Privacy notice

1. Who we are

FAHIM is operated by Limitls AI, based in the Abu Dhabi Global Market (ADGM), United Arab Emirates. You can reach us about privacy at any time through the contact page or at fahim@limitls.ai.

2. What we collect

Account and profile: your email address, name, and your business profile — company, country and role are required to complete a profile; a website is optional. Signup requires no identity documents, phone number or licence.

Workspace content: the property briefs and assessment inputs you enter, the resulting reports, workflow notes, bookmarks and your allowance usage.

Billing: if you upgrade, the billing entity name, address, country and optional tax ID you provide, plus your confirmation that you are authorised to subscribe on behalf of the business. Card details are entered on Stripe's hosted checkout and are never seen or stored by FAHIM.

Contact form: your name, email, topic, optional company and message.

Technical records: verified-email status and authentication metadata, internal conversion events (for example that a signup happened), and error reports used to keep the service running.

3. How we use it

To provide the service: run your assessments, store your reports, enforce plan allowances, and process payments.

To operate and secure the service: authenticate sessions, prevent abuse of public forms, and diagnose errors.

We do not sell your personal data and we do not use your workspace content to advertise to you.

4. Where data is processed

Authentication and database hosting are provided by Supabase, and the application is hosted on Lovable. Payments are processed by Stripe. These providers process data on our behalf under their own terms and may process it outside your country.

This site loads its fonts (Manrope and Sora) from Google Fonts, so your browser makes a request to Google's servers when a page loads; Google sees the technical details any web request carries, such as your IP address.

Your browser stores your sign-in session in local storage so you stay signed in; clearing site data signs you out.

5. Retention and deletion

We keep account and workspace records while your account is active. Contact-form messages are separate: most senders have no account, so they are kept for as long as we need them to answer you and to prevent abuse of the form, and you can ask us to delete your message at any time. We do not currently publish fixed retention periods; rather than promise a schedule we have not finalised, we will tell you the actual retention for a category if you ask.

To delete your account, contact us and request account deletion. Each request is reviewed manually — this includes a separate review of shared workspace records and imported reference evidence, and of billing records we may need to retain where the law requires it. Deletion is not instant, and we will confirm what will be removed and when before acting.

6. Your choices and rights

You can view and edit your profile in Account settings, export your saved reports, and enable or disable two-factor authentication at any time.

Depending on the law that applies to you, you may have rights to access, correct, export or delete your personal data, or to object to some processing. Contact us to exercise any of these and we will respond.

7. Changes

We may update this notice; material changes will appear here with a new “last updated” date.