Privacy policy
How musayda collects, uses, and protects personal data when agencies use our platform and when buyers interact through connected channels.
1. Who we are
musayda ("we", "us") provides a B2B SaaS platform for real estate agencies in the Middle East and GCC. Our website is musayda.com. For privacy inquiries: privacy@musayda.com.
2. Scope
This policy covers:
- Visitors to musayda.com
- Agency staff who use the musayda Client Portal
- Buyer/end-user data processed on behalf of agencies through WhatsApp, Instagram, Facebook, ads, and website chat integrations
Agencies are data controllers for buyer lead data. musayda acts as a data processor when handling buyer conversations and lead records on an agency's behalf, subject to applicable agreements.
3. Information we collect
Agency users
- Account details: name, email, role, agency affiliation
- Authentication data via Amazon Cognito
- Usage data: feature usage, plan consumption (leads, AI replies, broker seats)
- Support and communication records
Buyer / lead data (on behalf of agencies)
- Contact details and messaging content from connected channels
- Qualification data extracted by AI: budget, location, property preferences, timeline
- Lead scores, status, campaign attribution (Meta/Google ad IDs where applicable)
- Appointment and viewing records
Website visitors
- Standard server logs, cookies, and analytics (see Cookie Policy)
- Demo request information you voluntarily submit
4. How we use data
- Provide, operate, and improve the musayda platform
- Run AI qualification, property recommendations, and broker assignment
- Sync ads metrics and generate insights for agency marketing teams
- Send service notifications, hot-lead alerts, and digests configured by agencies
- Ensure security, prevent abuse, and comply with legal obligations
5. Sharing & subprocessors
We use trusted infrastructure and service providers including AWS (hosting, storage, Cognito), LLM providers (OpenAI, Anthropic, Google — as configured by platform operators), and messaging APIs (Meta WhatsApp/Instagram, Google Ads). We do not sell personal data.
6. Retention
We retain data for as long as an agency's subscription is active and as required by law or legitimate business needs. Agencies may request deletion subject to contractual terms and regulatory requirements.
7. Security
See our Security page for technical safeguards including encryption, tenant isolation, and access controls.
8. Your rights
Depending on jurisdiction (including UAE and GDPR where applicable), individuals may have rights to access, correct, delete, or restrict processing of personal data. Agencies should direct buyer requests to their own privacy processes; musayda assists agencies as processor where required.
9. International transfers
Data may be processed in AWS regions including the United States. We apply appropriate safeguards for cross-border transfers.
10. Changes
We may update this policy. Material changes will be posted on this page with an updated date.