Privacy Policy

Who is responsible

Mykola Borysov is an individual broker operating under the Dubai Sky Group brand ("Dubai Sky Group", "we", "us"). This policy explains personal information handled through dsg.land, enquiries and our separate client-care records and communications.

For privacy questions or requests, contact us through our WhatsApp. Website: dsg.land.

Enquiries and client records

An enquiry may include your name, email, phone number, language, answers about your property needs, relevant opportunity details, a lead identifier and submission time. If the website enquiry-email service is enabled, Resend handles these details to deliver the enquiry to our working mailbox. That form route does not itself insert the enquiry into the client database.

Separate client-care records can include contact details, booked properties, payment schedules, document status, timelines, consent records, messages and delivery or audit records. They support our response to enquiries and an agreed client relationship. We also use necessary information to handle privacy requests, protect our services and meet applicable legal obligations.

The website does not provide a client-document upload facility. Supporting documents supplied through separately agreed channels are handled for the relevant transaction purpose. Full identity numbers and passport details are not intended for ordinary CRM notes. Please do not put passwords, one-time codes, card details or identity documents in a general enquiry or website chat.

Browser storage and attribution

The dsg_locale cookie remembers your language for up to one year. The dsg.locale setting is also stored in your browser’s local storage without a code-defined expiry and can remain until it is replaced or cleared.

Session storage can hold campaign and click identifiers, referral and landing-page information, property-strategy answers and, after submission, a lead identifier. These records can link a visit to an enquiry. Browser-session storage may survive if your browser restores a session.

The website records interaction events in a data layer when one is available, or in a temporary memory buffer. Attribution collection currently operates without a separate cookie-consent choice. You can clear browser storage through your browser settings; this does not erase a submitted enquiry or records already held by a provider.

Maps and the website concierge

The interactive map loads vector tiles from Mapbox, which receives the browser requests needed to provide them. Fonts are served by the website itself.

When the AI concierge is enabled, the question you enter and a limited set of public project information are sent to its configured AI service. The supported configurations use Anthropic or an OpenAI-compatible service. Avoid including personal identifiers, confidential documents or payment information in a question. Any information you type may be included in that request.

Where the preset-answer cache is enabled, preset answers may be reused for up to seven days. Free-text questions are excluded from that cache. Expired cache entries stop being reused but are not automatically deleted merely because that period ends. The reuse window is not a general retention period.

Consent and communication preferences

We ask for consent where applicable law requires it. Where the law permits processing necessary for a requested service, contract or legal obligation, we rely on that basis only where it applies. Reading this policy does not itself provide consent.

Service messages may concern your enquiry, appointment, document status or payment schedule. Marketing preferences are separate: browsing the site, submitting an enquiry or receiving a service message does not subscribe you to marketing. Ask us on WhatsApp to stop marketing or change your contact preferences. We will explain if a particular communication remains necessary for an ongoing service or legal obligation.

Providers and international processing

Relevant information may be handled by authorised people and providers supporting hosting, records and communications. These include Vercel for application hosting, Postgres database services for separate client records, Google for Gmail, Resend when enquiry-email delivery is enabled, Mapbox for maps and the configured concierge provider when that feature is enabled. Neon is the planned database provider for the Gmail delivery and audit workflow.

Providers may process information outside the UAE. The countries and protections depend on the provider and configuration; this policy does not promise UAE-only storage. Contact us for information about the providers and transfer arrangements relevant to your request. WhatsApp, Instagram and other external services also apply their own privacy terms.

Sharing with a developer, broker or other transaction party is limited to the relevant purpose and any permission or lawful basis that is required. Authorised software, including AI-assisted tools, may support research, drafting and administration. Google data is subject to the additional limits below.

Retention and deletion

Retention is assessed by the purpose of the record, the client relationship and applicable legal requirements. We do not apply one fixed automatic deletion period to all records. Mailbox and provider copies may have separate retention rules.

Archiving a client record does not delete it. A deletion process can remove contact details, notes and message text while retaining financial or property references, timestamps, provider identifiers and audit history. Those retained records may still be personal information. A deletion request therefore requires review of the relevant records and any lawful reason for retaining them; we will explain applicable limits.

Security and your requests

Access should be limited to authorised people and systems for the relevant purpose. No website, email service or storage system guarantees absolute security. Please contact us if you believe information has been sent to the wrong person or used without authority.

Use our WhatsApp to ask about your information, request access or correction, seek deletion or a restriction, object where a right applies, or withdraw consent. Rights and exceptions depend on applicable law. We may ask for proportionate identity verification. Withdrawal does not undo earlier lawful processing. You may also contact the competent data-protection authority where applicable.

Planned Google account connection

The Dubai Sky Group Gmail connector is not yet connected and its sending function is disabled. It is intended for our designated DSG sender account only. Clients are not asked to connect their own Gmail accounts.

Permissions and actual use

The proposed gmail.metadata permission would allow a Gmail profile check to confirm the authorised sender. The permission is broader than that use and permits access to message metadata, such as headers and labels. The current adapter calls the profile endpoint; it does not list or retrieve inbox messages or email bodies.

The profile response may include message and thread counts and a history identifier in addition to the email address. The adapter uses the email address to check the sender. These additional response fields are incidental to that check, rather than data used for mailbox analysis.

The planned gmail.send permission would allow approved client-care and transactional messages to be sent through Gmail. The adapter would handle the recipient, subject, outgoing content and Google’s returned identifiers or result. This Gmail workflow has no Resend sending fallback. A send result does not prove that a recipient read the message.

Google data use and sharing

Google data will be used only for the disclosed account-checking and email functions. It will not be sold, used for advertising or credit decisions, or used to train general-purpose AI models. Transfers will be limited to those permitted by Google’s applicable policy. Human access requires the account owner’s documented agreement for the specified data, a necessary security or legal purpose, or another exception permitted by that policy.

Dubai Sky Group’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy and the Google Workspace API User Data and Developer Policy, including their Limited Use requirements.

Storage and disconnecting

The planned connection uses Google for email, Vercel for the server-side application and Neon for relevant delivery and audit records. Connection secrets are not written to the application’s delivery audit. Before activation, credential protection, access controls, retained fields and deletion handling must be verified against this policy. This description of the planned integration does not confirm that those controls are currently operating.

The DSG account owner can remove the app’s access through Google Account connections. Removing access stops future authorised API access; it does not automatically erase DSG-held records or emails already in sender and recipient mailboxes. Use WhatsApp to request deletion of DSG-held information. The retention and deletion limits above also apply to relevant delivery records.

Policy changes

We will date published updates. Where a new purpose or additional Google access requires consent, we will request that consent before using the data in the new way.