Privacy Policy

1. Who We Are

Mabani ("we", "us") operates mabani.app, a property management platform for landlords and tenants in Bahrain and the GCC. This policy explains how we collect, use, and protect your data.

2. Data We Collect

Account data: Name, email, phone number, CPR number (for identity verification).

Property data: Building details, flat specifications, rental prices, photos you upload.

Usage data: Pages visited, actions taken, device type, browser, IP address.

Payment data: Transaction references. We do not store card numbers — payments are processed by third-party providers (BenefitPay/CrediMax).

3. How We Use Your Data

• Provide and operate the platform
• Match tenants with available properties
• Verify identity (CPR verification)
• Send notifications about applications, rent, and maintenance
• Improve the platform based on usage patterns
• Comply with legal obligations

4. Data Sharing

We share your data only when necessary:

• Landlords ↔ Tenants: Application details are shared between parties during the rental process.
• Service providers: AWS (hosting), SES (email). All bound by data processing agreements.
• Legal: When required by Bahrain law or court order.

We do not sell your data to advertisers or third parties.

5. Data Storage & Security

Your data is stored on AWS servers in the EU (Frankfurt). We use encryption in transit (TLS) and at rest (AES-256). Access is restricted to authorized personnel only.

6. Your Rights

You can:

• Access your data through your account dashboard
• Correct inaccurate information in your profile
• Request deletion of your account and associated data
• Export your data in a standard format

Contact info@mabani.app to exercise these rights.

7. Cookies

We use essential cookies for authentication and session management. We use localStorage for language and currency preferences. No third-party tracking cookies.

8. Data Retention

Account data: retained while your account is active, deleted within 30 days of account deletion request. Transaction records: retained for 7 years per Bahrain commercial law. Usage logs: retained for 90 days.

9. Changes

We may update this policy. Material changes will be communicated via email to registered users.

10. Contact

Questions about this policy: info@mabani.app