fullstory.ae

Privacy Policy

Last updated: June 26, 2026

At FullStory, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including any data accessed through third-party integrations such as Google APIs.

FullStory is operated by FULLSTORY PROPTECH - FZCO, a free-zone company registered at Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. References to "FullStory", "we", "our", or "us" in this policy refer to FULLSTORY PROPTECH - FZCO.

1. Information We Collect

Personal Information

When you create an account or use our services, we may collect:

  • Name and contact information (email, phone number)
  • Account credentials
  • Profile information
  • Property preferences and search history
  • Communication records with our team or agents

Automatically Collected Information

When you access our platform, we automatically collect:

  • Device information (browser type, operating system)
  • IP address and approximate location data
  • Usage data (pages visited, features used, time spent)
  • Cookies and similar tracking technologies

Information from Connected Google Accounts

When you choose to connect a Google account, we store an OAuth refresh token issued by Google, the email address of the connected account, and the set of scopes you authorised. We use the refresh token to obtain short-lived access tokens that let FullStory act on your behalf for the features you requested. Detailed disclosures about how this data is used, stored, retained, and deleted are set out in Section 4 (Google User Data) below.

2. How We Use Your Information

We use the information we collect to:

  • Provide and improve our services
  • Personalize your experience and recommendations
  • Communicate with you about properties and updates
  • Process your inquiries and connect you with agents
  • Analyze usage patterns to enhance our platform
  • Ensure security and prevent fraud
  • Comply with legal obligations

When you connect a Google account, we additionally use Google data only for the specific purposes described in Section 4 below, and never for unrelated purposes.

3. AI-Powered Features

FullStory uses artificial intelligence to enhance your experience, including an AI-powered assistant for property search, communication, and scheduling. When you use these features:

  • Your queries are processed by third-party AI providers to generate responses and recommendations
  • AI interactions may be logged to monitor service quality and improve accuracy
  • AI-generated content is for informational purposes only and should be independently verified
  • Your personal data is not used to train third-party AI models. In particular, Google user data accessed via OAuth is never sent to third-party AI training pipelines, and the AI providers we use to process your prompts operate under zero-data-retention terms.

4. Google User Data

This section describes how FullStory accesses, uses, stores, and protects data received from Google APIs when you connect your Google account. It applies in addition to the general practices described elsewhere in this policy.

4.1 Scopes we request and why

FullStory requests only the Google OAuth scopes listed below. Each scope is requested for a specific, user-visible feature and only after you have explicitly authorised the connection.

  • https://www.googleapis.com/auth/gmail.modify — used by our AI assistant ("Thea") to read, organise, label, archive, and modify emails on your behalf when you ask it to manage your inbox.
  • https://www.googleapis.com/auth/gmail.send — used to send emails from your Gmail account when you instruct the assistant to reply to a thread, draft a new message, or forward an existing email.
  • https://www.googleapis.com/auth/calendar.events — used to create, update, and cancel calendar events on your behalf (for example, when booking property viewings or scheduling meetings with clients).
  • https://www.googleapis.com/auth/calendar.readonly — used to read your existing calendar events so the assistant can show your schedule and find free slots when proposing meeting times.
  • https://www.googleapis.com/auth/userinfo.email — used to identify which Google account is connected to your Full Story account.

We do not request additional Google scopes. If we add new functionality that requires further scopes in the future, you will be asked to re-authorise.

4.2 Limited Use disclosure

FullStory's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4.3 How we store and protect Google data

  • OAuth refresh tokens are stored encrypted at rest in our managed database (Supabase Postgres) and are scoped per user.
  • Email and calendar content is read on demand to fulfil your requests. We do not maintain a persistent mirror of your mailbox or your full calendar.
  • All transmission between FullStory and Google is encrypted in transit using TLS.
  • Access to production systems holding Google credentials is restricted to authorised personnel, protected by strong authentication, and logged for audit.

4.4 What we do not do with Google data

  • We do not use Google user data to develop, train, improve, or fine-tune any generalised or non-personalised AI or machine-learning model.
  • We do not sell, rent, or trade Google user data.
  • We do not use or transfer Google user data for advertising or marketing purposes.
  • Humans do not read your Google user data except: (a) with your explicit prior consent (for example, to investigate a specific support request you raise); (b) where strictly necessary to investigate a security incident or abuse; (c) where required to do so by applicable law; or (d) in aggregated and anonymised form for operational metrics that do not identify any individual.

4.5 Retention, deletion, and revoking access

  • Your Google refresh token and connection metadata are retained for as long as the connection is active.
  • You can disconnect at any time inside FullStory via Settings → Connected Accounts → Disconnect. Disconnecting deletes the refresh token and the connection record from our database and revokes Full Story's access at Google.
  • You can also revoke FullStory's access independently at https://myaccount.google.com/permissions.
  • When you delete your FullStory account, all stored Google connection data is purged within 30 days, consistent with Section 9 (Data Retention) of this policy.

5. Information Sharing

We may share your information with:

  • Real Estate Professionals: When you inquire about a property, we share your first-party FullStory contact information (such as the name, email, and phone number you provided to us) with the relevant agent or developer. Google user data is never shared with real estate professionals.
  • Service Providers: Third-party providers who help us operate our platform, including cloud hosting, database and authentication services, AI and analytics providers, mapping and geolocation services, email and SMS communication services, and performance and security infrastructure. These providers are bound by contractual obligations to handle data securely and only on our instructions.
  • Legal Requirements: When required by law or to protect our rights.

We do not sell your personal information to third parties for marketing purposes.

6. Cookies and Tracking

We use cookies and similar technologies to:

  • Remember your preferences and settings
  • Understand how you use our platform
  • Provide personalized content and recommendations
  • Analyze platform performance

Specifically, we use the following types of cookies:

  • Authentication cookies: Essential for managing your login session and keeping you signed in
  • Analytics cookies: Vercel Web Analytics collects anonymous usage data to help us improve the platform
  • Audience-measurement cookies: We set two first-party identifiers — a long-lived visitor ID (retained up to about 13 months) and a short-lived session ID (expiring after 30 minutes of inactivity) — to measure how many distinct people view property listings and to avoid counting the same view more than once. These contain only random identifiers, not your name or contact details.
  • Preference cookies: Store your display preferences such as layout and theme settings

You can control cookie settings through your browser. Disabling cookies may affect some platform functionality.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encryption of data in transit and at rest
  • Secure access controls and least-privilege permissions
  • Regular security assessments
  • Employee training on data protection

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate information
  • Request deletion of your information
  • Object to or restrict certain processing
  • Data portability
  • Withdraw consent

To exercise these rights, please contact us at privacy@fullstory.ae.

9. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

10. International Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with this policy.

11. Children's Privacy

Our platform is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

FULLSTORY PROPTECH - FZCO
Digital Park, Dubai Silicon Oasis
Dubai, United Arab Emirates

This Privacy Policy is governed by the laws of the United Arab Emirates and complies with applicable data protection regulations.

Privacy Policy | FullStory