Privacy policy :
### Privacy Policy for Deal App
**Deal Real Estate Application Company (DEAL REAL ESTATE APPLICATION COMPANY)**
Deal Real Estate Application Company is an electronic real estate platform licensed by the Real Estate General Authority (REGA) in the Kingdom of Saudi Arabia, specializing in receiving and fulfilling real estate requests. The platform aims to empower real estate brokers to achieve successful real estate deals by facilitating their access to potential real estate opportunities, whether for individuals or companies, in addition to providing an advanced CRM system for tracking requests and offers and converting them into actual deals through AI-supported recommendations. We provide digital services that make it easier for users to request real estate properties (for sale or rent) instead of traditional searching, by connecting request owners with real estate brokers and developers in more than 120 cities and provinces in the Kingdom. The target audience includes individuals searching for real estate, real estate brokers and marketers (individuals or establishments/companies), and real estate developers, in addition to other categories such as real estate financiers, property owners, real estate registrars, and real estate notaries. You can contact us through several available channels, as per the contact details shown below.
**Contact Details**
Department/Team Responsible: Customer Support and Data Protection Department
Address: Building No. 7031, Prince Muhammad bin Fahd Road, Dammam, Kingdom of Saudi Arabia
Phone Number: 966115201661
Email: info@dealapp.sa
Commercial Register - License: Commercial Register No. 2050240519, licensed by the Real Estate General Authority (REGA) with a license for brokerage and marketing for electronic real estate platforms, under No. 1200006871
**Last Update Date**
The last update to the privacy policy was made on August 27, 2025, and you can view the update log by contacting the support department via email at info@dealapp.sa or through the app. You will be notified of material changes via email or in-app notification before they take effect, giving you the opportunity to review or withdraw consent.
**What Personal Data Do We Collect?**
We collect and process the following personal data in accordance with the data minimization principle (the minimum necessary for the purpose), and it is specified whether the collection is mandatory or optional:
- Account Data (Mandatory for Registration): Full name, email address, phone number, and residential address or general geographic location (to identify real estate requests).
- Contact and Device Data (Partially Optional): IP address, device type, system language, browser type, and date/time of access (to improve the service).
- Payment Data (Mandatory if the service is paid): Credit card number, payment amounts, and transaction details (to process payments).
- User-Entered Information (Optional): Inquiry requests, reports, survey responses, and details of real estate requests (such as property type, budget, preferred location).
- Cookies Data (Optional): Technical data to improve the experience, such as browsing preferences (can be managed via device settings).
- Location Data (Optional): Precise geographic location if permitted by the app, to suggest nearby properties.
- Data from Third Parties (Indirect, Optional): Information from real estate partners or government entities if publicly available or legally required.
- Verification Data for Real Estate Brokers (Mandatory for Brokers): Identity data via the national "Nafath" service for identity verification, and real estate brokerage license data to ensure licensing and validity (whether for individuals or establishments/companies).
- User Performance Data (Optional, Collected Automatically): Information about usage behavior within the app (such as interactions, previous requests, and accepted offers) to provide recommendations tailored to your interests, whether you are a property seeker or a real estate broker.
- Verification Data for Property Seekers (Mandatory When Submitting a Request): Mobile number to verify the authenticity of the request.
**Note on Sensitive Data:**
We do not collect or process sensitive data (such as detailed financial data, health data, biometric data, religious data, or political data) except in cases of utmost necessity and with explicit and specific consent, and in accordance with the special controls in PDPL (Article 5/2), ensuring the highest levels of protection.
**How Is Your Personal Data Collected and What Is the Purpose of Collecting It?**
Some of the personal data we process is obtained directly from you using electronic forms in the app (such as registration fields, dropdown lists for selecting property type, checkboxes for consenting to terms) for the following purposes:
- Providing basic real estate services (such as processing your requests and matching offers).
- Verifying identity and preventing fraud (such as using "Nafath" for real estate brokers and mobile number for property seekers).
- Managing accounts and technical support.
We also obtain some personal data indirectly from the following sources:
- Cookies technologies and app analytics to automatically collect device data, for purposes of improving performance and personalizing the experience.
- Interlinking with licensed external entities (such as payment providers or real estate partners, or the "Nafath" service for identity and license verification) to process requests, ensuring compliance with the system.
For real estate brokers (individuals or establishments/companies), we collect identity data via "Nafath" and license data to verify eligibility, and we display the registered name and contact numbers (as per your preference) to facilitate communication with seekers or other brokers, and your name may appear as a suggestion in the smart recommendations system. As for property seekers, your request appears with the registered name, and we provide an option to display your mobile number to brokers or communicate only through the platform (where the number is hidden in the chat), or direct communication via WhatsApp or phone call.
All methods are clear and direct, free from deception, and we rely on the following legal bases in accordance with the Personal Data Protection System (PDPL):
- Your explicit consent (free and informed) during registration.
- Fulfillment of a contractual obligation (app terms of use for providing real estate services).
- Legal requirement (such as compliance with REGA laws).
- Legitimate interests of the entity (improving services without conflicting with your rights).
- Public interest (in case of government disclosure).
The content is limited to the minimum necessary, and we do not rely on consent as a condition for a service not directly related.
**How Do We Use Your Personal Data?**
We use the personal data collected directly or indirectly as follows, divided according to the stages of the data lifecycle:
- **Collection and Storage**: To create a personal profile and securely store requests.
