Terms and Conditions
1. About Estrivio
Estrivio ("we", "us", "our") is a real estate operations platform provided by [YOUR BUSINESS/LEGAL NAME, trade license number, and registered address] to real estate companies ("you", "your company") for managing properties, clients, tasks, documents, and related business operations. These Terms are governed by the laws of the United Arab Emirates.
2. Accounts and Access
Your company is responsible for all activity under its account, including the accounts of any staff or team members it invites. You agree to keep login credentials secure and to notify us promptly of any suspected unauthorized access. You are responsible for promptly revoking access for any staff member who leaves your company or should no longer have it.
3. Subscription and Billing
Access to Estrivio is provided on a subscription basis (monthly or yearly) under the plan you choose at signup, billed and auto-renewed through our payment processor until you cancel. Prices, limits, and any discounts are set by Estrivio and may change from time to time; we will make reasonable efforts to notify you of material changes in advance.
4. Your Data and Ownership
You retain ownership of all property listings, client records, documents, and other business data you upload to Estrivio. We do not sell your data to third parties. You are responsible for having a lawful basis to collect and store any personal data you enter into the platform (e.g. client names, phone numbers, ID copies), and for responding to any data subject requests from your own clients (access, correction, deletion) as required under applicable law.
5. Acceptable Use
You agree not to use Estrivio for any unlawful purpose, to upload malicious files, to attempt to access another company's data without authorization, or to use the platform in a way that breaches UAE Federal Decree-Law No. 34 of 2021 (Combatting Rumours and Cybercrimes) or any other applicable law.
6. Multi-Tenancy and Isolation
Estrivio is a multi-tenant platform: your company's data is logically separated from every other company's data using database-level access controls (Row Level Security), not merely application-level checks. We take reasonable technical and organizational measures to keep this isolation intact, consistent with the security obligations in Section 7 below.
7. Data Protection (UAE PDPL)
Personal data processed through Estrivio is handled in a manner intended to align with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL"). In broad terms:
- For data about your own company's team, clients, and leads, your company acts as the data controller, and Estrivio acts as a data processor providing the underlying platform.
- We apply reasonable technical and organizational security measures appropriate to the risk, including encryption in transit and at rest, database-level access controls scoped per company, and restricted access to production systems.
- In the event of a personal data breach affecting your company's data that we become aware of, we will notify you without undue delay so you can meet your own notification obligations to the UAE Data Office and/or affected individuals, as PDPL may require of you as controller.
- [If you appoint a Data Protection Officer or have specific PDPL compliance procedures, describe them here.]
8. Termination
Either party may terminate this agreement at any time. Upon termination, your data is retained for a reasonable period ([e.g. 30 days]) to allow export, after which it may be deleted in accordance with our data retention practices.
9. Limitation of Liability
Estrivio is provided "as is" without warranties of any kind, express or implied. To the maximum extent permitted under UAE law:
- [YOUR BUSINESS/LEGAL NAME] shall not be liable for any indirect, incidental, special, or consequential damages, or loss of profits, revenue, or data, arising from your use of the platform.
- Without limiting the above, and specifically regarding data security: while we take the security measures described in Section 7, [YOUR BUSINESS/LEGAL NAME] shall not be liable for any unauthorized access to, disclosure of, alteration of, or loss of data resulting from a security incident, data breach, or cyberattack that occurs despite those reasonable measures having been taken, except to the extent such loss is directly caused by our own gross negligence or willful misconduct.
- Nothing in this section excludes or limits liability for death, personal injury, fraud, or any other liability that cannot lawfully be excluded or limited under UAE law — this limitation is intended to apply only to the extent permitted by applicable law, and a UAE lawyer should confirm its exact scope and enforceability for your specific business before you rely on it.
10. Governing Law and Disputes
These Terms are governed by the laws of the United Arab Emirates. Any dispute arising from these Terms shall be subject to the exclusive jurisdiction of the courts of [e.g. Dubai / your Emirate], unless the parties agree in writing to resolve the dispute by arbitration instead.
11. Contact
Questions about these terms? See our Contact Us page.