Privacy Policy

Your Privacy Matters

TijarHub ("we," "us," or "our") operates the TijarHub.ae marketplace. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and related services (collectively, the "Service").

The Service is intended for business users aged 18 and over. We do not knowingly collect personal data from minors.

Please read this Privacy Policy carefully. By accessing and using TijarHub, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy. If you do not agree with our practices, please do not use our Service.

Quick Summary (TL;DR)

• We collect information you provide directly (name, email, business details) and data about how you use TijarHub.
• We use your data to operate the marketplace, improve our service, and connect entrepreneurs with properties.
• We share your information only with property listing partners, service providers, and when legally required.
• Your data is protected with industry-standard encryption and security measures.
• You have rights to access, correct, and request deletion of your personal data.
• We comply with UAE data protection laws and international standards.

What Information We Collect

1. Information You Provide Directly

We collect information you voluntarily provide:

• Account Registration: Name, email address, and an optional phone number.
• Business Profile: Company name, industry, business stage, budget range, space requirements, and timeline.
• Property Inquiries: Details about your space search, preferences, budget, and specific property interests.
• Communications: Messages exchanged with our AI concierge and any follow-up correspondence with our team or partner brokers.
• Feedback & Support: Customer service inquiries, complaints, feedback, and survey responses.

2. Information Collected Automatically

We automatically collect certain information about your interaction with the Service:

• Device Information: Device type, operating system, browser, and screen size.
• Usage Data: Pages visited, time spent on TijarHub, properties viewed, search queries, clicks, and scroll depth.
• Location Data: Approximate location inferred from your IP address only. We do not collect precise GPS data.
• Log Data: IP address, browser type, referring URL, pages accessed, and timestamps.
• Cookies & Similar Technologies: See our Cookie Policy for the full list.

3. Information from Third Parties

• Property Partners: Information shared by brokers, agents, and landlords about properties and your inquiries.
• Service Providers: Analytics, communication, and infrastructure platforms listed below in "Who We Share Your Data With".
• Public Sources: Publicly available business information, real estate data, and market research.

How We Use Your Information

We use the information we collect for the following purposes:

Core Service Functions

• Create and maintain your TijarHub account.
• Match you with relevant commercial real estate properties.
• Facilitate connections between you and property landlords or agents.
• Process transactions, payments, and quotes.
• Respond to your inquiries and provide customer support.

Service Improvement & Analytics

• Understand how users interact with TijarHub.
• Identify trends and patterns in commercial real estate demand.
• Improve search algorithms and property matching.
• Personalize your experience and recommendations.
• Test new features and optimize performance.

Marketing & Communications

• Send promotional emails about relevant properties, updates, and features (with an opt-out option).
• Conduct market research and surveys.
• Send transactional emails (confirmations, notifications, alerts).

Legal & Compliance

• Comply with legal obligations and government requests.
• Detect, prevent, and address fraud and security issues.
• Enforce our Terms of Service and other agreements.
• Protect the rights, property, and safety of TijarHub, our users, and the public.

Legal Basis for Processing under UAE PDPL

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), we process your data on the following bases:

We will not process your personal data for purposes beyond those listed without first obtaining your explicit consent.

Who We Share Your Data With

We share your information only in limited circumstances:

1. Property Landlords & Agents

At the end of the prequalification flow, we ask whether you would like a commercial real estate specialist to follow up. We only share your contact details (name, email, optional phone) and qualified search requirements with relevant brokers, landlords, or freezones after you give explicit in-product consent. If you decline, your contact information is not shared.

2. Service Providers

We rely on a small number of carefully selected sub-processors to operate the Service:

• Supabase: Authentication, database, and file storage backend.
• Amazon Web Services (AWS): Application hosting (Amplify), object storage (S3), and content delivery (CloudFront).
• Google Gemini API: AI reasoning for the concierge chat and prequalification flow (see "AI Processing & International Transfers" below).
• Amazon Bedrock: Generation of search embeddings for semantic property matching.
• Resend: Sending transactional and notification emails.
• Google Tag Manager: Loading analytics tags (such as Google Analytics 4) only after you grant consent via our cookie banner.

