ALTCTRL INTELLIGENCE

Privacy Policy

Last updated: 31 May 2026
Effective date: 31 May 2026

AltCtrl Intelligence is built on a simple principle: data is sovereign. This policy explains what personal information we collect across our products, how we use it, and the rights you hold over it.

This Privacy Policy applies to the AltCtrl Intelligence corporate website (altctrl.ai) and to our three connected products: REOS, AltCtrl COS, and Résidanté (residante.com). It governs personal data relating to identifiable individuals. It does not apply to government-verified transaction records and other non-personal market data that power our intelligence layer, which are sourced from official institutions and handled under separate data-source agreements.

Contents

  1. Who We Are
  2. Scope & Products Covered
  3. Information We Collect
  4. How We Use Your Information
  5. Legal Bases for Processing
  6. Cookies & Analytics
  7. How We Share Information
  8. International Data Transfers
  9. Data Retention
  10. Data Security
  11. Your Rights
  12. Children's Privacy
  13. Third-Party Links
  14. Changes to This Policy
  15. Contact Us

1. Who We Are

AltCtrl Intelligence ("AltCtrl," "we," "us," or "our") is the intelligence layer of real estate, operating across the Gulf Cooperation Council (GCC) and wider MENA region. AltCtrl Intelligence is the data controller responsible for the personal information described in this policy.

For all privacy matters, you can reach us at privacy@altctrl.ai. Full contact details are in Section 15.

Note for the AltCtrl team: confirm the registered office address and the designated privacy/data-protection contact (and, where applicable, an EU/UK representative under GDPR) before publishing. Placeholders are marked in brackets throughout.

2. Scope & Products Covered

This policy covers personal data we process through:

Where a specific product handles data differently, we note it. Otherwise, the practices below apply across all three.

3. Information We Collect

3.1 Information you provide directly

CategoryExamplesWhere collected
Account & registration dataName, email address, phone number, password, company/organization, roleAll products
Contact & enquiry dataMessages sent via contact forms, "talk to us" requests, email sign-ups and newsletter subscriptionsAll products
Payment & billing dataBilling name, address, subscription tier, transaction records, and partial card details processed by our payment providerREOS, COS
Search & preference dataProperty search queries, saved searches, lifestyle preferences, budget ranges, and questions submitted to AI assistants (Emy, Hamza, Alex)Résidanté

3.2 Information collected automatically

When you visit our websites or use our products, we automatically collect technical and usage information, including IP address, device and browser type, operating system, pages viewed, referring URLs, session duration, and interactions with features. This is collected through cookies and similar technologies (see Section 6).

3.3 What we do not collect from you as personal data

Our market intelligence is built on government-verified transaction records sourced directly from official institutions (such as land departments, ministries of justice, regulatory authorities, central banks, statistical authorities, the IMF, and satellite imagery providers). These records describe properties and transactions, and are governed by our agreements with those sources. They are not personal data we collect from website visitors or users.

4. How We Use Your Information

We process personal data to:

We do not sell your personal information.

Where the EU/UK General Data Protection Regulation (GDPR) applies, for example, to visitors located in the European Economic Area or the United Kingdom, we rely on the following legal bases:

PurposeLegal basis
Providing your account and the services you requestPerformance of a contract
Processing payments and subscriptionsPerformance of a contract; legal obligation
Marketing emails and newslettersConsent (withdrawable at any time)
Analytics and non-essential cookiesConsent
Securing systems, preventing fraud, improving servicesLegitimate interests
Meeting legal and regulatory requirementsLegal obligation

Where we operate in the GCC, we process personal data in accordance with applicable data-protection laws, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), the Saudi Personal Data Protection Law (PDPL), and Qatar Law No. 13 of 2016 concerning Personal Data Privacy Protection. Where these laws require consent or another lawful basis, we obtain it accordingly.

6. Cookies & Analytics

We use cookies and similar technologies to operate our sites, remember your preferences, and understand how our services are used. We use:

Where required by law, we request your consent through a cookie banner before setting non-essential cookies. You can manage or withdraw consent at any time through our cookie settings or your browser controls. For more detail, see our Cookie Policy.

7. How We Share Information

We share personal data only as necessary, with:

We require all processors to protect personal data under terms consistent with this policy and applicable law.

8. International Data Transfers

We operate across the GCC and serve users in multiple countries, including the EEA and UK. As a result, your personal data may be transferred to and processed in countries other than your own, including outside the GCC and the EEA.

Where we transfer personal data internationally, we put appropriate safeguards in place, such as Standard Contractual Clauses or equivalent mechanisms recognized under GDPR and applicable GCC data-protection laws, and we transfer data only to jurisdictions or recipients that provide an adequate level of protection or where a valid transfer mechanism applies.

9. Data Retention

We keep personal data only for as long as necessary for the purposes set out in this policy, including to provide our services, comply with legal and tax obligations, resolve disputes, and enforce our agreements. Retention periods depend on the type of data and the reason we hold it; when data is no longer needed, we delete or anonymize it.

10. Data Security

We apply technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and monitoring. Our infrastructure is designed to institutional-grade standards. No method of transmission or storage is completely secure, but we work to protect your information and to notify you and relevant authorities of incidents where the law requires.

11. Your Rights

Depending on where you are located and the law that applies, you may have the right to:

To exercise any of these rights, contact us at privacy@altctrl.ai. We will respond within the timeframes required by applicable law. EEA/UK users may also complain to their local supervisory authority; GCC users may contact the relevant national data-protection authority.

12. Children's Privacy

Our products are intended for professionals and adults making real estate decisions. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will take appropriate steps to delete it.

13. Third-Party Links

Our sites and products may link to third-party websites and services that we do not control. This policy does not apply to those sites, and we encourage you to review their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated version here with a revised "Last updated" date, and where changes are material, we will provide additional notice as required by law.

15. Contact Us

For questions about this policy or your personal data, or to exercise your rights, contact:

AltCtrl Intelligence
Attn: Privacy / Data Protection
[Registered office address, to be confirmed]
Email: privacy@altctrl.ai
Website: altctrl.ai