Privacy, in short

Dardaris is the product; the company that operates and commercialises it is who you are dealing with, and who this notice means by "we". It is Techroun LLC, established in Sharjah, the United Arab Emirates, which is outside the European Economic Area and outside the United Kingdom. The law in each asks a company in that position to designate a representative there, and the full policy says where that stands and who to write to.

For your account, your sign-ins, your billing and our own administration, we are the controller and this notice describes it. For the content you put in about tenants, guarantors and contractors, you are the controller and we act for you under a data processing agreement. Which role applies is a question of fact, and both can apply to different parts of the same screen.

Your name and business contact details, a verifier derived from your password or a passkey's public key, records of sign-ins and sessions, billing details, your messages to support, how the product is used, everything you put into your portfolio, and what the AI features read and produce from it. A beta request keeps the address you gave us. A message through the contact form is kept in our support mailbox like any other correspondence. If you connect a bank, we also hold the accounts and movements you chose to share, which can name a tenant.

Only if you accept them, and nothing analytical runs before you answer. They carry a pseudonymous identifier and your account id, never your name and never anything from your portfolio. One server-side event records that an account's portfolio was created, carrying the account id and nothing else, on a legitimate interest rather than on your consent, because it places nothing on your device.

On Cloudflare, with analytics in PostHog's European Union cloud. The standard service carries no data residency commitment: a database has one primary location, but requests, backups, metadata and support access are not confined by it. If a region is mandatory for you, ask before you sign up, and treat only a signed document as a commitment.

Our seat is outside the European Economic Area and has no adequacy decision, so our access to your data is a transfer even though the data stays where it is. It rests on the European Commission's standard contractual clauses, with the UK and Swiss adaptations where they apply, and we will send you what we rely on if you ask.

The product keeps a copy of the portfolio on your device so a screen can draw before the network answers. It contains data about other people, not only about you. Signing out removes it, and so does clearing site data. Use a device you trust, and sign out on a shared one.

Our named providers, the customer whose account it is, our own people under confidentiality, our advisers and insurers, an authority where the law requires it, and a buyer or successor in a corporate transaction. We do not sell personal data and we do not share it for behavioural advertising. If you connect a bank, it is read by one of two services and we work out which reaches your bank. Ponto, a service of Isabel NV in Belgium, receives your name and email and your team's details until your team has connected once, and your IP address when you link an account or ask for a refresh. Plaid, which we use for the banks Ponto does not reach, receives an identifier that names neither you nor your team, and processes in the United States as well as in Europe. Each acts under its own licence and terms, not as our processor. When your team's plan ends, we end its bank connections ourselves.

Your content while the account is open and 30 days after it closes, with the provider's database history running up to 30 days behind that. Support mail 24 months, security logs 90 days, analytics 12 months, the beta list 12 months. Sessions expire after 7 days unused and sign-in codes after 5 minutes. The full policy has the whole table.

Four direct: Cloudflare for hosting, the database, the store your files sit in, outbound mail and some of the AI models the product runs on; OpenAI for the rest of those models; PostHog for analytics; and Stripe for taking payments. All four use sub-processors of their own, which they publish and which count as part of our list. Nothing goes to any other model provider, and if that changes we name it before a document reaches it. OpenAI processes in the United States, so a document read there leaves the EEA and the UK, and it keeps its own copy for up to 30 days to investigate abuse. Stripe processes in the United States as well, and for its own fraud and regulatory checks it acts on its own account rather than for us.

Where a feature needs it, your content and your documents are read by machine learning models: to index and search the portfolio, to answer a question about it, to read a figure out of a document, and to run the automations you switched on. The models run on Cloudflare and on OpenAI, and assume either read a given document. A feature that answers without a model sends nothing to one, and storing a file is not the same as reading it. Your content is never used to train a general purpose or shared model and is never pooled with another customer's.

An output is a probability, not a finding: check it before you act on it. Every action still carries a tier, the rules can only make it stricter, and what it does is written to an audit record. It must never be the sole basis of a decision about somebody's housing, tenancy, creditworthiness or eviction, and you must not use it that way.

Access, correction, deletion, restriction, objection, portability, and a change of answer on analytics at any moment. They are subject to the conditions the law attaches to them. Write to us and we answer within a month, or tell you why we need longer. A complaint goes to the UAE Data Office for the company at home, or, because we have no main establishment in the Union and so no lead authority there, to your own supervisory authority anywhere in the European Economic Area.

We do not sell personal information and we do not share it for cross-context behavioural advertising, in the statutory sense of those words. You may have rights to know, access, correct, delete, opt out, limit the use of sensitive information and appeal a refusal, and we will not treat you worse for using them.

Password verifiers rather than passwords, a six-digit code before a first sign-in, passkeys, rate limits at the edge, HTTP-only session cookies, encryption in transit and a database that is not reachable from the public internet. No service is completely secure and we do not claim to be.