Privacy Policy

1. Who holds your data

Urmmez is operated by MLS Global, a UAE free zone company. The registered entity, its address and the data protection contact are pending client confirmation and will be named here before launch.

2. What we collect

Account details: your name, email address and a hashed password. We never store the password itself.

Move details: the answers you give in onboarding, such as move type, household, priorities and budget band, plus the checklist and the area matches built from them.

Documents: files you upload to your vault, such as passport scans or tenancy papers, with their file name and type.

Requests you make: introduction requests to Partners, VIP enquiries and questions you send to the AI Concierge.

Basic technical data needed to run the service, such as your session and error logs. We do not run advertising trackers.

3. Why we hold it

To build and run your move plan, to answer your questions, to make the introductions you ask for, and to keep your account secure.

We do not sell your data, and we do not hand it to Partners unless you ask for that introduction.

4. Email

Service email, such as your welcome message or an update about a request you made, is part of the service and is sent whether or not you opted into updates. Every send is recorded in our outbox so we can show what was sent and when.

Product update email is separate and optional. We only send it if you ticked the box at signup, and turning it off on your account page clears the marketing consent record straight away.

5. Who else sees it

Partners see only what an introduction needs: your name, your contact details and what you asked for. They receive it when you request the introduction, not before.

Our staff see what their role needs to run your case, and every admin change is written to an internal audit log that records the action and the record, never the content.

Service providers we use for hosting, email delivery, file storage and the AI model process data on our instructions. The final list of those providers is pending and will be published here.

6. The AI Concierge

Questions you send to the AI Concierge are processed by a third party model provider to produce the answer, and the exchange is stored with your account so the thread makes sense next time.

Please do not paste passport numbers, bank details or full documents into the chat. Documents belong in your vault, where they are not sent to the model.

7. Where it is held and for how long

Data is held on cloud infrastructure in a region confirmed at launch, with transfers protected by standard contractual safeguards.

We keep your data while your account is open. Delete the account and the move, checklist, documents and profile go with it. Records we are required to keep, such as billing records once billing is live, are kept for the period the law requires.

8. Your choices

You can ask for a copy of your data, ask us to correct it, withdraw marketing consent or delete your account.

Your account page does all four without asking us: it shows what you consented to and when, exports your data as a JSON file, turns marketing email off, and deletes the account. Document files are downloaded from your vault one by one and are not inside the export.

9. UAE notice (placeholder)

For people in the UAE, this section will set out rights under the UAE Personal Data Protection Law, Federal Decree Law No. 45 of 2021, including access, correction, deletion, restriction of processing, withdrawal of consent and complaint routes.

The exact wording, the free zone regime that applies to the licensed entity and the named contact are pending legal review.

10. United States notice (placeholder)

For people in the United States, this section will carry the state privacy notices that apply to the first corridor, including the California disclosures on categories collected, disclosure for business purposes, the right to delete and the confirmation that we do not sell personal information.

The exact wording is pending legal review.

11. Security

Passwords are hashed, access is limited to staff who need it, admin changes are logged, and uploaded documents are held in private storage that is only readable through your signed in account.

No system is perfect. If a breach affects you we will tell you and the relevant regulator within the time the law allows.

12. Children

Accounts are for adults. Children can appear in your move profile as ages or age bands, because schooling and visas depend on them, and children do not hold accounts of their own.

13. Changes and contact

When this policy changes materially we will tell account holders by email and change the date at the top of this page. The published privacy contact address is pending client confirmation.