Privacy Policy

We collect the following categories of information:

• Account data: name, email address, password hash, phone number, and location you choose to add to your profile.
• Investment preferences: budget range, preferred areas, property types, and strategy collected during onboarding.
• Usage data: pages you visit, searches you run, deals you save or reserve, device type, IP address, and timestamps.
• Payment data: if you subscribe, our payment processor handles card details. We store only the last four digits, card brand, and billing country.
• Communications: messages you send to our support team and responses to emails we send you.

• To create and secure your account.
• To personalize your deal feed and rank listings against your preferences.
• To process subscriptions and reservations.
• To send service-related emails (welcome, deal digests you opted into, security alerts).
• To detect fraud, abuse, and policy violations.
• To measure product performance and improve the service.

We process personal data on the basis of performing our contract with you (account, subscriptions), your consent (marketing emails, optional analytics), and our legitimate interests (security, fraud prevention, product improvement). You can withdraw consent at any time from your account settings or by contacting us.

We share data only with service providers that help us run the platform, under strict confidentiality terms. These currently include:

• Railway: application and database hosting.
• Resend: transactional email delivery.
• Stripe: payment processing for paid memberships.
• Sentry: error and performance monitoring.
• Anthropic: AI model inference for the AI Investor feature (chat prompts are processed to generate replies).

We do not sell personal data. We may disclose data if required by law, court order, or to protect the rights, property, or safety of our users or the public.

Some of the providers listed above operate servers outside the UAE. Where that happens, we rely on standard contractual protections or adequacy decisions to keep your data safeguarded in line with applicable privacy law.

We keep your account data for as long as your account is active. If you delete your account, we remove or anonymize personal data within 90 days, except where we must keep it longer for legal, tax, or fraud-prevention purposes.

We use encryption in transit (HTTPS), hashed passwords, row-level security at the database, and role-based access controls. No system is perfectly secure, but we continuously invest in protecting your data.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated data.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing relies on consent.

To exercise any of these, contact us through the Contact page. We respond within 30 days.

FlipFinder is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has submitted data to us, contact us and we will delete it.

We use a limited set of cookies and similar technologies. See our Cookies Policy for the full list and how to manage them.

We may update this policy to reflect changes to the service or to our legal obligations. When material changes happen, we will email account holders and update the “Last updated” date on this page.

Privacy questions? Reach us via the Contact page.