Privacy Policy

Verifly.ai respects your privacy and is committed to protecting it. We provide this Privacy Policy to inform you of our privacy procedures and practices, and to describe what information we collect about you, how we obtain your information, and how we use, share, and otherwise process your information in the course of operating our business and our platform.

In this Privacy Policy, "we", "our" and "us" refers to Verify Investment In Commercial Enterprises And Management - FZCO, registered in the United Arab Emirates, and its affiliates (collectively, "Verifly"); "the platform" refers to the Verifly.ai website (www.verifly.ai) and our mobile applications; and "you" and "your" refers to a specific individual accessing and using the platform or the services that we provide.

Verifly.ai is a private, AI-verified deal distribution network for real estate transactions. We are not a public listing portal, a broker, or a commission-based intermediary. We provide verification, matching, and transaction facilitation services. Our platform connects Trusted Agents (licensed real estate agencies and brokers) with Capital-Ready Members (verified buyers and investors) through AI-powered deal matching within a time-limited decision window.

We may update or revise this Privacy Policy at any time, and this page will always reflect the current version.

For purposes of this Privacy Policy, Verifly is a "data controller", which means that we are responsible for the personal information that we collect about you and how we process it.

"Personal information" is any information that can be used to identify you or that we can link to you and which we have in our possession or control.

The information we may collect from or about you includes:

Account and identity data: When you register on our platform as a Trusted Agent, Agency Administrator, or Capital-Ready Member, you provide us with information that we store and process. This may include your name, email address, phone number, nationality, and any other information you choose to provide during registration.

Verification documents (Agents and Agencies): To verify your professional credentials, we may collect your RERA card or Broker Registration Number (BRN), your agency’s commercial license, RERA registration certificate, and other regulatory documents. These documents are processed solely for the purpose of confirming your licence status and the legitimacy of your agency.

Verification documents (Buyers / Capital-Ready Members): To verify your identity and financial readiness, we may collect your passport copy or Emirates ID, and Proof of Funds (PoF) documentation. These documents are processed solely for the purpose of Know Your Customer (KYC) and Anti-Money Laundering (AML) verification. They are never displayed to other users of the platform.

Property and deal documents: When a Trusted Agent submits a deal for verification, they may upload property ownership documents on behalf of the property owner. These may include Title Deeds, Oqood certificates (for off-plan properties), Statement of Account (SOA), Trakheesi Permit Number, and the property owner's passport copy or Emirates ID (for individual owners) or Trade License (for company-owned properties), along with the proposed selling price. These documents are processed solely for the purpose of verifying deal legitimacy, confirming ownership, validating that the listing has been approved by Dubai Land Department, and assessing whether the deal qualifies as urgent. They are never publicly displayed, never shared with other users (other than non-identifying property attributes shown to matched buyers), and never indexed by search engines.

Search preferences and behaviour data: When you use our AI-powered search and matching features, we collect your stated preferences such as budget range, preferred locations, property types, and risk profile. We also collect information about your interactions with the platform, such as deals you express interest in and saved search prompts.

Communication data: If you contact us or communicate through our platform, including via email, WhatsApp, or in-app messaging, we may keep a record of that correspondence to improve our services and to address any specific requests or complaints.

Platform usage data: We may receive information as a result of your visits to and use of the platform. This may include your IP address, device type, browser information, the date and time you access the platform, and general usage patterns.

We may collect your information during the course of our engagement with you and will only use your personal information in accordance with applicable data protection laws, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

We may obtain this information from a variety of sources, including:

•from you directly (for example, when you register on the platform, submit documents for verification, set your search preferences, or contact our support team);

•from Trusted Agents who submit property documents on behalf of property owners as part of the deal submission process;

•from government and regulatory sources, such as the Dubai Land Department (DLD), Department of Economic Development (DED), and publicly available DLD transaction data, for the purpose of verifying ownership, benchmarking prices, and validating agency credentials;

•from analytics providers, for the purpose of understanding platform usage patterns (aggregated and anonymised data only); and

•from KYC/AML verification partners, if applicable, for the purpose of confirming buyer identity and financial readiness.

