Privacy Policy

Last updated: 5 June 2026

This policy explains what personal data HireVAna ("HireVAna", "we", "us") collects, why, how we store and protect it, and the rights you have over it. HireVAna operates a marketplace connecting real estate companies with remote specialists.

HireVAna is in a pre-launch phase. Until the marketplace opens, the only personal data we actively collect is what you submit to request early access (such as your name, email and role). Other processing described below applies once the corresponding feature goes live.

1. Data we collect

Early-access details — name, email address and whether you are an employer or a specialist, submitted through our forms.
Account data (once accounts open) — email, password (stored only as a salted hash), and role.
Profile & verification data (specialists/employers, once live) — professional details and identity or licence documents you choose to upload for verification.
Technical data — standard server logs and, where you consent, analytics about how the site is used.

2. How we use it

To contact you about early access and, at launch, to operate your account.
To verify identity, broker cards or trade licences so the marketplace stays trustworthy.
To keep the service secure, prevent abuse, and meet legal obligations.

We do not sell your personal data.

3. Verification documents & data minimisation

Identity and licence documents are stored privately and are accessible only to authorised review staff. We follow a data-minimisation principle: verification document files are scheduled for automatic deletion after a set retention period once a review is complete, while a minimal record of the verification outcome is kept. The aim is simple — we cannot lose what we no longer hold.

4. Storage & security

Data is transmitted over HTTPS and held on access-controlled infrastructure. We apply measures including least-privilege access, secrets kept out of source code, and private (non-public) storage for sensitive documents. No method of transmission or storage is perfectly secure, but we work to protect your data and to improve these controls over time.

5. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may withdraw consent for optional processing such as analytics. To exercise these rights, contact us at the address below.

6. Legal framework

We handle personal data in line with the UAE Personal Data Protection Law (PDPL). Where we process data of individuals in the EU or UK, we also apply the relevant requirements of the GDPR for those individuals.

7. Data breaches

If a personal-data breach occurs that is likely to affect you, we will act to contain it and notify affected users and, where required, the relevant authority, in line with applicable law.

8. Third parties

We use service providers (for example, hosting and email delivery) strictly to operate the service. They process data on our behalf under appropriate safeguards and not for their own purposes.

9. Changes

We may update this policy as the service evolves. Material changes will be reflected by the "Last updated" date above.

10. Contact

Questions or requests about privacy: [email protected].