Privacy Policy

Effective Date: July 2026

Last Updated: July 2026

1. Data Controller

Dynamic Web Lab FZE LLC (trading as WAQOV) is the data controller for personal data collected through the Service.

Registered office: Sharjah Publishing City Free Zone, United Arab Emirates (Formation Number: 4426361).

Website: https://dynamicweblab.com

We are committed to compliance with UAE Federal Decree-Law No. 45 of 2021 (PDPL), Dubai Data Law No. 26 of 2015, and applicable data protection regulations.

2. Lawful Basis for Processing (PDPL Art. 4)

We process personal data under the following lawful bases:

Processing Activity	Lawful Basis
Account creation & management	Contractual necessity (Art. 4(1))
API rate limiting & abuse prevention	Legitimate interest (Art. 4(3))
Service communications	Contractual necessity
Product updates & marketing	Consent (Art. 4(2)) — optional opt-in
Legal compliance	Legal obligation (Art. 4(4))

3. What We Collect

When you use the WAQOV API, we collect:

Account Information: Email address, name (provided during registration)
Marketing Consent Status: Whether you opted into product updates
API Usage Data: Request logs, timestamps, response codes, rate limit usage
Authentication Data: API key (stored as SHA-256 hash), IP address, user agent
Payment Information: Processed by our payment provider (we do not store card details)

4. How We Use Your Data

To provide and maintain the Service
To enforce rate limits and quotas
To communicate about your account and service updates
To send product updates and market insights (only with your consent)
To detect and prevent abuse
To improve our API and analytics

5. What We Do NOT Collect

Buyer or seller personal information from DLD records
Property owner identities
Any personal data from government open data sources

All property transaction data sourced from DLD inherently excludes personal identifying information — buyer/seller names are not part of the public registry.

5a. AI Processing

Our AI features process no personal data. AI prompts contain only public DLD registry and market information (transaction prices, property/area/building names, dates, rental amounts). We never send broker names, owner/tenant identities, emails, phone numbers, or national identifiers to any AI model. AI analysis is generated using external AI providers (OpenRouter, Google Gemini) with non-personal registry/market data only.

6. Cross-Border Data Transfer (PDPL Art. 15)

Your personal data is stored and processed on servers located in Germany (European Union). By using the Service, you acknowledge that your data will be transferred to and processed in Germany. We have implemented appropriate safeguards to ensure your data receives adequate protection in accordance with UAE PDPL requirements.

7. Data Retention

Data Category	Retention Period	Reason
Account information (email, name)	Until account deletion	Service provision
API key hash	Until account deletion	Authentication
API request logs	90 days	Security & abuse prevention
Marketing consent record	Until consent withdrawal	Compliance
Payment records	5 years (UAE legal requirement)	Tax & legal compliance

8. Your Rights (PDPL Art. 7-14)

Under UAE PDPL, you have the following rights:

Right to be informed — what data we collect and why (this policy)
Right of access — request a copy of your personal data
Right to rectification — correct inaccurate data
Right to erasure — delete your account and personal data
Right to restrict processing — limit how we use your data
Right to data portability — export your data in a machine-readable format
Right to object — object to processing for marketing

To exercise any of these rights:

1. Self-service deletion: Use the delete form on our homepage (requires your API key)

2. Email us: [email protected]

3. WhatsApp: +971581812436

We will respond to your request within 15 business days as required by UAE PDPL.

9. Marketing Consent

We only send product updates and market insights if you explicitly opted in during signup. You can withdraw your consent at any time by:

Emailing [email protected]
Deleting your account via the self-service delete form

10. Data Security

API keys are stored as SHA-256 hashes (irreversible)
All data is encrypted in transit (TLS 1.3)
Database access is restricted and logged
Regular security reviews
Infrastructure hosted in ISO 27001-certified data centers

11. Cookies

The API documentation site uses essential cookies only. No tracking, analytics, or advertising cookies are used.

12. Children's Privacy

The Service is not directed at individuals under 18. We do not knowingly collect data from children. If we discover that a child under 18 has provided us with personal data, we will delete it immediately.

13. Data Processing Register

A detailed register of all data processing activities is available at [/data-processing](/data-processing), as required by UAE PDPL Art. 22.

14. Changes to Policy

We may update this policy. Material changes will be communicated via email to account holders and posted on this page. Continued use of the Service after changes constitutes acceptance.

15. Contact & DPO

For privacy inquiries or to contact our Data Protection Officer:

Email: [email protected]
WhatsApp: +971581812436
Response time: Within 5 business days

16. Complaints

If you believe we have not complied with UAE PDPL, you have the right to file a complaint with the UAE Data Office (formerly UAE Data Protection Office).