In short
- We collect what we need to run your account and bill you: your email, your name, sign-in sessions and your plan.
- Card details go straight to Stripe; we never see or store them.
- We use only strictly necessary cookies. No advertising or tracking cookies.
- We don't sell your data. You can ask for a copy or delete your account at any time.
Who is responsible
[COMPANY NAME], [COMPANY ADDRESS], Dubai, United Arab Emirates, is the controller of your personal data for Urbiview. Contact: hello@urbiview.com [PRIVACY EMAIL].
What we collect and why
| Data | Why | Basis |
|---|---|---|
| Email address, name; your Google account id if you sign in with Google | Create and secure your account, sign you in, send sign-in codes and service emails | Contract |
| Sign-in sessions: device and browser type, country, time of sign-in and last use | Keep you signed in, let you see and end your sessions, detect misuse | Contract; legitimate interest in security |
| Plan and subscription status, Stripe customer id, acceptance of these terms | Give you the features you pay for, manage trials and renewals | Contract |
| Billing name, address, company name and TRN, payment card (held by Stripe) | Take payment, calculate VAT and issue tax invoices | Contract; legal obligation (tax records) |
| Messages you send us through the contact form or by email | Reply to you, set up team and enterprise plans | Legitimate interest; steps before a contract |
| Technical logs: IP address, requests, errors | Run, secure and fix the service; enforce rate limits and the acceptable use terms | Legitimate interest |
| Audit records of sign-ins, plan changes and admin actions | Security, support and accounting | Legitimate interest; legal obligation |
Your map settings (layers, saved calculator assumptions) are stored in your own browser, not on our servers. We don't ask for sensitive personal data and don't make automated decisions that have legal effects on you.
Who processes it for us
We use these providers, each bound to process data only on our instructions or under their own privacy terms for the service they provide:
- Cloudflare: hosting, content delivery, database, bot protection (Turnstile) and security.
- Stripe: payments, subscriptions, tax calculation and invoices.
- Resend: sending sign-in and service emails.
- Google: sign-in with Google, when you choose it; map imagery and web fonts loaded by your browser.
- Map and code libraries loaded by your browser from CARTO, unpkg and jsDelivr, which receive your IP address as part of the request.
We may also disclose data when the law requires it, or to a buyer of the business under equivalent protections.
Transfers outside the UAE
Some providers store or process data outside the UAE, including in the EU and the United States. Where we do this we rely on the provider's contractual safeguards (such as standard contractual clauses) and the conditions of UAE law for cross-border transfers.
How long we keep it
- Account data: while your account is open. When you delete your account we remove your user record, memberships and sessions, and anonymise audit records.
- Sign-in codes and links: 1 day after they expire. Sessions: 30 days after they end.
- Payment events: 90 days. Records of emails sent (not their content): 180 days. Audit records: 2 years.
- Invoices and payment records held by Stripe: as long as tax law requires (in the UAE generally at least 5 years).
- Contact messages: up to [2 years] after our last exchange.
Cookies
We set only cookies that are strictly necessary: to keep you signed in, to protect sign-in from abuse, and to remember a sign-in in progress. They are not used for advertising or tracking, so we don't ask for consent. Your browser's local storage keeps your map preferences on your device. If we ever add analytics, we will update this policy and ask first where required.
Your rights
You can ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or send it to another provider. You can delete your account yourself in the app, after cancelling any active plan. Write to hello@urbiview.com [PRIVACY EMAIL]; we reply within 30 days. If you are unhappy with our answer you can complain to the UAE Data Office or, in the EU or UK, your local data protection authority.
Security
We encrypt data in transit, store sign-in codes and session ids only as hashes, and limit who can access production systems. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
Children
Urbiview is a professional tool, not intended for anyone under 18.
Changes
We will post any change here and, if it matters to how we use your data, tell you by email before it applies.