Privacy Policy

Sidra is a property portfolio management platform operated by Redwood Heritage Private Office LLC, a company incorporated in the Emirate of Dubai, United Arab Emirates (DIFC). References to "Sidra", "we", "us" or "our" in this policy refer to that entity.

For data-related enquiries, contact us at asa@redwoodheritage.com.

We collect information you provide directly when you create an account, add properties, tenants, leases, and payment records to the platform. This includes:

• Account data: name, email address, phone number.
• Portfolio data: property addresses, purchase prices, valuations, Ejari contract numbers, tenant names and passport/Emirates ID numbers, lease terms, rental amounts.
• Payment data: payment records, cheque details, PayTabs transaction references. We do not store full card numbers — payment processing is handled by PayTabs, a PCI-DSS Level 1 certified provider.
• Usage data: pages visited, features used, browser type, IP address, and session timestamps — collected automatically via server logs and analytics.

• To provide, maintain and improve the Sidra platform.
• To send transactional communications — lease expiry alerts, rent reminders, maintenance updates.
• To calculate DLD Smart Rental Index figures and generate compliance reports.
• To respond to your queries via the Relationship Manager or AI Manager.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with UAE federal and emirate-level laws, including RERA regulations and DLD requirements.

We do not sell your personal data. We share data only in the following circumstances:

• Service providers: PayTabs (payment processing), OpenAI (AI Manager — queries are not used for model training), Clerk (authentication), Vercel / AWS (infrastructure).
• Regulatory bodies: Where required by UAE law, we may disclose data to DLD, RERA, or law enforcement authorities.
• Business transfers: In the event of a merger or acquisition, your data may transfer to the successor entity, subject to equivalent protections.

We retain account and portfolio data for the duration of your subscription and for 7 years after account closure, in compliance with UAE Commercial Transactions Law (Federal Law No. 18 of 1993) and RERA record-keeping requirements. You may request earlier deletion of personal data (excluding legally mandated records) by contacting us at the address above.

Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to production systems is restricted to authorised personnel and logged. We conduct periodic security reviews and promptly address identified vulnerabilities.

Subject to UAE law, you have the right to access, correct, or request deletion of your personal data. To exercise these rights, email asa@redwoodheritage.com. We will respond within 30 days.

We may update this policy from time to time. We will notify you of material changes via email or a prominent notice within the platform at least 14 days before the change takes effect.