Privacy Policy

1. Data Controller and Contact

Responsible entity: AQAR LAGTA LLC. Address: 30 N Gould St Ste R, Sheridan, WY 82801, Privacy email: [email protected].

We are the controller responsible for determining the purposes and means of processing your personal data. For any questions about this Policy or to exercise your rights, contact us at the email above.

2. Data We Collect

We collect the following categories of data, each for a specific purpose:

Agent account data

Name, mobile number (used to log in via WhatsApp OTP), city, office name, professional bio, and account photo. We do not use email or passwords, and we do not support Google or Apple sign-in.

Buyer (lead) data

When a buyer contacts an agent via the inquiry form or WhatsApp, we record their name, phone number, and message, and store it as a lead attributed to that agent.

Usage and analytics data

When a property link is opened we collect limited technical data: a hashed IP, User-Agent, Referer, and country — to measure performance, prevent abuse, and resolve short links.

Device data for notifications

Push tokens needed to deliver notifications to the agent app through Firebase Cloud Messaging.

Listing content

The images, videos, and descriptions agents upload, including AI-assisted text when the agent requests it.

3. Purposes and Lawful Bases

We process your data for the following purposes:

• Creating, managing, and authenticating the agent account (contract performance).
• Enabling listings, lead management, and communication with leads (contract performance).
• Sending account- and lead-related notifications (legitimate interest).
• Analysing usage, monitoring performance, and preventing fraud or abuse (legitimate interest).
• Complying with accounting or regulatory obligations where required by law (legal obligation).
• Improving the service and developing features based on aggregated, non-identifying data (consent).

Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. Withdrawing consent for certain processing may limit some features.

4. Who We Share Data With (Processors and Third Parties)

We do not sell your personal data. We share it only with processors acting on our behalf under a data-processing agreement, and with the following where relevant:

• WhatsApp Cloud API (Meta) — for OTP login and for routing buyer-to-agent contact.
• Facebook Graph API (Meta) — to post listings to the agent’s connected page when the agent requests it.
• Firebase Cloud Messaging (Google) — to deliver notifications to the agent app.
• Sentry — for error monitoring and diagnostics (limited technical data).
• Cloudflare R2 object storage — to store listing media and account photos.
• Google Cloud (Vertex AI) — to help agents draft property descriptions on request.
• Cloud hosting and compute providers — to operate the Platform and run backups.

We may disclose your data where legally required, to protect our rights or the safety of our users, or in response to a competent governmental request.

5. International Data Transfers

Because some third-party services listed above (such as Meta, Google including Google Cloud Vertex AI, Cloudflare, and Sentry) process data in data centres outside your country, your data may be subject to international transfer. We rely on the safeguards set out in our data-processing agreements and any legally recognised transfer mechanisms (such as Standard Contractual Clauses) where applicable.

The entity responsible for assessing the destination country’s protection level: AQAR LAGTA LLC.

6. Data Retention

We retain your data for the life of your account, and afterwards for a period consistent with accounting and legal-compliance needs. When you request account deletion, we disable the account, hide visible personal data, delete listings, and disconnect linked social accounts (see Section 9). Personal data is deleted from production systems within 30 days; backups are deleted within our standard deletion cycle (up to 60 additional days).

7. Security

We apply appropriate technical and organisational measures to protect your data, including transport encryption, restricted internal access, IP hashing, and logging/auditing. No internet-connected system can be guaranteed fully secure; we continuously review our controls.

8. Your Rights

Depending on the law applicable in your country, you may have the right to:

• Access your personal data and obtain a copy.
• Rectify inaccurate data.
• Request erasure of your data where permitted.
• Object to or restrict certain processing.
• Receive your data in a structured format where applicable (portability).
• Withdraw any consent you have given.

To exercise these rights, email us at the address in Section 1. We respond within the period set by applicable law. You may also lodge a complaint with your competent supervisory authority.

9. How to Request Deletion of Your Data

You have the right to request deletion of your personal data and/or your entire account at any time. You can do so by any of the following methods:

• In-app: open Settings → Privacy & Terms → "Delete account" and confirm.
• On the web: open the data-deletion request page at /data-deletion/ and follow the instructions.
• By email: contact us at [email protected] and include your registered mobile number.

When we receive your request: we disable your account straight away, hide your visible personal data, delete your listings (including their media), disconnect linked social accounts (WhatsApp and Facebook), and delete your personal data from production systems within 30 days; backups follow within our standard deletion cycle (up to 60 additional days). We keep only aggregated, non-identifying data, and data we are required to keep by law (such as accounting or regulatory records). Your data is never sold or shared for advertising purposes.

10. Children

The Platform is not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with their data, contact us so we can remove it.

11. Local Storage and Similar Technologies

We do not use advertising or commercial-tracking cookies. We use browser local storage only where necessary to run the interface (such as basic preferences). We do not use Google Analytics, the Meta Pixel, or external advertising SDKs.

Our website uses Cloudflare Web Analytics, a privacy-first service that does not use cookies or local storage and does not track you across sites, to measure aggregate visits and page performance. We also count successful demo and account-deletion requests by type and language only, with no personal data attached.

12. Data Protection in the Middle East Region

Aqar Lagta complies with the personal-data-protection laws of the markets it serves, including, without limitation:

• Kingdom of Saudi Arabia — Personal Data Protection Law (PDPL).
• United Arab Emirates — Federal Personal Data Protection Law.
• Egypt — Personal Data Protection Law No. 151 of 2020.
• GCC states — national data-protection laws of Qatar, Bahrain, Kuwait, and the Sultanate of Oman.
• Turkey — Personal Data Protection Law (KVKK).
• Lebanon — Law No. 81/2018 on Electronic Transactions and Personal Data.
• Iraq and Syria — adherence to reasonable data-protection practice pending detailed legislation, and good-faith handling of any local complaint.

Primary governing law and dispute-resolution forum: This Policy is governed by the laws of the State of Wyoming, USA, and the state and federal courts located in Wyoming shall have exclusive jurisdiction over any dispute arising out of or relating to it.

13. Changes to This Policy

We may update this Policy from time to time. We will post the revised version here with an updated "Last updated" date, and may notify you in the Platform of material changes. Your continued use of the Platform after an update constitutes acceptance of the revised Policy.