We will comply with applicable data protection laws that apply to our processing of your personal information, including the UAE PDPL. We will:

•process your personal information in a lawful, fair, transparent and secure way;

•collect your personal information only for specific, explicit and legitimate purposes as explained to you when collecting your personal information;

•not use your personal information in any way that is incompatible with those purposes;

•process your personal information in a manner that is adequate and relevant to the purposes for which we have collected it and limited only to those purposes;

•keep your personal information accurate and, where necessary, up to date; and

•keep your personal information in a form that identifies you only as long as necessary for the purposes we have informed you and/or as permitted by law.

We may use or process your personal information for the following purposes:

•to register your account and verify your identity, professional credentials, or financial readiness;

•to verify property ownership documents and assess whether a submitted deal qualifies as distressed, by comparing submitted documents and pricing against publicly available DLD transaction data and market benchmarks;

•to match verified deals with verified buyers using our AI-powered matching engine, based on your stated preferences (budget, location, property type, risk profile);

•to notify you of matched deals, listing status changes, and other transactional updates via WhatsApp, email, or in-app notifications;

•to facilitate the connection between a Capital-Ready Member and the Trusted Agent handling a matched deal, after the buyer has explicitly confirmed interest. Your contact details (name, phone number, email) will be shared with the matched agent only at this point;

•to provide a better service to you, including to keep internal records, improve our platform and services, and address any requests or complaints;

•to monitor communications in order to improve the services we provide and assess the quality and responsiveness of agents on our platform;

•to generate aggregated, anonymised analytics and market insights (such as pricing trends and distress activity signals) that do not identify any individual user;

•to comply with legal and regulatory obligations.

We use your personal information on the following bases (where permitted in accordance with applicable data protection laws, including the UAE PDPL):

•because the information is necessary for the performance of a contract with you or to take steps at your request to enter into a contract;

•because you have given your explicit consent (for example, when uploading verification documents, or when opting in to receive notifications via WhatsApp);

•for our legitimate interests, such as operating and improving our platform, verifying deal legitimacy, and generating anonymized market insights;

•to comply with legal and regulatory obligations, including KYC/AML requirements.

We will only disclose or transfer your personal information for the purposes set out in this Privacy Policy. We do not sell your personal information to third parties. We do not use your personal information for third-party advertising. We may share your information with:

•Trusted Agents: when you are a Capital-Ready Member and you explicitly confirm interest in a matched deal, we share your contact details (name, phone number, email) with the Trusted Agent handling that deal, so they can contact you directly for negotiation and closing. We do not share your verification documents (passport, PoF) with agents;

•government and regulatory data sources: we may query Dubai Land Department (DLD) open data, Trakheesi verification services, and DED e-services to verify property ownership, validate listing permits, benchmark prices, and validate agency credentials. We share only the minimum identifiers necessary for verification (such as property reference numbers, Trakheesi Permit Numbers, and commercial license QR codes);

•notification service providers: we use third-party providers for WhatsApp Business API and email delivery. These providers receive your phone number or email address and the content of notifications, solely for the purpose of delivering messages on our behalf;

•cloud infrastructure providers: your data (encrypted) is hosted on third-party cloud infrastructure. Our providers are contractually obligated to protect your data and may not use it for any purpose other than providing hosting services to us;

•KYC/AML verification partners (if applicable): if we engage a third-party provider for identity or funds verification, your verification documents may be shared with them solely for this purpose;

•any competent authority if we are legally required to comply with a request for data;

•if we sell or buy any business or assets, in which case we may disclose your personal information to the prospective seller or buyer of such business or assets, along with its professional advisers;

•to protect our rights, property, or safety, as well as that of our affiliates, our customers, or others.

Your personal data and documents are stored on AWS servers located in EU (Germany). As the data is transferred outside the UAE we implement appropriate measures to ensure that your personal information remains protected and secure, in compliance with the UAE PDPL’s requirements for cross-border data transfers.

