Privacy Policy

Last updated: 22 July 2026

This policy explains what Doment collects, why, and the control you have over it — both for the property app and website, and for the CRM used by real-estate agencies.

The short version. Browsing and searching properties on our website or app needs no account and collects no personal data about you. Doment is also a CRM used by Dubai real-estate agencies: when an agency uses it, its team signs in to a private workspace and stores its own business records — including details of its clients — and may message those clients by WhatsApp and email. We never sell data, show ads, or use advertising trackers. Anyone we message on an agency’s behalf can opt out at any time — reply STOP on WhatsApp, or use the unsubscribe link in an email — and we stop.

Who we are

Doment (“we”, “us”) operates the Doment iOS app, the website at doment.ai, and the Doment CRM used by real-estate agencies. For any privacy question, contact [email protected].

Two ways Doment is used

As a property app and website, by anyone browsing Dubai projects. This needs no account; an optional sign-in only lets you save properties.
As a CRM, by real-estate agencies. An agency’s team signs in to a private workspace to manage its leads, deals, proposals, finances and client communication. Here the agency decides what client information to collect and why — it is the data controller — and Doment processes that information on the agency’s instructions to provide the service.

What we collect

Nothing, to browse. Viewing and searching properties requires no account and collects no personal information about you.
Account data, if you sign in. When you sign in with Apple or Google we receive your name and email from that provider to identify your account; Sign in with Apple’s private-relay email is fully supported. An agency team member also has a role (owner, admin, manager or agent) inside their workspace.
Saved properties. Projects you save are stored against your account so they appear across your devices.
Business and client records (CRM). When an agency uses the CRM, its team enters and stores the agency’s own records — leads and their contact details (name, phone, WhatsApp, email), what they are looking for, notes, deals, proposals, commissions and other finance entries, tasks, and the history of communication with them. This information belongs to the agency; we hold it on the agency’s behalf.
Communications we send for an agency. To deliver proposals and messages, we send WhatsApp messages and emails to the recipients an agency chooses, and we keep a record of what was sent, to whom, and when.
Basic technical logs. Like any service, our servers keep short-lived request logs (such as IP address and timestamp) for security and reliability. These are not used to build a profile of you.

Consent and opting out

Messages we send on an agency’s behalf always offer a way out. On WhatsApp, replying STOP (or its equivalent in your language) unsubscribes you; every message email carries a one-click unsubscribe link. An address that opts out — or an email that repeatedly bounces — is added to a per-agency do-not-contact list and is not messaged again unless you opt back in (reply START). Agencies are responsible for having a proper basis to contact their clients in the first place; the opt-out is honoured regardless.

How we use information

Only to provide the service: to sign you in, keep your saved properties, run an agency’s CRM (matching clients to properties, building and sending proposals, tracking deals and finances, and the AI assistant), deliver the messages an agency asks us to send, and keep everything secure and working. We do not use it for advertising, and we do not sell it.

Service providers we rely on

We use a small number of trusted providers to run specific features, and share only what each needs to do its job:

Apple and Google — to sign you in. Your use of those options is also governed by Apple’s and Google’s policies. We never receive your password.
AI providers (OpenAI, and where enabled Anthropic) — to power the assistant, transcribe voice notes, read requirements from text, and draft proposal and ad content. Text or audio you send to these features is processed to perform the action you asked for and, under our providers’ API terms, is not used to train their models.
Voice and media generation (ElevenLabs, and image/video providers) — to produce narration and marketing visuals.
Messaging delivery — WhatsApp, through an agency’s own connected number, and email, through the agency’s or our mail server, to deliver the messages an agency sends.
Hosting — our own servers, where your data is stored.

We do not use third-party advertising or analytics SDKs, there is no advertising identifier (IDFA), and there is no cross-app or cross-site tracking.

Property information

The property data — projects, prices, payment plans, transaction figures — is compiled from public Dubai Land Department (DLD) records and third-party real-estate sources. It is information about properties, not about you, and each figure carries its source and a confidence level.

Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and comparable rules, you may ask to access, correct, or delete your personal data, and object to certain uses. If your data sits inside an agency’s CRM, that agency controls it — contact them first, and we will support them (or you) in acting on the request. For your own account, or a general query, email [email protected].

Retention and deletion

We keep account data for as long as the account exists, and an agency’s records for as long as its workspace is active. App users can delete their account at any time in the app (Settings → Delete Account), which permanently removes the account and its saved properties. Inside the CRM, deleted records go to a recoverable bin and are then permanently purged; deactivating a team member keeps the records they created intact for the agency. An agency can ask us to export or delete its data. Email [email protected] for any deletion request.

Data location and security

Your data is stored on our servers and protected with industry-standard measures, including encrypted (HTTPS) transport and encryption of particularly sensitive fields such as stored mail-server passwords. No system is perfectly secure, but we limit what we collect and who can reach it — each agency’s workspace is isolated, and access is enforced by role on every request.

Children

Doment is intended for adults working with or evaluating real estate and is not directed at children. We do not knowingly collect data from children under 13.

Changes

We may update this policy as the product evolves. Material changes will be reflected here with a new “last updated” date.

Contact

Questions about privacy, or a data request: [email protected].