Who we are
Gestia is an AI property team for Dubai properties. Gesti, our assistant, talks to tenants and contractors for property owners and management companies.
For owners’ own accounts, Gestia decides how data is used (the controller). For tenants and contractors, the owner or management company is the controller, and Gestia processes the data on their instructions.
Questions and requests: hello@gestiaa.com
What we collect
- Owners and management companies
- Name, email, phone number, Telegram account, company and licence details, properties, units, leases, rents, payments, expenses, documents you upload, and your messages with Gesti.
- Tenants
- Name, phone number, email, Telegram or WhatsApp account, unit and lease details, rent and payment records, repair requests, photos you send, and your messages with Gesti.
- Contractors
- Name, trade, phone number, messaging account, and the jobs you accept or decline.
- Website visitors
- Details you enter in the demo form, your language choice, and the cookies needed to keep you signed in.
We don’t ask for Emirates ID, passport or bank card numbers. If you send one to Gesti, it is stored with the rest of the chat.
Why we use it
- Running Gestia for owners: records, tenant support, repairs, reports
- Our contract with the owner
- Answering tenants and contractors on the owner’s behalf
- The owner’s instructions, as their processor
- Sign-in, security, fraud and abuse prevention
- Legitimate interest and our contract
- Replying to demo requests
- Your consent
- Tax, accounting and legal requests
- Legal obligation
We don’t sell personal data, and we don’t use it for advertising.
AI and Gesti
Gesti uses AI to read messages, open repair requests and draft replies. Your data is not used to train AI models. Owners choose what Gesti may do alone, and changes to their records wait for their approval. Nothing Gesti does alone has a legal effect on you, such as ending a lease.
Who processes it for us
We share data only with the providers below, only for the job listed, under contracts that require them to protect it.
- Convex (on Amazon Web Services)
- Database and file storage
- Railway
- Runs Gesti, the assistant
- Vercel
- Hosts this website
- OpenAI
- AI that reads and writes Gesti’s messages
- Telegram
- Chat with tenants, owners and contractors
- Twilio
- SMS and WhatsApp messages
- Resend
- Sign-in codes and email reports
- Sign in with Google and address lookup
- Calendly
- Booking demo calls
We also share data when the law requires it, for example with a court or a UAE authority.
Transfers outside the UAE
These providers store or process data outside the UAE, mainly in the United States and Europe. We rely on your consent and on the providers’ contractual safeguards for these transfers. UAE hosting is on our roadmap.
How long we keep it
We keep an owner’s records while their account is open. When an owner deletes their account, we delete their properties, tenants, messages and files straight away; provider backups clear on their own schedule. Tenant import previews are deleted after a week, and sign-in codes after 10 minutes. We keep invoices as long as UAE tax law requires.
How we protect it
Data is encrypted in transit and at rest, each owner sees only their own properties, and every action is logged. Read more on our security page.
Your rights
- See the personal data we hold about you and get a copy.
- Correct data that is wrong or incomplete.
- Have your data deleted.
- Take your data to another service in a common format.
- Object to or limit how we use it.
- Withdraw consent at any time, without affecting what was done before.
- Not be subject to a decision with legal effect made only by automated processing.
Owners can download or delete their data in Settings. Tenants and contractors can ask their owner or email us, and we’ll pass the request on or handle it ourselves. We reply within 30 days.
If you’re unhappy with how we handled your data, you can complain to the UAE Data Office.
Children
Gestia is not meant for anyone under 18, and we don’t knowingly collect their data.
Changes
If we change this policy in a way that matters, we’ll tell owners by email and ask for consent again where the law needs it.