Privacy
Last checked 30 August 2026
Provyn is software for real estate brokerages. It holds some of the most sensitive information a person hands over: identity documents, proof of where their money came from, and recordings of conversations about what they can afford. This page says plainly what we do with it.
There are two different relationships here
If you work at a brokerage that uses Provyn we hold your name, work email, phone number, role, and, if you recorded one, a model of your voice. That relationship is between you and us.
If you are a client of that brokerage your data is in Provyn because they put it there. They decide what to collect and how long to keep it; we process it on their instructions. Questions about why they hold something go to them, not to us. We will always help them answer you.
What we hold
- Contact details: name, phone, WhatsApp number, email.
- What you are looking for: budget, areas, bedrooms, timing, and notes an agent wrote after speaking to you.
- Calls and messages: recordings, transcripts, and the WhatsApp and email threads between you and the brokerage.
- Identity and compliance documents, where the brokerage is required to collect them: passport, Emirates ID, proof of source of funds.
- Deals, viewings, and the record of who did what and when.
Some calls are answered by an AI
A brokerage using Provyn can have calls handled by an AI assistant. When that happens you are told at the start of the call that you are speaking to one. The call is transcribed, and the transcript is processed by an AI provider so the assistant can respond and so the agent has a record of what was said.
Who else sees it
Provyn is built on other companies’ services, and some of them necessarily see personal data. This is the full list of the ones that do. We do not sell data to anyone, and none of these are advertisers.
| Service | What reaches it |
|---|---|
| Supabase | The database and the document store. Everything above. |
| Google Document AI | Images of passports and Emirates IDs, to read the fields off them instead of an agent retyping them. |
| Vapi, Deepgram | Call audio and transcripts, and the number that called. |
| Anthropic | Call transcripts and notes, so the assistant can answer and summarise. This includes names and details written in free text. |
| Voyage, OpenAI | Text turned into numerical form so past conversations can be found by meaning. |
| Meta (WhatsApp), Resend | Message content, phone numbers and email addresses, to deliver messages the brokerage sends you. |
| ElevenLabs | Text to be spoken aloud, and any voice model an agent recorded of their own voice. |
| Google Calendar, Gmail | Calendar entries and free/busy, where a brokerage connects them. |
| Vercel | Hosting. It carries every request, so it sees what is in them. |
| Stripe | The brokerage’s own billing details. Never their clients’ data. |
Where it is
The application runs in Frankfurt, Germany. Several of the services above process data in the United States or the European Union. So if you are in the UAE, your data is processed outside it. We say this plainly because it is the sort of thing people assume is not happening.
How long we keep it
For as long as the brokerage keeps using Provyn, and then until they ask us to remove it.
There is one exception worth knowing about. Identity and source-of-funds documents collected to meet UAE anti-money-laundering rules must be kept for five years, and we cannot delete them before that date even if asked. Every such document carries the date its retention ends. Everything not under that obligation can be deleted on request.
What you can ask for
- A copy of everything. A brokerage owner or admin can download the whole account from inside Provyn. If you are a client, ask the brokerage and they can produce yours.
- A correction. Tell the brokerage, or tell us and we will help them.
- Deletion. A brokerage owner can erase the account from inside Provyn, in Settings under Your data. It shows exactly what will go and exactly what is held under the five-year rule above before anything happens, so nobody agrees to an erasure without knowing what survives it. If you are a client of the brokerage, ask them, or email us and we will help.
- What deletion does not reach. Three things, named because they are the ones people assume are covered. Your sign-in details are held by the service that handles our sign-in, separately from the records above, and closing an account does not remove them. Anything already sent onward stays with whoever received it: a call transcript with the AI provider, a WhatsApp thread with Meta, an email with the sender. And copies inside our database backups persist until those age out. Ask us and we will tell you exactly what is still held.
- To object. If you do not want a brokerage holding your details at all, say so and we will make sure it happens.
How it is protected
Traffic is encrypted in transit. Documents live in a private store that is not reachable by a public link. Every brokerage’s records are separated from every other brokerage’s, and access inside a brokerage depends on the person’s role: taking a copy of every client’s data out of the building is restricted to an owner or an admin. Compliance sign-offs record who attested to what, and when.
Provyn is a young product. We would rather tell you that than imply a security organisation we do not yet have.
Cookies
Two, both strictly necessary, no tracking or advertising of any kind. The details are here.
Asking us something
Write to support@provyn-tech.com. A real person reads it. If you are unhappy with how we handled a request you can raise it with the UAE Data Office.