Privacy Policy

Agent by Vantik is provided by Vantik Apps Technology, Dubai e-Trader licence No. 1654966, Dubai (“Vantik”, “we”, “us”).

We decide how account and billing data is used, so we are responsible for it. For the client data you enter (your prospects, contacts and their details), you are in charge and we process it on your behalf, only to run the Service.

• Account data: your name, email address, business name and password (stored hashed). If you sign in with Google or Microsoft, we receive your name and email from them.
• Team data: the members of your organisation, their roles and activity in the app.
• Your content: prospects and contacts (names, phone numbers, emails, requirements), properties, notes, tasks, appointments, documents and invoices you create.
• Calendar data: if you connect Google or Outlook calendar, access tokens and the details of events created or synced through Agent.
• Billing data: your plan, subscription status and Stripe customer reference. Card details are handled by Stripe, not us.
• Device and technical data: push notification subscriptions, IP address and request logs from our hosting providers, and browser storage used to keep you signed in.
• Messages to us: support requests and Brokerage plan enquiries.

• to provide the Service: store your pipeline, sync calendars, generate PDFs and share links;
• to send reminders, invitations, digests and push notifications you have turned on;
• to draft follow-up messages when you ask for one;
• to process payments and manage your subscription;
• to answer support requests and keep the Service secure;
• to meet legal, tax and accounting obligations.

We do not sell personal data and we do not use it for advertising.

We process personal data in line with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection and other laws that apply. We rely on the performance of our contract with you, our legitimate interest in running and securing the Service, your consent where we ask for it (push notifications, calendar connection), and our legal obligations.

When you connect Google, we use your Google account email to sign you in and your Google Calendar access only to create, update and read the events you sync through Agent. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, sell it, or let people read it except where needed for security, legal compliance or with your permission.

We share data only with providers that help us run the Service, under contracts that limit their use of it:

• Supabase: database, authentication, file storage and backend functions (hosted in Frankfurt, Germany).
• Cloudflare: hosting and delivery of the app.
• Resend: transactional emails.
• Google and Microsoft: sign-in and calendar sync, when you choose to use them.
• Stripe: payment processing.
• Anthropic: AI model that writes follow-up drafts. Only when you ask for a draft, it receives the prospect’s name, pipeline stage, budget and preferences, the linked property’s details, the last few logged activities and your business name. Phone numbers and email addresses are not sent.
• Google Fonts: serves the app’s typefaces, which exposes your IP address to Google.

We may also disclose data where required by law or a competent authority.

Your data is stored in the European Union (Germany). Some providers may process it in other countries. When data leaves the UAE, we rely on providers that offer an adequate level of protection and contractual safeguards.

We keep your data while your account is active. After your account is closed, we delete Your Data within 90 days, apart from backups, which expire on their normal cycle, and billing records, which we keep as long as UAE law requires.

Data is encrypted in transit, access is restricted to what each role needs, and every organisation’s data is isolated at the database level. No system is completely secure, but if a breach affects your data, we will notify you and the relevant authorities as the law requires.

You can ask to access, correct, export or delete your personal data, object to or restrict certain processing, and withdraw consent at any time. Write to remi.olivan@getvantik.com. We reply within 30 days.

If an agent using Agent by Vantik holds your details as a client or prospect, contact that agent first. We will help them respond to your request.

We don’t use advertising or analytics cookies. The app uses your browser’s storage to keep you signed in and remember your preferences, and a service worker to deliver push notifications.

The Service is for professionals aged 18 and over. We don’t knowingly collect data from children.

We may update this policy. For material changes, we will notify you by email or in the app before they take effect.

Privacy questions and requests: remi.olivan@getvantik.com. Postal address: Vantik Apps Technology, Office, Dubai, United Arab Emirates.