Privacy Policy
What we collect, why we collect it, where it is stored, and how to get it deleted.
Effective 1 January 2026 · Version 2026-10-12
1. Two kinds of data
Your data. Your name, work email, phone, agency, emirate, photo and website address. We decide how this is handled, and this policy governs it.
Your clients’ data. The contact details, requirements and notes you enter about the people you work with. That is your record, not ours. We hold and process it on your instructions, to run the product for you, and for nothing else.
2. What we collect about you
- Account details you type: name, email, password (stored hashed, never in the clear), phone, agency, emirate.
- Content you create: listings, photos, brochures, client records, notes.
- Usage: pages visited inside the app, and a recording of your own session used to find where the product is confusing.
- Technical: IP address and browser, used for sign-in security and rate limiting.
Session recordings mask the CRM. Everything under your client and listing screens is replaced with blocks before it leaves your browser, because that content belongs to third parties who never agreed to anything with us.
3. Why we ask for a phone number
So that clients can reach you. Your number becomes the Call and WhatsApp buttons on your public website and on every listing you publish. It is optional — leave it blank and clients contact you by email instead. We do not use it for marketing and we do not pass it to anyone.
4. Tracked links you send
When you send a listing to a client, Waseeti creates a private address for that client and records when the page is opened and roughly how long it is read for. That is what the open counts on your dashboard are. It is recorded against the client record you created, so you are the one holding it — make sure you are entitled to, and be straight with your clients about it if they ask.
5. Where it is stored
Waseeti runs on servers in the United States, and some of the services we depend on are also outside the UAE:
- DigitalOcean — hosting and database, New York, United States.
- PostHog — product analytics and session replay, United States.
- Google Analytics — website usage statistics, Google LLC, United States.
- Mailtrap — sends verification, password reset and welcome email.
- Sentry: error and uptime monitoring (Functional Software, Inc.), stored in the European Union. It receives what broke and where, with names, emails, IP addresses and private links removed.
- Cloudflare — serves static files from the nearest location to your visitor.
By using Waseeti you accept that your data, and the client data you enter, is transferred to and processed in these countries, whose data protection rules differ from the UAE’s. Each provider is bound to handle it only for the service it performs for us.
6. Cookies
One cookie keeps you signed in (waseet_sid). PostHog and Google Analytics set cookies to recognise a returning browser for analytics. We run no advertising cookies and no third-party ad trackers.
On a realtor's or agency's public site, your browser keeps a random identifier in its own storage (waseeti_vid, not a cookie) so that the site owner can see how many different people visited, and — for the length of a visit — which realtor's link brought you (waseeti_ref). We store only a keyed hash of the identifier. It is not linked to your name, email or address, and clearing your browser's site data removes it.
7. Connecting Waseeti to an AI assistant
You can connect your Waseeti account to an AI assistant such as Claude, so that you can create and update listings and clients by describing them in a conversation. This is off until you turn it on, and you turn it on by signing in and granting access.
While it is connected, the assistant can read and change your listings and your client records on your behalf — including your clients’ names, phone numbers, email addresses and requirements. That data leaves Waseeti and is processed by the company running the assistant, under their privacy policy and not ours. Anthropic, which makes Claude, is in the United States.
Only records in your own account are reachable, and only while the connection lasts. You can revoke it at any time from your assistant’s connector settings or by writing to us, and revoking it stops any further access immediately.
This one is worth a moment’s thought before you switch it on: the records involved are your clients’, not yours, and connecting sends them somewhere new.
8. How long we keep it
For as long as your account exists. Ask us to delete it and we remove your account, your listings and your client records from the live database; backups age out on their own cycle. Published listing pages come down when the account does.
9. Your rights
Ask us for a copy of what we hold about you, to correct it, or to delete it, by writing to hello@waseeti.io. If one of your clients asks you the same thing about their record, that request is yours to answer — you can edit or delete any client from your dashboard, and we will help if you need us to.
10. Changes
If this policy changes materially we will email account holders and update the version at the top of the page. See also the Terms of Use.