Keeping your personal information secure and preventing unauthorized access is of the utmost priority to us. We take all steps reasonably necessary to protect your personal information against any unauthorized access, use, alteration, disclosure or destruction. This includes:

•encrypting data in transit (TLS 1.2 or higher) and at rest (AES-256 or equivalent);

•storing uploaded verification documents in encrypted object storage with access restricted to authorized verification processes;

•implementing role-based access control (RBAC) so that only authorized personnel can access sensitive data and documents;

•logging and auditing all access to sensitive data, including Super Admin access;

•limiting access to your personal information to those employees, agents, contractors and other third parties who have a business need to know.

Where we have given you, or where you have created a password which is part of our services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

The transmission of information via the internet is not completely secure. We will do our best to protect your personal information, however, we cannot guarantee the security of your information transmitted to our platform. Any transmission of information made is done so at your own risk.

How long we hold your personal information will vary depending on the type of data and the purpose for which it was collected. We will typically keep your personal information only for as long as is necessary to fulfil the purpose for which it was collected, to respond to any queries or complaints, to improve the services that we offer to you, or to comply with any legal obligations to which we may be subject.

We retain your personal data for as long as your account remains active or until you request deletion. To request deletion of your data, please email us at support@verifly.ai. We will remove your data within 30 days, unless we are required by law to retain certain information for a longer period (for example, to comply with regulatory or legal obligations). Aggregated, anonymized analytics data that does not identify any individual may be retained indefinitely.

Verifly.ai uses artificial intelligence and automated processes as a core part of its service. Specifically:

•Distress assessment: our AI evaluates submitted deals against market data to classify them as Verified Distress, Partial Distress, or Not Distress, based on price deviation, urgency signals, and document completeness;

•Buyer-deal matching: our AI matches verified deals with Capital-Ready Members based on their stated preferences, ranking matches as Perfect Match, Strong Match, or Partial Match;

•Automated outreach: when a match occurs, an AI agent may contact the buyer to explain the deal at a high level and confirm interest.

No fully automated decision with legal or significant effect on you is made without human oversight. The platform does not intermediate or execute transactions. All deals are handed to human agents for negotiation and closing. Trusted Agents may request re-verification of rejected deals. Capital-Ready Members may adjust or override their matching preferences at any time.

Under the UAE Personal Data Protection Law and other applicable data protection laws, you may have the right to:

Access your data – request a copy of your personal information that we process about you;

Correct your data – request us to amend or update your personal information where it is inaccurate or incomplete;

Erase your data – request us to delete your personal information where it is no longer necessary for the purpose(s) for which it was originally collected;

Restrict your data – request us temporarily or permanently to stop processing all or some of your personal data;

Object to the use of your data – object to us processing your personal information where it is based on our legitimate interests or for direct marketing purposes;

Data portability – request the receipt or transmission of your personal information to another organisation, in a structured and machine-readable format;

Withdraw your consent – withdraw your consent at any time to the use of your personal information for a particular purpose, where we have asked you for consent. Please note that in certain circumstances it may be lawful for us to continue processing without your consent if we have another legal basis for doing so;

Lodge a complaint – file a complaint with the UAE Data Office if you believe your personal data has been processed in violation of the UAE PDPL.

For any of the above, please email us at support@verifly.ai. Subject to any overriding legal obligations, requirements and/or exemptions, we will endeavour to respond to your request within 30 days. We may also ask you to provide proof of your identity.

To opt out of deal notifications or other communications, you can update your preferences in your account settings, use the unsubscribe link found in email communications, or contact us at support@verifly.ai. Disabling notifications for a specific search prompt will stop alerts immediately; any active deals you have already expressed interest in will remain unaffected.

Verifly.ai is a platform designed for licensed real estate agencies and professional investors. We do not knowingly collect information from children under the age of 18. If you become aware that a minor has provided us with personal information without parental or guardian consent, please contact us at support@verifly.ai, and we will take steps to delete the information from our records.

We may update this Privacy Policy from time to time. If there are material changes, we will provide notice by email or via the platform before the changes take effect. Any changes to this Privacy Policy take effect after the notice period (typically 14 days) unless otherwise specified.

If you have any questions relating to this Privacy Policy, please contact us at:

support@verifly.ai

Verify Investment In Commercial Enterprises And Management - FZCO

Dubai, United Arab Emirates