Privacy Policy

Last updated: June 2026

1. Introduction

AALA Solutions ("we," "us," or "Company") operates AALA.LAND. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, and related services.

Please read this Privacy Policy carefully. If you do not agree with our practices, please do not use the Platform.

2. What Data We Collect

We collect information in several ways:

Account Information

  • Name, email address, phone number
  • Company name and industry
  • Job title and role
  • Billing and payment information (processed securely)

Property & Business Data

  • Property details (location, type, size, specifications)
  • Tenant and owner information
  • Financial records and transactions
  • Lease agreements and documents
  • Cheque and payment records
  • Lead information and pipeline data

Communication Data

  • WhatsApp messages and metadata
  • Email correspondence
  • Customer support interactions
  • Notification preferences

Usage Data

  • Log data (IP address, browser type, pages visited)
  • Device information (device type, OS, browser)
  • Feature usage patterns and analytics
  • Session duration and timestamps

Automatic Data Collection

  • Cookies and similar tracking technologies
  • Website analytics via Microsoft Clarity (behavioral metrics, heatmaps, and session replay) and Google Analytics
  • Mouse movement, clicks, scrolls, and pages visited on our website
  • Performance and error monitoring data

3. How We Use Your Data

We process your data for legitimate business purposes:

  • Service Delivery - Provide, maintain, and improve the Platform
  • Communication - Send service updates, notifications, and support responses
  • Billing - Process payments and manage subscriptions
  • Security - Prevent fraud, abuse, and unauthorized access
  • Compliance - Meet legal obligations and regulatory requirements
  • Analytics - Understand usage patterns and improve features
  • Marketing - Send promotional content (with your consent)
  • Legal Claims - Defend against disputes and legal claims

4. Data Storage & Security

Your data is stored on secure servers located in the Middle East region. We implement:

  • Encryption of sensitive data fields
  • SSL/TLS encryption for data in transit
  • Role-based access controls limiting employee access
  • Regular security audits and penetration testing
  • Automated backups with disaster recovery procedures

While we maintain industry-standard security, no system is completely secure. We cannot guarantee absolute protection against all threats.

5. Data Sharing & Third Parties

We do not sell your data. However, we may share information with:

Service Providers

  • Stripe — payment processing and subscription management
  • Amazon Web Services (AWS) — cloud infrastructure and file/media storage (S3)
  • Meta (WhatsApp Cloud API) — WhatsApp messaging integration
  • Email and communication services
  • Microsoft (Clarity) for website behavioral analytics, heatmaps, and session replay
  • Google (Analytics) for website usage analytics
  • Customer support platforms

Legal Requirements

  • Law enforcement (with valid legal process)
  • Government agencies as required by law
  • Court orders and regulatory bodies

Business Transfers

In case of merger, acquisition, or asset sale, your data may be transferred as part of that transaction. We will notify you if this occurs.

Your Explicit Consent

We may share data with third parties you explicitly authorize (e.g., integrations you enable).

6. Data Retention

Data is retained for as long as necessary to:

  • Provide the Platform and services
  • Meet legal and regulatory obligations
  • Resolve disputes and enforce agreements
  • Maintain security and fraud prevention

Account data is deleted within 30 days of account termination unless required by law. You may request data deletion anytime, except where legally required to retain it.

7. Your Rights

Depending on your location, you have the following rights:

General Rights

  • Access - Request a copy of your personal data
  • Correction - Request correction of inaccurate data
  • Deletion - Request deletion (Right to be Forgotten)
  • Portability - Receive data in structured, portable format
  • Opt-out - Unsubscribe from marketing communications

GDPR Rights (EU Residents)

  • Right to restrict processing
  • Right to object to processing
  • Right to lodge a complaint with supervisory authority

UAE PDPL Rights

Residents of the UAE have rights under the UAE Personal Data Protection Law. Please refer to applicable regulations.

How to Exercise Rights

To exercise any of these rights, contact us at [email protected] with proof of identity. We will respond within 30 days.

8. Cookies

AALA.LAND uses cookies and similar technologies:

Essential Cookies

  • Session management and authentication
  • Security and fraud prevention

Analytics Cookies

  • Microsoft Clarity for behavioral analytics, heatmaps, and session replay
  • Google Analytics for usage insights
  • Performance monitoring

Preference Cookies

  • Language and theme settings
  • Display preferences

You can control cookies through your browser settings. Disabling essential cookies may affect Platform functionality.

9. Third-Party Services

The Platform may integrate with third-party services:

  • Meta WhatsApp Cloud API — messaging and communication threads
  • Stripe — subscription billing and payment processing
  • Amazon Web Services (AWS S3) — file storage, property media and documents
  • Google Analytics — usage analytics and performance monitoring
  • Microsoft Clarity for website behavioral analytics, heatmaps, and session replay

These third parties have their own privacy policies. We are not responsible for their data practices. Review their privacy policies before using their services.

Website Analytics Disclosure

On our public website (aala.land), we use Microsoft Clarity to capture how visitors use and interact with the site through behavioral metrics, heatmaps, and session replay, using cookies and similar tracking technologies. This may include mouse movement, clicks, scrolls, pages visited, approximate location derived from your IP address, and device and browser information. Clarity masks sensitive content by default. This information is processed by Microsoft. For details, see the Microsoft Privacy Statement.

We also use Google Analytics to understand aggregate website usage such as pages visited, session duration, and referral source. You can opt out using the Google Analytics Opt-out Browser Add-on.

These analytics tools run on our marketing website and collect website usage data only. They are separate from the property, tenant, financial, and communication data you enter inside the application, which is never shared with these analytics providers.

We do not currently display a cookie consent banner. By continuing to use this website, you consent to the website analytics described above. We do not run these analytics for visitors in the European Union, European Economic Area, United Kingdom, or California, and we honor Global Privacy Control (GPC) and Do Not Track (DNT) browser signals. You can also disable cookies at any time through your browser settings.

10. Children's Privacy

AALA.LAND is not intended for users under 18 years old. We do not knowingly collect data from children. If we discover such data, we will delete it immediately.

Parents or guardians suspecting data collection from minors should contact us immediately.

11. International Data Transfers

Your data may be transferred to, and processed in, countries other than your country of residence. These countries may have different data protection laws.

By using AALA.LAND, you consent to such transfers. We implement safeguards (e.g., Standard Contractual Clauses) to protect your data.

12. Changes to Privacy Policy

We may update this Privacy Policy periodically. Changes are effective when posted. Continued use constitutes acceptance.

For material changes, we will provide 30 days notice and seek your consent if required by law.

13. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what data is collected
  • Right to delete personal information
  • Right to opt-out of data sales (we don't sell data)
  • Right to non-discrimination for exercising rights

Contact [email protected] to exercise these rights.

14. Do Not Track, Global Privacy Control, and Regional Opt-Out

Some browsers send a Do Not Track (DNT) or Global Privacy Control (GPC) signal indicating that you do not want to be tracked. On our website, we honor these signals: when your browser sends GPC or DNT, we do not load Microsoft Clarity or Google Analytics for your visit.

In addition, we do not run website analytics for visitors located in the European Union, the European Economic Area, the United Kingdom, or California. Visitors from these regions are not tracked by Microsoft Clarity or Google Analytics.

By using AALA.LAND, you acknowledge that you have read and agree to this Privacy Policy.