3. Legal & Regulatory Requirements

We may disclose your information if required by law, court order, or government request, or if we believe in good faith that disclosure is necessary to:

• Comply with applicable laws or regulations.
• Respond to lawful government requests.
• Enforce our Terms of Service and other agreements.
• Protect our legal rights or property.

4. Business Transfers

If TijarHub is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your data.

5. Aggregated & De-Identified Data

We may share aggregated, anonymized data (that cannot identify you) with partners for market research, analytics, and business development purposes.

AI Processing & International Transfers

How AI is used

TijarHub's concierge experience is powered by large language models. To provide the Service, the following content is sent to our AI sub-processors:

• The messages you type into the chat, including your business requirements and search criteria, are sent to Google Gemini and/or Amazon Bedrock to interpret intent, and generate replies.
• We do not use your conversations to train any third-party AI model. We only use the providers' inference APIs.

Where your data is processed

Some of our sub-processors operate infrastructure outside the United Arab Emirates. By using the Service, you understand that your personal data may be transferred to and processed in:

• European Union — primary AWS and Supabase regions for application hosting and the database.
• United States — Google Gemini API processing and certain Resend infrastructure.

For these transfers we rely on the safeguards permitted under Article 22 of the UAE PDPL, including contractual commitments with our sub-processors and equivalent-protection assessments. If you would like more detail on a specific transfer, contact us at privacy@tijarhub.ae.

How We Protect Your Data

We implement comprehensive security measures to protect your personal information:

Technical Safeguards

• Encryption: TLS/SSL encryption for all data in transit and encryption at rest for sensitive data.
• Access Controls: Role-based access; employees have access only to data necessary for their role.
• Regular Audits: Periodic security assessments and penetration testing.
• Monitoring: Logging of access attempts and anomaly detection.

Organizational Safeguards

• Confidentiality agreements with all employees and service providers.
• Data protection training for all staff members.
• Incident response plan and regular backup procedures.
• Alignment with industry best practices for SaaS security.

Data Breach Notification

In the unlikely event of a data breach, we will notify affected users within 72 hours (or as required by law) of discovering the breach, along with information about:

• What data was compromised.
• Steps we are taking to remediate the situation.
• What you can do to protect yourself.
• How to contact us with questions.

Your Privacy Rights

You have the following rights regarding your personal data:

1. Right to Access

You have the right to request a copy of the personal data we hold about you. Contact us at privacy@tijarhub.ae with your request.

2. Right to Correction

You can update, correct, or modify inaccurate information in your account profile at any time by logging into your account or contacting us.

3. Right to Erasure ("Right to Be Forgotten")

You may request deletion of your account and associated personal data. We will comply unless we have a legal obligation to retain the data. Certain data may be retained for compliance, fraud prevention, or legal claims.

4. Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances, such as while we verify your request to correct inaccurate data.

5. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format (e.g., CSV) and transmit it to another service.

6. Right to Opt-Out of Marketing

You can unsubscribe from promotional emails at any time by clicking the "Unsubscribe" link in our emails or updating your communication preferences in your account settings.

7. Right to Withdraw Consent

If we process your data based on consent, you can withdraw that consent at any time. This does not affect data processed before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please contact us:

• Email:privacy@tijarhub.ae
• Mail: TijarHub Legal Department, Dubai, UAE.
• Account Settings: Manage preferences directly in your account.

We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

How Long We Keep Your Data

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy.

After the retention period, data is securely deleted or permanently anonymized. Some data may be retained longer if required by law.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact our privacy team:

Escalation & Regulatory Complaints

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the relevant data protection authority:

• UAE Data Office — established under Federal Decree-Law No. 45 of 2021, for residents of the UAE.
• Local Data Protection Regulators — in your country of residence, where applicable.