Privacy Policy

1. Who we are

Namvio Web Services is a sole-proprietorship registered in India and is the controller for personal data it collects directly through DubaiPropertyLoan. Its registered address is Mochi Sahi, Karanjia, Mayurbhanj, Odisha, India, PIN 757037. For privacy questions write to contact@namvio.com.

When DubaiPropertyLoan processes mortgage applicants' documents on behalf of a broker, the broker is the controller of that data and Namvio Web Services acts as a processor. The relationship between Namvio Web Services and the broker for those activities is governed by the Data Processing Agreement.

2. Categories of personal data we process

We process the categories of data described below. Sensitive categories are only collected when a broker or client uploads them voluntarily as part of a mortgage application.

• Account data: name, email, phone, password hash, role (admin, broker, agent, client), company name, preferred language.
• Identity & residency documents: passport scans, Emirates ID, visa pages, residence proofs.
• Income & employment documents: salary certificates, employment letters, trade licences, bank statements.
• Property & loan documents: sale agreements, valuation reports, NOCs, title deeds.
• Communications: in-app messages between broker and client, support emails, contact-form submissions.
• Billing data: PayPal subscription identifier, plan, status, billing events; we never store full card numbers.
• Technical data: IP address, user-agent, device type, log timestamps, error traces, anonymised analytics events.
• Push subscription endpoints when a user opts in to browser notifications.

3. Purposes and legal bases

We process personal data only for defined purposes. Where data protection laws require a legal basis (for example the UAE Personal Data Protection Law for UAE individuals), we rely on one of the following: performance of a contract with the user, the user's consent, our legitimate interests in operating a secure service, and compliance with legal obligations applicable to Namvio Web Services.

• Operating the broker dashboard, client portal and document checklist (contract).
• Generating eligibility estimates and AI-assisted document summaries (contract + consent, see the AI Features Disclaimer).
• Billing and subscription management through PayPal (contract).
• Fraud detection, abuse prevention and security monitoring (legitimate interest).
• Service announcements, security notifications and transactional emails (contract / legitimate interest).
• Optional product updates by email (consent, withdrawable at any time).

4. Who can see what

Database-level Row Level Security restricts visibility to the minimum needed for each role. Administrators of Namvio Web Services can see all data for support, abuse handling and security. Brokers see only their own clients' data, scoped further to assigned agents on Agency-plan teams. Clients see only their own profile and the documents they upload. Files in the document storage bucket are private and served via short-lived signed URLs.

5. Sharing with third parties

We share personal data only with vendors who provide infrastructure or services we depend on, and only to the extent necessary. Current categories include: cloud database & object storage, edge compute & hosting, payment processing (PayPal), AI document analysis (Google Gemini), email delivery, analytics and monitoring. The list of named subprocessors is maintained in the Data Processing Agreement.

We do not sell personal data and do not share it for cross-context behavioural advertising.

6. International transfers

DubaiPropertyLoan operates from India and processes data on cloud infrastructure that may be located in multiple regions, including the European Union and the United States. Where applicable laws require transfer safeguards, Namvio Web Services relies on contractual protections with its subprocessors. See the International Data Transfer Policy for details.

7. Retention

We retain personal data only as long as needed for the purposes described in this Policy and as set out in the Document Retention Policy. Documents uploaded for a mortgage application are retained for the duration of the application plus a defined retention window so brokers can demonstrate diligence; thereafter they are deleted or anonymised.

8. Your rights

Subject to applicable law you may request access, correction, deletion, restriction or portability of your personal data, object to certain processing, or withdraw consent. To exercise a right contact contact@namvio.com. We respond within a reasonable period and at the latest within statutory deadlines. If you are unhappy with our response you may complain to your local data-protection authority.

9. Children

DubaiPropertyLoan is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact contact@namvio.com and we will delete it.

10. Security

We implement the technical and organisational measures described in the Information Security Policy, including encryption in transit and at rest, least-privilege access, audit logging and incident response. No system is perfectly secure; please use a strong unique password and enable available account-protection options.

11. Changes

We will update this Policy from time to time. Material changes will be announced in-app and by email to account holders. The "Effective" date at the top of this page reflects the latest version.

12. How to contact us

Privacy enquiries: contact@namvio.com. Postal address: Mochi Sahi, Karanjia, Mayurbhanj, Odisha, India, PIN 757037. Phone: +91 7735559290.