Privacy Policy

SiteScore (“we”, “us”, “our”) is a UAE retail leasing intelligence platform operated by Nancy Saade, an individual based in the United Arab Emirates.

SiteScore helps retail professionals evaluate, score, and negotiate commercial lease opportunities across the UAE using benchmark data, OCR analysis, and AI-assisted summaries.

We collect only the data necessary to provide the Service:

We do not collect passport numbers, Emirates IDs, trade licence details, or any government-issued identifiers.

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021 — “PDPL”), we process your data on the following legal bases:

• Contractual necessity — to provide the evaluation, scoring, and reporting Service you have requested.
• Legitimate interests — to prevent fraud and abuse; to monitor service health; to improve benchmark accuracy using aggregated, anonymised patterns.
• Consent — for marketing communications or waitlist updates. You may withdraw consent at any time by emailing us or using the unsubscribe link in any email.

• Generate and display your retail site evaluation reports.
• Save your deal pipeline and reports across devices (signed-in users only).
• Manage your account and free evaluation allowance.
• Send account, waitlist, contact-form, and other transactional communications via Resend.
• Notify waitlist members when new features or access opens (with your consent).
• Monitor service availability and fix technical errors.
• Rate-limit the API to prevent abuse and protect all users.
• Improve the accuracy of scoring benchmarks using anonymised, aggregated patterns — never identifiable deal data.

We retain your data for as long as needed to provide the Service, then delete it:

When you request account deletion (see Section 9), all personal data and deal evaluations are permanently removed from our systems within 30 days.

We use essential cookies and browser storage only. We do not use advertising, retargeting, behavioural analytics, or third-party tracking cookies.

Clearing the auth cookie will sign you out. No analytics, advertising, or behavioural tracking cookies are set by SiteScore.

We use a minimal set of trusted sub-processors to operate the platform:

We do not authorise sub-processors to use your data for their own commercial purposes.

Under Federal Decree-Law No. 45 of 2021 (UAE Personal Data Protection Law), you have the following rights regarding your personal data:

To exercise any right, email our Contact form with the subject line “Privacy Request — [Right]”(e.g. “Privacy Request — Access”). We will acknowledge within 5 business days and fulfil within 30 calendar days.

You may request deletion of your account and all associated data at any time, free of charge. Here is exactly what happens, step by step:

1. Send a deletion request to our Contact form with subject line “Account Deletion Request”. The email must be sent from your registered account email address.
2. Identity confirmation — we will match the sender address to your account within 5 business days. If you no longer have access to that email address, contact us to arrange alternative verification.
3. Deletion carried out — your account, all deal evaluations, pipeline data, and personal information are permanently deleted from Supabase within 30 days.
4. Deletion confirmed — we will send you a confirmation email once deletion is complete.

We may update this policy as the product evolves or as legal requirements change. For material changes, we will notify registered users by email at least 14 days before the change takes effect. The “Last updated” date at the top reflects the most recent revision. Continued use of SiteScore after the effective date constitutes acceptance of the updated policy.