Privacy Policy
1. Who we are
Pillar OS is a property portfolio operating dashboard for Dubai landlords, operated by Pillar OS (operated from Dubai, UAE) (“we”, “us”). For the EU/UK GDPR and the UAE Personal Data Protection Law (UAE PDPL), we are the data controller for personal data about our account holders. For documents you upload that contain other people’s data (such as tenants), see section 6. Privacy contact: privacy@getpillaros.com.
2. The data we collect
- Account & identity: name, email, profile picture and Google account ID via Google sign-in. We never receive your Google password.
- Portfolio data you enter: building, unit, size, purchase price/date, lease terms, rent, service charges, mortgage details.
- Uploaded documents: title deeds, Oqood registrations, Ejari/tenancy contracts, service-charge statements, SPAs, payment plans.
- Extracted data: structured fields read automatically from those documents.
- Payment data: subscription tier and billing status via Stripe — only once paid billing is live.
- Technical & usage data: IP address, device/browser, pages used, security and rate-limit counters.
We do not connect to your bank and have no open-banking or payment-account access.
3. Why we use it
To run your account and provide the dashboard, alerts and generated documents (to perform our contract with you); to extract data from your documents; for security, rate-limiting and abuse prevention (our legitimate interests); for billing and legal/tax records; and — only if you opt in — for product analytics or marketing. Where we rely on consent, you can withdraw it at any time.
4. Automated document extraction
When you upload a property document, its contents are sent to Anthropic (the Claude API provider) to read it and return structured fields. The document may contain third-party data — most importantly tenant details in an Ejari/tenancy contract — which is transmitted as part of the file. Anthropic processes this content on its systems in the United States (see section 8).
Anthropic handles that content under its own terms and policies. We do not separately control how Anthropic stores, retains or processes data on its systems. Only upload documents you are comfortable having processed on this basis.
5. (See above) — extraction details
The extraction is automated and does not make any legal or significant decision about you; extracted fields are shown to you to confirm or edit.
6. Documents containing other people’s data
Some documents you upload contain personal data about others, chiefly your tenants. For that content, you are the controller and confirm you have a lawful basis to upload and process it through Pillar OS; we process it on your behalf to provide the service. Do not upload documents you have no right to process.
7. Who we share data with
We do not sell your data. We share it only with providers who help run Pillar OS:
- Supabase — database, authentication and file storage, hosted in Frankfurt, Germany (EU).
- Anthropic — automated document extraction, processed on Anthropic’s systems in the United States under Anthropic’s own terms and policies.
- Google — sign-in.
- Vercel — application hosting.
- Upstash — rate-limiting counters (no document content).
- Stripe — subscription payments, once live.
- Google (Analytics / Ads) and Meta (Facebook/Instagram Pixel) — website analytics and advertising on our public marketing/sign-in pages only, and only with your consent (see below).
- Dubai Land Department / Dubai Pulse open data — we send no personal data; we only retrieve public transaction and index data for valuations and benchmarking.
Analytics & advertising. With your consent (via our cookie banner) we use Google and Meta on our public marketing and sign-in pages only, to see where visitors come from and to run and measure ads. They set non-essential cookies and may receive limited browsing data (such as device and the marketing pages you viewed). They are never loaded inside the signed-in app, and we never send them your name, email, Emirates ID, or any document content. You can withdraw consent at any time via the cookie banner.
8. International transfers
Your core account and document data is stored in the EU (Frankfurt). Document extraction sends content to Anthropic in the United States, and sign-in involves Google. Where data leaves the UAE/EU we rely on appropriate safeguards (such as Standard Contractual Clauses or the UAE PDPL cross-border transfer conditions).
9. Your rights
Subject to applicable law you can access, correct, delete, export, object to or restrict processing of your data, withdraw consent, and complain to a supervisory authority. You can delete individual units, documents, or your whole account from within the app. Contact privacy@getpillaros.com.
10. How long we keep data
We keep your data while your account is active, and delete or anonymise it within 90 days of account closure, except where law requires longer retention. Document files are removed from storage when you delete the related unit, document, or account.
11. How we protect your data
Row-level security so each account only accesses its own data; encryption in transit; server-side-only secrets; per-user and global rate limiting; and short-lived signed URLs for document downloads.
12. Children
Pillar OS is for adults (18+) and is not directed at children.
13. Changes & contact
We will notify you of material changes and update the date above. Questions: privacy@getpillaros.com.