- **Use**: To match your requests with real estate offers, send notifications, and analyze usage to improve the app (such as personalized suggestions supported by AI for real estate brokers in the CRM system, based on performance data such as interactions and previous requests).
- **Sharing**: With licensed brokers to provide offers, or government entities if necessary.
- **Destruction**: Deletion after the need ends.
We process data automatically (such as matching algorithms and AI-supported recommendations) or manually (customer support), ensuring accuracy and security, for categories such as brokers, financiers, developers, owners, registrars, and real estate notaries.
**How Do We Disclose Your Personal Data?**
We will not disclose your personal data to any other party for direct marketing purposes. We may disclose your personal data to the following entities for specific purposes and on a regular or occasional basis:
- Licensed real estate brokers and developers (such as request data for matching offers and supporting the CRM system, with display of name and contact as per your preference).
- Technical service providers (such as cloud services or payments, under confidentiality agreements).
- Government or judicial entities (such as REGA or competent authorities, for legal compliance).
Disclosure is within the Kingdom, or outside only with safeguards (such as contractual agreements under Article 20 of PDPL). In the event of transferring your data outside the Kingdom, it will only be done to countries or entities that provide an adequate level of protection, and based on approval from the Saudi Data and Artificial Intelligence Authority (SDAIA).
**Legal Bases for Collecting and Processing Your Personal Data**
In accordance with the Personal Data Protection System, the legal basis we rely on for processing this data is:
- Your explicit consent, and you can withdraw consent at any time without affecting processing operations based on other legal bases; to do so, you can contact the support department via info@dealapp.sa.
- Fulfillment of a contractual obligation (app terms of use for providing real estate services).
- Fulfillment of a legal obligation (REGA laws and PDPL).
- Achieving legitimate interests or objectives (improving the platform without conflicting with your rights).
**How Do We Store Your Personal Data?**
Your personal data is stored securely in servers inside the Kingdom of Saudi Arabia or with an approved cloud computing service provider (such as AWS in the Saudi region). We retain account data for 5 years (or longer if legally required), request data for 2 years after completing the deal, and device data for 1 year. After that, we will dispose of this data in a secure manner that prevents access or recovery, through permanent encryption and automated deletion.
We maintain administrative and technical security measures such as encryption (AES-256), access control, anonymization, and periodic reviews to protect data from leaks or unauthorized access. In accordance with Article 24 of the Executive Regulations of PDPL, we will notify the Authority (SDAIA) within 72 hours of discovering any material breach, and notify you if the breach may affect your data or rights.
**Your Rights Regarding the Processing of Your Personal Data**
Under the Personal Data Protection System, you have the following rights, which primarily depend on the purpose of collecting and processing the personal data:
- Right to Be Informed: You have the right to know how we collect your personal data, the legal basis for collecting and processing it, how it is processed, stored, destroyed, and to whom it will be disclosed, and you can view all details through the privacy policy or contact us using the details shown below (limitations: does not include publicly available data).
- Right of Access to Your Personal Data: You have the right to request access to your personal data, via email at info@dealapp.sa or app settings (limitations: does not include others' data).
- Right to Request Your Personal Data: You have the right to request your personal data held by the controller in a readable and clear format whenever technically possible, via email or download from the app (limitations: not available if it threatens security).
- Right to Rectify Your Personal Data: You have the right to request us to rectify your personal data that you believe is inaccurate, incorrect, or incomplete, via info@dealapp.sa, and it will be reviewed and updated within 30 days, and you will be notified via email.
- Right to Erase Your Personal Data: You have the right to request us to erase your personal data in certain circumstances (such as end of need or withdrawal of consent, unless it conflicts with legal requirements).
- Right to Withdraw Consent to Process Your Personal Data: You have the right to withdraw your consent to process your personal data at any time, unless there are legal bases requiring otherwise, via info@dealapp.sa.
- Right to File a Complaint: To the competent authority (SDAIA).
- Right to Claim Compensation: For any damage resulting from a violation.
Except as stipulated by law, you will not be required to pay any fees for exercising these rights, and if a request to exercise one of these rights is submitted, we will respond to you within 30 days from the date of receiving the complete request.
For more details on the processing of your personal data and how to exercise your rights, you can contact the Data Protection Officer at Deal Real Estate Application Company, using the contact details shown below.
**Data Protection Officer**
Name: Abdullah Al-Abbad
Address: Building No. 7031, Prince Muhammad bin Fahd Road, Dammam
Phone Number: 966115201661
Email: info@dealapp.sa
**How to Submit a Complaint or Objection?**
In case of any concerns or our non-compliance with the Personal Data Protection System, you can submit a complaint to the Complaints and Objections Department using one of the following channels: email at info@dealapp.sa or the complaint form in the app.
If you are not satisfied with our handling of the complaint or in case we do not respond within 30 days, you can submit a complaint to the competent authority: the Saudi Data and Artificial Intelligence Authority (SDAIA).
**Address of the Saudi Data and Artificial Intelligence Authority**
Kingdom of Saudi Arabia
Riyadh
Website: Saudi Data and Artificial Intelligence Authority (sdaia.gov.sa)
National Data Governance Platform (dgp.sdaia.gov.sa)
This policy is available through the app and website in clear and easy-to-understand language, and we review it periodically. We thank you for your suggestions and cooperation in improving the privacy policy to make it more comprehensive and compliant. If you have any additional questions, please contact us.