Privacy Policy
1. Who we are
Joefex Property Listing (the “App”) is developed and operated by [FULL LEGAL ENTITY NAME and registration number] (“Joefex”, “we”, “us”), [REGISTERED ADDRESS]. This policy explains what data the App handles when your organisation (the “Customer”) installs it from the Bitrix24 Market, and what happens to that data.
For the business data managed through the App — property listings, agents, owners, clients — the Customer is the data controller and Joefex acts as a processor: we process that data only to provide the App’s features.
2. What we store on our servers
When the App is installed, we create one installation record for your Bitrix24 portal in our database. It contains, exactly:
| Data | Why |
|---|---|
Your Bitrix24 portal address and Bitrix24’s account identifier (member_id) | To recognise which portal each request belongs to |
| OAuth access and refresh tokens issued by Bitrix24 | To read and write CRM records in your portal on your behalf — the App never sees or stores your Bitrix24 password |
| A feed token generated by the App | To protect your listing feed URLs; only someone holding the token can read the feed |
| Technical configuration (the IDs and field names of the CRM entities the App created in your portal, and your per-portal feed on/off settings) | To address your portal’s own field names correctly |
| Installation status and timestamps | Operations |
The installation record contains no personal data about your staff or clients. We do not store names, emails, phone numbers or listing content in our database.
3. What we process but do not store
Your listings, agents, developers and related records live in your own Bitrix24 portal, in CRM entities that belong to you. When you use the App, it reads that data from Bitrix24 over its REST API, renders it (lists, dashboards, PDF/JPG brochures, portal feeds), and discards it — it is processed in memory per request and is not copied into our database. This includes personal data your records may contain, such as agent names, phone numbers, email addresses and listing-owner names.
4. Uploaded media files
Photos, floor plans and documents you upload through the App are stored on
Joefex’s cloud storage
(Amazon S3, Asia Pacific — Mumbai region, ap-south-1),
in a folder reserved for your installation. The App enforces that one customer cannot
read from or delete another customer’s folder. These files may contain personal data
(for example, agent photos or documents) — you control what you upload and can delete
any file through the App at any time. Files you have published in a feed or brochure are
served publicly by design.
5. Publishing and feeds — data you choose to disclose
When you enable syndication for a portal (Property Finder, Bayut, Dubizzle) or your website, the App publishes the listings you marked as published — including any agent contact details in those listings — as a feed at a token-protected URL, for that portal to collect. This disclosure happens only for the portals you switch on, and stops when you switch a portal off or unpublish a listing. What a portal does with collected data is governed by that portal’s own privacy policy.
6. Cookies
The App sets one strictly necessary session cookie so that Bitrix24 can keep you signed in while the App is open inside your portal. It contains a random session identifier only. The App uses no analytics, advertising or tracking cookies.
7. Third-party content delivery
The App’s pages load some static assets (fonts, scripts, styles) from public content delivery networks: jsDelivr, cdnjs (Cloudflare), jQuery CDN, unpkg and Tailwind CDN. When your browser fetches these assets, those providers receive your IP address and browser information, as with any website. These requests carry none of your listing data.
8. Server logs
Our servers keep standard technical logs (request paths, timestamps, IP addresses, error diagnostics) for security and troubleshooting. Logs are retained for [LOG RETENTION PERIOD — e.g. 30 days] and are not used for profiling.
9. How long we keep data, and deletion
- While installed: the installation record is kept, and your media files remain in your storage folder.
- When you uninstall: Bitrix24 immediately revokes the App’s access to your portal — the stored tokens stop working at that moment. The CRM entities and listing data the App created remain in your Bitrix24 portal, under your control. We keep the installation record (marked uninstalled) and your uploaded media so that reinstalling restores your configuration and files.
- Full deletion: to have your installation record and all uploaded media permanently deleted, email [SUPPORT EMAIL] from your organisation. We complete deletion within [DELETION SLA — e.g. 30 days] and confirm in writing.
10. Security
All traffic between your browser, our servers and Bitrix24 uses HTTPS. Each customer’s installation is isolated: API access requires an authenticated Bitrix24 session for your own portal, feeds require your feed token, and storage is namespaced per installation with server-side checks. Access to our production systems is restricted to authorised Joefex personnel. No method of storage or transmission is completely secure; if we become aware of a breach affecting your data we will notify you without undue delay at your portal’s administrator contact.
11. Where data is processed
Our servers are located in [HOSTING COUNTRY/REGION — decide with the production hosting choice]. Your Bitrix24 data itself is hosted by Bitrix24 under its own terms and locations.
12. Your rights
Depending on applicable law (for example the UAE Personal Data Protection Law, or the GDPR where it applies), individuals may have rights of access, correction, deletion and objection. For data held in your Bitrix24 portal, exercise these with the Customer (your organisation), which controls that data. For the little we hold — the installation record, media files and logs — contact [SUPPORT EMAIL].
13. Children
The App is a business tool and is not directed at children.
14. Changes to this policy
We may update this policy when the App or the law changes. The current version is always available at this address, with the “Last updated” date above. Material changes will be announced through the App or the Market listing.
15. Contact
Joefex
[REGISTERED ADDRESS]
Email: [SUPPORT EMAIL]
Website: https://joefex.com