This Privacy Policy is issued by Xische FZ-LLC (“LeaseHub”, “we”, “us”), registered at EO 304, Third Floor, d3 Co-working Building 3, Dubai Design District, Dubai, United Arab Emirates. We are the “controller” of the personal data described below. It is designed to align with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”) and applicable free-zone data rules.
1. What we collect
We collect the following categories of personal data:
- Account data — your name, email address and a securely hashed password when you register.
- Enquiry / eligibility data — when you choose to enquire about an offer or check eligibility: your phone number and, optionally, your indicative monthly budget, salary range, purchase timeline and trade-in status.
- Activity data — offers you save (favourites), reports you order, and pages you view, used to operate and improve the service.
- Payment data — if you buy a paid report, payment is processed by our payment provider (Stripe). We receive confirmation of payment and an order reference; we never see or store your full card details.
- Technical data — IP address, device and browser type, and similar information collected automatically (see our Cookie Policy).
- Messages you send our chatbot— questions you type are processed to generate a reply (see “Service providers” below).
2. How we use your data
- To create and manage your account and saved shortlist.
- To connect you with a dealer for an offer you have asked to enquire about (only with your explicit consent — see section 3).
- To process and deliver paid reports you order.
- To operate, secure, troubleshoot and improve the service.
- To send you service messages (e.g. account confirmation). We will only send marketing messages where you have opted in, and you can opt out at any time.
- To comply with legal obligations and enforce our terms.
3. Who we share it with
Dealers and manufacturers. We share your contact and enquiry details with a dealer only after you explicitly consent for a specific offer (for example, by submitting an enquiry or eligibility request for that offer). We do not sell your data, and we do not pass your details to dealers you have not asked to be connected with.
Service providers (processors). We use trusted vendors who process data on our behalf under contract, including:
- Supabase — authentication and database hosting.
- Vercel — application hosting and delivery.
- Stripe — payment processing for paid reports.
- Anthropic — powers the on-site assistant chatbot; messages you send it are processed to generate a response and are not used to train its models.
We may also disclose data where required by law, regulation or a valid request from a competent authority, and to advisers (e.g. legal, accounting) under confidentiality.
4. International transfers
Some of our service providers process data outside the UAE. Where data is transferred internationally, we take steps intended to ensure an adequate level of protection consistent with the PDPL, such as contractual safeguards with our providers.
5. How long we keep it
We keep personal data only as long as necessary for the purposes above or as required by law. Account data is kept while your account is active; enquiry data is kept to administer the dealer relationship and for a reasonable period afterwards; payment records are kept for the period required by tax and accounting rules. You can ask us to delete your account (see section 6).
6. Your rights
Subject to applicable law, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- request deletion of your data;
- object to or restrict certain processing;
- withdraw consent where we rely on it (e.g. dealer sharing); and
- request a copy of your data in a portable format.
To exercise any of these, email hello@goleasehub.com. We will respond within the timeframe required by law. You also have the right to lodge a complaint with the UAE Data Office.
7. Security
We use technical and organisational measures to protect your data, including encryption in transit, hashed passwords, row-level access controls, and restricted internal access. No system is perfectly secure, but we work to protect your information and to notify you and the authorities of any breach as required by law.
8. Children
LeaseHub is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe a minor has provided us data, contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. We will post the updated version here and change the “Last updated” date. Material changes may be notified to you directly.
10. Contact us
Questions about privacy? Email hello@goleasehub.com or see our Contact page.