LEGAL
Privacy Policy
Last updated 25 August 2026
This policy explains how Brackat Technology Company LLC collects and handles personal data through RentsPilot. It is written against Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL).
This policy is a good-faith draft, not legal advice. Have it reviewed by UAE-qualified counsel, and confirm the retention periods and sub-processor list against your actual operations, before you publish it.
1.Who we are
RentsPilot is operated by Brackat Technology Company LLC, registered in the United Arab Emirates. For personal data processed through the platform on behalf of a property manager or landlord, that customer is the controller and we act as processor. For data collected through this website, we are the controller.
2.What we collect
Account details (name, work email, company, phone). Property and tenancy records you enter, which may include tenant names, Emirates ID and passport details, contract terms and payment history. Website usage data such as pages viewed and approximate location derived from IP address.
3.Why we process it
To provide and secure the service, to meet legal and regulatory obligations including Ejari, Tawtheeq and VAT record-keeping, and — where you have consented — to send product updates. You can withdraw consent to marketing at any time without affecting the service.
4.Where your data is stored
Customer data is stored in UAE-region data centres. Where a sub-processor operates outside the UAE, transfers are made only to jurisdictions with an adequate level of protection or under contractual safeguards permitted by the PDPL.
5.Sharing and sub-processors
We do not sell personal data. We share it only with sub-processors that support the service — hosting, email delivery, payment processing and analytics — each bound by written terms. A current list is available on request.
6.How long we keep it
For as long as your account is active, and afterwards only as long as required by UAE law. Tenancy and financial records are generally retained for the statutory period applicable to VAT and commercial records. You may request earlier deletion where no legal obligation requires retention.
7.Your rights
Under the PDPL you may request access to your data, correction of inaccuracies, deletion, restriction of processing, a portable copy, and you may object to certain processing. Write to the address below and we will respond within the period required by law.
8.Security
Data is encrypted in transit and at rest. Access is role-based and logged, and every financial record carries an audit trail. We notify affected customers and the competent authority of a personal data breach as required.
9.Cookies
We use cookies that are necessary for the site to function and, with your consent, analytics cookies that help us understand usage. You can control cookies in your browser settings.
10.Changes and contact
We will post any material change to this policy on this page and update the date above. For privacy requests contact privacy@rentspilot.com.