Zameen

Privacy Policy

Last updated October 1, 2026 · Version 2026-10-01-review

Review draft — not yet effective. Operating entity, contact details, and legal approval must be verified before public launch.

About this notice

Zameen is a property research and analysis platform for adults using it for professional and business purposes. This review draft describes the application as of October 1, 2026. The operating legal entity, business address and monitored contact have not yet been verified; this notice will not become effective until those details and the production processing arrangements are approved.

Information you provide

We process your account name, email, authentication identifiers and profile information, which may include phone number, username, avatar and brokerage details. Your password is handled by our authentication provider, Supabase. We also process onboarding answers, property searches, projects, notes, chats, prompts, uploaded images/files, feedback and privacy requests.

If you use the mailbox or ask Zameen to send an email, we process sender and recipient details, message content, attachments and delivery information. Only provide content you have permission to use and disclose. Profile avatars and brokerage imagery can be publicly accessible by their image URLs; project documents and chats use access controls.

Technical information and preferences

Requests to our application and providers can disclose IP address, browser/device information, requested URLs, timestamps and errors. We use authentication cookies and browser storage for preferences such as theme, workspace layout and chat continuity. We record first-party onboarding events, associated user/session identifiers and limited interaction details to understand product use.

The reviewed application contains no advertising pixel or third-party analytics SDK. Hosting and service providers may keep their own operational logs. Map and citation-image requests can go directly from your browser to third parties.

Property and source information

Property research may include addresses, parcel identifiers, owner names and mailing addresses, assessments, sales/deeds, permits and GIS records from government and other authorized sources. These records can concern people who do not have a Zameen account. Shared property facts and derived analyses may be available to other users researching the same property; user projects and private content have separate permissions.

Source availability does not mean every photograph, description or historical record is unrestricted. MLS integrations and external listing-media acquisition are enabled, including photos from Zillow and Redfin property pages that Gemini finds through web search. This integration keeps those photos for internal display and excludes them from export and MLS publication. See Data Sources & Attribution.

AI processing

Google Gemini supports chat, property guidance, follow-up suggestions and authorized project/file tools. Requests can contain your name/email, prompts, conversation context, property addresses and coordinates, public-record facts, document contents, images or information returned by tools. Uploaded or typed material can contain personal, confidential or licensed information; do not submit information you lack authority to disclose.

Production AI is enabled without a completed paid-processing review. The actual Google project, billing status and contractual processing arrangements have not yet been verified. We therefore do not make an unconditional promise that Google never uses submitted information for model improvement. Unpaid and paid services have different terms, and unpaid services may involve improvement use and human review.

Chat uses Google’s stored conversation functionality. Its documented default is 55 days for paid Interactions and one day for free Interactions; account settings may differ. Guidance and follow-up requests disable optional Interaction storage, which does not eliminate other provider retention such as abuse monitoring. Our local chat history remains until deleted; deleting a local chat does not automatically delete the provider copy. See Google’s Gemini terms and Interaction storage details.

Gemini external-media discovery is enabled. It sends property addresses and coordinates to Google to discover Zillow and Redfin property pages and media. These discovery requests disable optional Interaction storage. Chat web-grounding tools and automated URL filing are also enabled in production.

How we use information

We use information to authenticate accounts, maintain workspaces and files, research properties, calculate and explain spatial information, operate requested communications, personalize onboarding, prevent misuse, debug problems and handle rights requests and legal obligations. We do not claim an EU lawful basis or that every state privacy law applies without evaluating the relevant activity and jurisdiction.

Recipients and service providers

Supabase provides authentication, database and storage services. Google receives AI requests and provides map services. Resend processes mailbox and outbound email information. Hosting and worker infrastructure process application requests and operational data. When county website automation runs, Browserbase and AI browser tools can process source-page content and diagnostics.

MapTiler, OpenFreeMap, Google Maps and other source services may receive IP addresses, property queries or map coordinates when used. Some providers act for their own service operations under separate terms. We may disclose information when legally required, to address abuse or protect rights, and in a business transfer subject to applicable protections. We do not promise that information is never shared.

Processing and retention locations depend on provider arrangements and may include countries outside your location. Actual production regions and executed processor agreements require verification before launch; no US-only storage promise is made.

Sale and advertising

The reviewed application does not implement personal-data sales or targeted advertising. Disclosures to operating service providers are described above. Whether any future business arrangement is a statutory sale or sharing must be assessed before it begins. We will update notices and implement required choices, including applicable opt-out signals, before introducing such processing.

Retention and deletion

Account records, projects, document versions, chats, source evidence, media and analytics do not currently have a universal automatic deletion schedule. Some caches have reuse expiry, but expired database records or stored files can remain. Source refresh does not automatically remove every historical copy.

You can delete a project or chat through the available controls, but that does not necessarily erase shared property records, stored file versions, provider copies, logs or backups. Account deletion and broader access, export, correction, source-removal and appeal requests require manual review. We may need to retain limited information for legitimate legal or security purposes; applicable exceptions and backup handling must be verified before claiming completion.

Choices and requests

Review profile information in account settings, use available project/chat controls, and submit an authenticated privacy request. The request form records a receipt; it does not automatically delete an account or execute an export. We may need reasonable identity verification and information about the affected record. Do not submit passwords or unnecessary sensitive documents.

Depending on applicable law and your location, rights may include access, correction, deletion, portability, appeals and opting out of particular processing. We will not discriminate for exercising applicable rights. Before launch, a monitored public contact must be supplied for people without an account and for account-access problems. That contact and the request operator are currently unverified.

Security and children

We use access controls, authentication and private storage for project content, subject to the public profile-image exception. No system is completely secure. Provider configuration and operating practices are part of security; we make no absolute security guarantee.

Zameen is intended for professional and business users aged 18 or older. Do not create an account or submit personal information if you are under 18.

Third-party services and changes

Third-party sites and maps operate under their own terms and privacy notices, including Google’s Privacy Policy. Zameen cannot change their records merely by editing a project.

We will identify policy versions and communicate material changes through appropriate in-product notices or verified contact channels. Material changes will not be treated as retroactive consent to a materially broader use of previously collected information. The current document is a review draft, with no effective date until approval.