Privacy Policy

1. Introduction

Welcome to Nogbase ("we," "our," or "us"). Nogbase is a proptech CRM platform built for property developers, providing tools for pre-sales, broker management, unit releases, payment collections, and customer handovers. We are committed to protecting the privacy and security of our users' personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services (collectively, the "Services").

Nogbase is operated by EDGET FZ-LLC, a free zone limited liability company licensed by the Dubai Development Authority (licence no. 104818), In5 Tech, First Floor, Premises HD79A, Dubai Internet City, Dubai, United Arab Emirates. EDGET FZ-LLC is responsible for the personal data described in this policy. For the property, broker and customer records that our customers enter into the Nogbase apps, the customer decides how that data is used, and we process it on the customer's behalf.

2. Information We Collect

2.1 Information You Provide to Us

We collect information that you voluntarily provide when using our Services, including:

• Account Information: Name, email address, phone number, company name, job title, and password when you create an account.
• Profile Information: Professional details, profile photo, and preferences you choose to provide.
• Property and Transaction Data: Property listings, unit inventory details, pricing information, broker details, customer records, payment schedules, and handover documentation that you enter into the platform.
• Communications: Messages, inquiries, and other communications you send to us or through our platform.
• Payment Information: Billing address and payment method details when you subscribe to our Services. Payment processing is handled by third-party payment processors, and we do not store full credit card numbers.

2.2 Information Collected Automatically

When you use our Services, we may automatically collect certain information, including:

• Device Information: Device type, operating system, unique device identifiers, browser type, and browser version.
• Usage Data: Pages visited, features used, time spent on pages, click patterns, and other interaction data.
• Log Data: IP address, access times, referring URLs, and system activity logs.
• Cookies and Similar Technologies: Our website measures visits without cookies; the Nogbase apps use essential cookies for sign-in and security. See Section 7 for details.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you log in through a social media account (such as Facebook or Google), we may receive your name, email address, and profile picture as permitted by your social media account settings.
• Business Partners: Information from our partners, integrations, or third-party services that you connect to your Nogbase account.
• Public Sources: Publicly available information relevant to property development and real estate records.

3. How We Use Your Information

We use the information we collect for the following purposes, each with the legal basis shown in brackets:

• Provide and Maintain Services: To operate, deliver, and improve our CRM platform and related services (performance of our contract with you or your organisation).
• Respond to Enquiries: To reply to contact, demo and onboarding requests you send through our website (our legitimate interest in responding, or steps you ask us to take before a contract).
• Account Management: To create and manage your account, authenticate your identity, and provide customer support (performance of contract).
• Communication: To send you service-related notifications, updates, security alerts, and support messages (performance of contract).
• Analytics and Improvement: To analyze usage patterns, diagnose technical issues, and improve our Services (legitimate interests).
• Marketing: To send promotional materials and information about new features, with your consent where required by law. You can opt out of marketing communications at any time (consent).
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests (legal obligation).
• Security: To detect, prevent, and address fraud, unauthorized access, and other illegal activities (legitimate interests and legal obligation).

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with third-party vendors who perform services on our behalf, such as hosting, analytics, payment processing, email delivery, and customer support. These providers are contractually obligated to protect your information. For our website they are Netlify (hosting and form submissions), PostHog (cookieless website analytics, hosted in the EU), Calendly (when you book a demo) and Google (the platform tour video you choose to play on YouTube, and the "Add to Preferred Sources" button in our footer). If you message us on WhatsApp, that conversation is also processed by WhatsApp under its own terms.
• Within Your Organization: Information may be shared with other authorized users within your organization's Nogbase account as determined by your account administrator.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.
• Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
• Protection of Rights: We may disclose information to protect the rights, property, or safety of Nogbase, our users, or the public.
• With Your Consent: We may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our Services. We may also retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. When your information is no longer needed, we will securely delete or anonymize it.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and secure development practices. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Cookies and Tracking Technologies

Our website does not use advertising or marketing cookies, and its analytics do not store anything on your device:

• Website Analytics: PostHog (hosted in the EU) measures visits in cookieless mode, using a privacy-preserving hash instead of a cookie or device identifier.
• Preferences: The website may keep a display setting in your browser's local storage.
• Embedded Content: The platform tour video loads from YouTube's privacy-enhanced domain only when you press play. The Google "Add to Preferred Sources" button in our footer loads a Google script, and Google may read its own cookies under Google's privacy policy.
• Nogbase Apps: The apps use essential cookies for sign-in, session management and security.

You can block or delete cookies in your browser settings. Blocking essential cookies may stop the apps from working.

8. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to certain legal exceptions.
• Portability: Request a copy of your data in a structured, commonly used, and machine-readable format.
• Objection: Object to the processing of your personal information for certain purposes.
• Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time.
• Opt-Out of Marketing: Unsubscribe from marketing emails by clicking the "unsubscribe" link in any marketing email or by contacting us.

You also have the right to complain to a data protection authority: in the UAE, the UAE Data Office; in the EU or EEA, the supervisory authority where you live. To exercise any of these rights, please contact us using the information provided in Section 13.

9. Third-Party Links and Services

Our Services may contain links to third-party websites, services, or applications that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

10. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from your jurisdiction. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy when transferred internationally. Where our providers process data outside the UAE or the EEA, we rely on their data processing agreements, including standard contractual clauses where required.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on our website and updating the "Last Updated" date.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

14. Data Processing for Meta Platform Integration

When you interact with Nogbase through Meta platforms (Facebook, Instagram), we may collect and process data in accordance with Meta's Platform Terms. This includes:

• Facebook Login Data: If you use Facebook Login, we receive your public profile information (name, profile picture, email address) as authorized by your Facebook privacy settings.
• Data Deletion: You may request deletion of data collected through Meta integrations by contacting us at privacy@nogbase.ae or through the data deletion instructions provided in your account settings. We will process deletion requests within 30 days.
• Data Use Limitations: Data obtained through Meta platform integrations is used solely for providing and improving our Services and is not shared with third parties except as described in this Privacy Policy.

15. AI Assistant Connectors (ChatGPT, Claude, and Codex)

You can connect your Nogbase account to an AI assistant you use, such as ChatGPT, Claude, or Codex. The connection is optional, read-only, and starts only when you sign in to Nogbase and approve it on our consent page. Each connection is limited to your user account and the one workspace you choose at approval, and to the permissions you already have in Nogbase.

• What the assistant receives: Only the results of the requests it makes on your behalf: records and collection schemas your workspace can read (for example projects, units, prices, payment plans, and sales offer details), file names and other file metadata, a five-minute link when you ask to open a specific file, and your display name, profile picture, and role together with your company's public branding (name, logo, address, phone, public contact email, website).
• What it never receives: Your password, your personal email address, bank or tax details, secrets, another company's private information, or data outside your workspace and permissions. The connector cannot create, change, or delete anything in Nogbase.
• What we keep: Access tokens expire after one hour and renewal tokens after 30 days of inactivity. Our request logs record the time, the assistant, the workspace, the tool used, and whether it succeeded, but not what you asked or what was returned. Opening a file also creates an audit record of that access.
• The AI provider: The assistant you connect is operated by its provider (for example OpenAI or Anthropic), not by Nogbase, and is not our service provider. What the provider stores from your conversations, including the data Nogbase returned, is governed by your agreement with that provider and its privacy policy.
• Disconnecting: Disconnect Nogbase in the assistant's settings at any time, which ends the connection immediately. You can also ask us to revoke every AI connection on your account by contacting privacy@nogbase.ae. A connection also stops working as soon as your account or your membership of the workspace is deactivated.