visa status, date of birth, marital status, employment details, income information, existing liabilities, source of funds, and property preferences — entered by agents or collected via Platform intake forms.
• Property and Transaction Documents: Title deeds, RERA/ADREC project registration certificates, developer authorisation letters, reservation and booking forms, SPAs, NOCs, trade licences, and other documents uploaded for storage and compliance tracking.
• Financial Documents: Bank statements, proof of funds letters, mortgage offer letters, and payment/milestone receipts uploaded for tracking and calculator use.
• Usage Data: IP address, browser type, device information, pages visited, feature usage, and session analytics.
• Communication Records: Messages, notes, and case activity logs exchanged or recorded within the Platform.
• Transaction Data: Case pipeline status, compliance gate statuses, commission figures, milestone schedules, and handover dates.

We process your personal data on the following lawful bases under UAE Data Protection Law:

• Contractual Necessity: To provide the Platform services you have subscribed to or requested.
• Consent: Where you have provided explicit consent, such as for marketing communications or optional AI-powered features.
• Legitimate Interest: To improve our services, detect fraud, and ensure platform security.
• Legal Obligation: To comply with UAE real estate regulations, anti-money laundering (AML) requirements, and RERA/ADREC/DLD/DMT directives.

• Provide, maintain, and improve the Platform and its features.
• Process documents to extract data, populate compliance gates, and auto-fill reservation and booking forms.
• Track compliance gate status, payment milestones, and handover dates across property transactions.
• Facilitate role-based access between Agents, Company Owners, Developers, and Data Mappers.
• Send transactional notifications (case updates, document requests, milestone and handover reminders).
• Generate compliance summaries, audit trail exports, and calculator outputs.
• Provide customer support and respond to enquiries.
• Comply with UAE regulatory and legal obligations.
• Detect and prevent fraud, abuse, and security threats.

Documents uploaded to Valid8 are processed by AI systems for the purpose of data extraction and compliance gate population. Important information about AI processing:

• Document content is transmitted to AI providers solely for processing and is not used to train AI models.
• Extracted data is stored securely within the Platform's encrypted database.
• AI-extracted data, compliance statuses, and calculator outputs (including loan pre-qualification and ROI estimates) are advisory only and do not constitute legal, financial, or regulatory advice or guarantee any transaction outcome.
• Agents and users remain responsible for verifying all AI-extracted information before relying on it.

We do not sell your personal data. We may share data with:

• AI Processing Providers: For document analysis and data extraction.
• Infrastructure Providers: Cloud hosting and database services for Platform operation.
• Email Service Providers: For transactional and notification emails.
• Developer Users: Where a case involves their project, limited to the role-scoped documents and status relevant to their part of the transaction (e.g. NOC issuance, KYC approval confirmation) — never full buyer financial or personal data beyond what their role requires.
• Regulatory Authorities: When required by UAE law, RERA/ADREC/DLD/DMT directives, or court order.
• Banks: Only when an agent or buyer explicitly submits information to a specific bank as part of a financing step.

Your data may be processed in jurisdictions outside the UAE, including the United States and the European Union (for AI and infrastructure services). In accordance with UAE Data Protection Law, we ensure appropriate safeguards are in place for all international data transfers, including contractual clauses with data processors requiring equivalent levels of protection, encryption of data in transit and at rest, and minimisation of data transferred to only what is necessary for the specific processing purpose.

We retain personal data in accordance with the following principles:

• Active Accounts: Data is retained for the duration of your active subscription or account.
• Property Transaction Records: Retained for a minimum period as required by UAE real estate and financial regulations (typically 5-10 years).
• Usage Logs: Retained for up to 24 months for security and analytics purposes.
• Deleted Accounts: Personal data is anonymised or deleted within 90 days of account closure, except where legal retention obligations apply.

Under UAE Data Protection Law, you have the following rights:

• Right of Access: Request a copy of personal data we hold about you.
• Right of Rectification: Request correction of inaccurate or incomplete data.
• Right of Erasure: Request deletion of your data, subject to legal retention requirements.
• Right to Restrict Processing: Request limitation of processing in certain circumstances.
• Right to Data Portability: Receive your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Withdraw previously given consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at privacy@valid8.ae. We will respond within 30 days.

We implement industry-standard security measures to protect your personal data, including:

• TLS 1.3 encryption for all data in transit.
• AES-256 encryption for data at rest.
• Role-based access controls (RBAC) with row-level security policies, including project-scoped restrictions for Developer accounts.
• Multi-factor authentication (MFA) for account protection.
• Regular security audits and vulnerability assessments.
• Private storage buckets with authenticated access for sensitive documents.
• Rate limiting and input sanitisation to prevent abuse.

The Platform uses essential cookies for session management and authentication. We may also use analytics tools to understand usage patterns. We do not use third-party advertising cookies. You can manage cookie preferences through your browser settings.

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-Platform notification at least 14 days before taking effect. Continued use of the Platform after changes constitutes acceptance of the updated policy.

For privacy-related enquiries, data subject requests, or complaints:

Data Protection Officer
FIKA TECHNOLOGIES - FZCO
Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates
Email: privacy@valid8.ae

If you are unsatisfied with our response, you may lodge a complaint with the UAE Data Office established under Federal Decree-Law No. 44 of 2021.