Legal

Privacy policy

Last updated · 16 April 2026

1. What we collect

When you apply for access we collect your full name, work email, UAE mobile number, RERA broker registration number, company trade license, and identity documents (via Sumsub). Once on the exchange we collect the listings you post, the offers you make, the messages you send in-platform, and timestamps of every material action.

2. Why we collect it

Identity data is used to verify that every counterparty is a real, RERA-licensed UAE broker. Activity data is used to operate the exchange (showing you relevant deals, calculating reputation, and preserving evidence for commission disputes).

3. Who we share it with

  • Sumsub (identity verification & liveness check) — receives identity documents for automated review.
  • Supabase (hosting, database, storage) — hosts the application data in EU-Central-1.
  • Vercel (edge hosting) — serves the web interface.
  • Resend (transactional email) — sends account and deal notifications.
  • Twilio (SMS OTP) — delivers one-time codes for phone verification.

We do not sell data. We do not share identity documents with other brokers, buyers, or sellers.

4. Non-circumvention evidence

Because FASTRE's commercial model depends on the Non-Circumvention Agreement, we retain evidence of viewings, signings, and communications indefinitely. This is consistent with what any transacting brokerage does.

5. Your rights

You can request a copy of your data, correct inaccurate data, or ask us to close your account. Certain evidence (agreements, logs related to past transactions) is retained for legal reasons even after account closure.

6. Contact

Privacy questions: privacy@fastre.ae.