Skip to main content
Post your property

Privacy Policy

What data AqaratSham collects, why, who it is shared with, how long it is kept, and how to ask for a correction or deletion.

Effective: Last updated: Version 1.0.2

On this page

1.Who is responsible for your data

The controller of your data on AqaratSham is AqaratSham Company LLC, Damascus, Syrian Arab Republic. For privacy requests write to [email protected] or use the Contact page. This policy applies from 2026-09-28.

2.Data we collect

  • Account: your phone number when you sign in with a verification code. With Google sign-in: your name, email address and profile photo as provided by Google. You can change the name and photo later.
  • What you post: listing drafts (saved automatically while you type), listing details, the contact number you choose for the listing, and the photos you upload.
  • Automatic import: the text or link you paste to fill in a listing automatically.
  • Reports: if you report a listing we keep the reason, your note, and a link to your account or device.
  • Technical data: IP address, browser and device type, and request logs, for security, running the service and fixing faults.
  • Usage events: we record simple events on the site (such as a page view or a tap on a contact button) with a random session id created in your browser, without your IP address and not linked to your account. We honour your browser’s Do Not Track / Global Privacy Control setting.
  • Preferences: your display language, and properties you add to favourites may be stored on your device only.

3.Data from public advertisements

The platform may show information from real-estate advertisements published publicly in the Syrian market ("market offer"), which may include the advertiser’s name, number or photos as published. We keep a copy of the original advertisement and its photos to run the service and handle removal requests, and disclose the origin of any offer to the rights holder on request.

If your data appears in a market offer and you want it corrected or removed, send the link of the offer on our site through the Contact page. We review the request and remove or correct whatever is shown to be wrong or published without right.

4.How we use data and why

  • Signing you in and managing your account (performance of our contract with you).
  • Showing and reviewing your listing before publication, and handling reports (contract and our legitimate interest in a safe platform).
  • Security, fraud and abuse prevention (legitimate interest).
  • Answering your requests and messages.
  • Understanding how the site is used in order to improve it, through the anonymous usage events described above.

We do not sell your data. We use no third-party analytics or tracking tools and we build no advertising profiles about you. If that changes we will update this page before it takes effect.

5.Service providers and sharing

We rely on the following providers to run the site; each receives only what its function needs:

  • Supabase: authentication and database (servers in the European Union, Ireland).
  • Telegram (Telegram Gateway): delivery of the verification code. It receives your phone number and the code, and the code reaches you inside the Telegram app.
  • Google: only if you choose Google sign-in.
  • Cloudflare: content delivery network and protection, and storage of uploaded photos and copies of public advertisements (R2).
  • Anthropic (Claude): only when you use the import feature, the text you paste and the link text are sent to an AI model to suggest listing fields. We do not open the link on your behalf. Do not paste personal data that is not needed.
  • OpenStreetMap: the map embedded on the listing page (loaded without sending the referring page address).
  • Hosting: the site servers and database are in the European Union (Ireland).
  • Authorities: only where the law requires us to.

6.Transfers outside Syria

Most of our providers operate outside Syria (in the European Union and the United States). By using the site your data is processed on their servers under our agreements with them and their policies.

7.Cookies and browser storage

We use only cookies needed to run the site; no advertising or analytics cookies:

  • NEXT_LOCALE: remembers the display language you chose.
  • aqs_ccy: remembers the currency you chose for displaying prices (USD or SYP) for one year.
  • aqs_rt: an HttpOnly session cookie that keeps you signed in and is renewed automatically. Deleted when you sign out.
  • aqs_pkce: a temporary cookie used only during Google sign-in, deleted as soon as sign-in completes.
  • aqs_has_session: says only that someone signed in from this browser, so the site knows whether to try to restore your session. It holds no password or token and is deleted when you sign out.
  • aqs_flags: set only if you open a preview link that switches new site features on or off. It lasts 30 days.
  • Cloudflare security cookies while protecting against attacks.

We also keep a few things in your browser's own storage (localStorage, sessionStorage and IndexedDB). They stay on your device, are never sent to us automatically, and are not used to track you:

  • aqs:post-draft:v1 (localStorage): the listing you are writing before you sign in, so you don't lose it. Deleted once the listing is sent; dropped after 30 days untouched.
  • aqs-post-photos (IndexedDB): the photos of that unsent listing, until they are uploaded when you publish.
  • aqs:post-resume:v1 (localStorage): which draft and step to reopen if your session ends while you are posting. Read once and then deleted; ignored once it is a day old.
  • aqs:favorites (localStorage): the listings you saved to your favourites.
  • aqs:compare (localStorage): the projects you picked to compare.
  • aqs_sid (sessionStorage): the random session id for usage events. Gone when you close the tab.
  • aqs:attr:first:v1 (localStorage): how you first found us: the campaign tag of the link you opened (such as utm_source) or the name of the site that sent you, never the full address. Dropped after 90 days.
  • aqs:attr:last:v1 (sessionStorage): the same for your latest visit in this tab. Gone when you close the tab.

You can delete all of these from your browser settings ("clear site data"); you may then need to sign in again, and an unsent listing kept on your device is lost.

8.Photos

  • Photos you upload become public once your listing is approved and are stored on Cloudflare R2.
  • We remove the metadata embedded in the image file (EXIF, including location) before saving it.
  • Avoid uploading photos that show faces, personal documents or number plates.

9.How long we keep data

  • Account data: until you ask us to delete your account.
  • Drafts: until you delete them or submit them for review.
  • Published listings: until you delete them or we remove them. Rejected or removed listings are kept for a limited period for moderation records, then deleted.
  • Reports: kept for moderation records.
  • Technical server logs: kept for a limited period for security and operations.
  • Backups: database backups are kept locally for 14 days, with a copy in cloud storage (Cloudflare R2). Your data may remain in a backup for a short time after deletion.

10.Your rights

You have the right to access, correct and delete your data, to object to its processing, and to complain to the competent authority in your country. To exercise any of these rights contact us through the Contact page.

Account deletion: send your request from the phone number or email address linked to your account. On deletion we remove your account data, drafts, listings and photos, keeping only what the law or moderation records require us to keep. We do not commit to a specific time, but requests are handled in order.

11.Security

Everything is transferred over an encrypted connection (HTTPS) and access to data is restricted. Even so, no online service can guarantee absolute security.

12.Children

The site is intended for people aged 18 or older, and we do not knowingly collect data from anyone younger.

13.Changes to this policy

We may update this policy when we add features or providers. The last-updated date and version number appear at the top of this page.

14.Contact

For any privacy question write to [email protected] or use the Contact page.

Back to top