brassBack to home

Privacy Policy

Last updated: June 10, 2026

Introduction

BRASS is a product of Aleph Digital Platforms (“we,” “us,” or “our”). This Privacy Policy describes how we collect, use, and handle personal data when you use the BRASS platform and related services (the “Service”). This policy should be read together with our Terms of Service, which include important limitations of liability and indemnification provisions.

By using the Service, you acknowledge that you have read and understood this Privacy Policy. Where required by applicable law, including the UAE Personal Data Protection Law (PDPL), we process personal data in accordance with this policy and applicable legal requirements.

Roles and Responsibilities

For account-related personal data (such as your name, email, and billing information), Aleph Digital Platforms acts as the data controller.

For personal data you upload about your customers, tenants, employees, or other third parties (“Business Data”), you are the data controller and we act as a data processor on your behalf. You are solely responsible for:

  • Determining the lawful basis for collecting and processing Business Data.
  • Obtaining all required consents, notices, and authorizations from data subjects.
  • Ensuring your use of the Service complies with all applicable data protection laws.
  • The accuracy, legality, and appropriateness of Business Data you upload.

We process Business Data only as necessary to provide the Service and as instructed by you through your use of the Service. We are not responsible for your compliance obligations as a data controller.

The Data We Collect

Personal data means information relating to an identified or identifiable individual. We may collect:

  • Identity Data: Name, username, organization name, or similar identifiers.
  • Contact Data: Email address, phone number, and physical address.
  • Account Data: Subscription details, billing information, team membership, and feature usage.
  • Technical Data: IP address, browser type, device information, operating system, and access logs.
  • Usage Data: Information about how you interact with the Service, including AI-powered features.
  • Business Data: Customer records, contract details, and other operational data you enter into BRASS.

How We Collect Personal Data

  • Direct interactions: When you create an account, subscribe, contact us, or submit forms.
  • Automated technologies: Through cookies, server logs, and similar technologies when you use the Service.
  • Third-party integrations: From payment providers, authentication services, or other integrations you enable.
  • Your uploads: Business Data and other content you or your team submit to the Service.

How We Use Personal Data

We use personal data to:

  • Provide, operate, maintain, and improve the Service.
  • Process subscriptions, payments, and account management.
  • Communicate with you about the Service, updates, and support requests.
  • Monitor usage, troubleshoot issues, and protect against fraud or abuse.
  • Comply with legal obligations where required by applicable law.
  • Pursue legitimate business interests, where permitted by law and not overridden by your rights.

We do not sell your personal data. We may use aggregated or de-identified data for analytics and service improvement without restriction.

Data Sharing and Third-Party Processors

We may share personal data with trusted third-party service providers who assist us in operating the Service (such as hosting, payment processing, email delivery, and analytics). These providers process data on our instructions and are contractually required to protect it.

We may also disclose personal data if required by law, court order, or government request, or when we believe disclosure is necessary to protect our rights, safety, or property, or that of others.

We are not responsible for the privacy practices of third-party services you choose to integrate with or link to from the Service.

Data Security

We implement reasonable commercial security measures designed to protect personal data against unauthorized access, alteration, or disclosure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for safeguarding your account credentials and for the security of devices and networks you use to access the Service. You should maintain your own backups of important Business Data.

Data Retention

We retain personal data only for as long as reasonably necessary to provide the Service, fulfill the purposes described in this policy, or comply with legal obligations. Retention periods may vary based on data type and applicable requirements. We may delete data upon account termination, subject to any legal retention obligations.

International Data Transfers

Personal data may be processed or stored in the UAE or other countries where we or our service providers operate. Where transfers occur outside the UAE, we take steps required by applicable law to ensure appropriate safeguards are in place.

Your Rights

Depending on applicable law, including the UAE PDPL, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, or to withdraw consent where processing is consent-based. To exercise rights relating to account data, contact us at the address below.

Requests relating to Business Data you control should be directed to you as the data controller. We will assist you in responding to such requests to the extent required by applicable law and technically feasible.

We may require identity verification before processing requests and may decline requests that are unfounded, excessive, or prohibited by law.

Limitations and Indemnification

To the fullest extent permitted by applicable law, our liability arising from this Privacy Policy or our handling of personal data is subject to the disclaimers, limitation of liability, and indemnification provisions in our Terms of Service.

You agree to indemnify and hold harmless Aleph Digital Platforms from any claims, fines, penalties, damages, or expenses arising from your collection, upload, or processing of Business Data in violation of applicable law, lack of proper consent or legal basis, or breach of this Privacy Policy or the Terms of Service.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect when posted with an updated “Last updated” date. Continued use of the Service after changes constitutes acceptance.

Contact Us

For privacy-related questions or to exercise your rights, contact us at support@rentwithbrass.com.