Privacy Policy

MyUnit is currently operated by Zion Otmazgin (ציון אוטמזגין) as an individual. Service and privacy enquiries may be sent to zion@dubai-realestate.co.il. Any future change of service operator will be identified in updated terms and privacy information.

In mobile releases that include account deletion, you can initiate it from customer Settings or the office menu after verifying your identity. The request covers your MyUnit account across offices. After confirmation, account access and notifications are suspended. The operator reviews and completes deletion within seven calendar days; suspension alone is not completion.

Deletion removes account credentials, profile information, account-owned avatars, preferences, notification endpoints and stored integration credentials. Personal information in business records is reviewed for erasure or anonymization. Information that must be kept under applicable law is retained for a documented reason and period, which are explained in the completion confirmation. Deleting a login does not cancel property ownership, a transaction or an obligation, or erase another owner's information.

A saved request receipt on your device lets you check progress and verified completion from the welcome or sign-in screen without logging in. You can save document copies before requesting deletion. A minimal record of the request and its handling is kept to manage and demonstrate completion. If you lose the saved receipt, contact the service operator for identity-verified assistance.

The client portal records visit times, visit counts, estimated active time, offer reads and expressions of interest. Authorized managers in the client's office can view this information to provide service and tailor offers. Time measurement pauses in the background or after inactivity. A temporary visit identifier is stored on the device. This feature does not record screens or typed content. Clients may contact their office about their information and offer preferences.

Session cookies support authentication. Language cookies and local preferences remember language and accessibility choices. Embedded maps load automatically as part of the page. Map services and library providers, including OpenFreeMap, jsDelivr, unpkg and Google where needed, then receive connection information such as an IP address. Embedded YouTube videos load on request. Leaving the page or closing a video does not erase information already received by the provider.

Submitting a service enquiry is not a subscription to promotional mailings. Campaign source information supplied with the enquiry may be retained with its service record. External links such as WhatsApp are also subject to the destination provider’s privacy practices.

The current service uses Vercel for hosting and Supabase for database, authentication and storage. The production database is hosted in Singapore; delivery, support, communications and connected providers may involve other countries.

AI extraction features may transmit uploaded documents to OpenAI to produce structured suggestions. Documents may contain identity, contact, contract or payment information. Organizations must have authority to provide the data, limit uploads to what is needed and review the extracted results before relying on them. Google Calendar integration is a separate optional connection.

When receipt analysis is available in the mobile app, the upload screen separately asks for your permission before sending the selected receipt to OpenAI. You can instead send it to your office without AI analysis. Consent applies to that upload; changing the file or account requires a new choice. AI output is a suggestion and does not confirm a payment.

MyUnit handles account, support and website data for its own service operations. Customer organizations determine the purposes of their client records. A processing agreement, retention instructions and applicable international-transfer safeguards must be addressed as part of the customer engagement.

This Privacy Policy explains how MyUnit processes personal data when organizations and their authorized users use the MyUnit real-estate operating system, including its CRM, appointment, document, payment, reporting and client-portal features.

Each customer organization controls the business data it enters into MyUnit. MyUnit processes that data to provide the contracted service and uses tenant and user access controls designed to restrict records to authorized organizations and users.

We may process account and profile information, organization details, login and security records, CRM contacts, leads, appointments, deal and property information, uploaded documents, payment records, support communications and technical usage data.

We receive information directly from users, from their organization, from services they choose to connect, and from normal use of the platform.

If a user chooses to connect Google Calendar, MyUnit requests the Google Calendar events permission and basic identity scopes needed to identify the connected account. This can include the connected account email address and event data such as titles, times, locations, descriptions, attendees, invitation responses and Google event identifiers.

MyUnit uses Google user data only to display calendar availability and events inside the authorized user’s workspace; create, update and cancel CRM appointments; send meeting invitations and changes; monitor synchronization health; and help the user reconnect when Google authorization expires or is revoked.

MyUnit does not use Google user data for advertising, does not sell it, and does not allow human access except when necessary for security, support requested by the customer, legal compliance, or operation of the service under appropriate access controls.

MyUnit’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We process information to provide and secure the service, authenticate users, enforce permissions, synchronize authorized integrations, prevent fraud and abuse, provide support, maintain business records, improve reliability and comply with applicable law.

We may use vetted infrastructure, database, monitoring, communications and support providers that process information only to help operate MyUnit. We do not sell personal data or Google user data.

We may disclose information when required by law, to protect users or the platform, or as part of a corporate transaction subject to appropriate confidentiality and data-protection safeguards.

MyUnit uses transport encryption, role-based access controls, tenant and user scoping, audit-oriented records and encrypted storage for Google OAuth credentials. Google access and refresh tokens are encrypted using authenticated encryption and are not stored in plaintext.

No online service can guarantee absolute security, but we maintain administrative and technical safeguards designed to protect confidentiality, integrity and availability.

Google OAuth credentials are retained only while the user keeps the connection active. Disconnecting Google Calendar removes the stored connection credentials and stops future access. A user can also revoke MyUnit from their Google Account permissions.

Operational synchronization metadata and business appointment records may be retained for audit, contractual or legal purposes according to agreed retention instructions and applicable law. Users and organizations may request access, correction or deletion, subject to legitimate retention obligations.

MyUnit and its service providers may process data in countries other than the user’s country. We use contractual and technical safeguards appropriate to the nature of the data and the services provided.

Users can choose whether to connect Google Calendar and can disconnect it at any time. Depending on applicable law, individuals may request access, correction, deletion, restriction or a copy of their personal data, or object to certain processing.

We may update this policy when the service, law or our data practices change. The latest version will remain available at this URL with its effective date.

For privacy questions or requests, contact zion@dubai-realestate.co.il.