Skip to content
Launching soon in Qatar.Join the waitlist
Qalypso
Security and your dataBuilt to follow the PDPPL

Your property data, handled the way it should be.

You are trusting Qalypso with the money and paperwork of your Qatar property. Here is exactly how we keep it private, isolated and yours, in plain language first, with the detail below.

The short version

Your data, in plain terms.

The quick answers first. The detail on how it works is below.

Who can see your data?

Only you and the people you invite. Accounts are kept separate, so no one else can read your records.

Where is it stored?

On managed servers in the European Union (Frankfurt), held to strict data-protection rules.

Is it encrypted?

Yes. It is encrypted in transit, and encrypted at rest by the database platform we use.

Do you sell your data?

No. We never sell or share your data for marketing. It is used only to run Qalypso for you.

Can you export or delete it?

Yes. You can ask for a copy of your data, or to delete it. Pre-launch, we handle these requests directly.

Is the public market data separate?

Yes. The public Qatar market figures are completely separate from your private account data.

How we protect it

Six commitments, by design.

Tenant isolation by design

Every property, lease, invoice and document is scoped to your organization, and that boundary is enforced at the database layer with row-level security on an organization_id. No account can ever reach another account's data. It is the foundation, not an afterthought.

EU data residency

Your data lives on managed cloud servers in the European Union, in the Frankfurt region, through Supabase. The EU holds data to strict, well-established rules under GDPR, not a black box.

Built to follow the PDPPL

We design around Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016): a lawful basis to process, data minimization, and clear purpose limitation. We collect what running the service needs, and nothing more.

Role-based access

Owners, managers and tenants each see a view scoped to them. A tenant sees their own lease, an owner sees their own properties, and managers run the org. Nothing leaks across roles.

No selling, no sharing

We never sell your data, and we never hand your data or your tenants' data to advertisers or other third parties for marketing. It is used only to run Qalypso for you. Encryption in transit protects it on the way.

Your data stays yours

Our commitment is that you can request access, export and erasure of personal data. You are never locked in, and your data is never held hostage.

Qatar's data-protection law

What following the PDPPL means for you.

Qatar's Personal Data Privacy Protection Law, Law No. 13 of 2016, sets the rules for handling personal data in the country. It is supervised by the National Data Privacy Office (NDPO) under the National Cyber Security Agency, and non-compliance carries administrative penalties of roughly QAR 1 million to QAR 5 million. Qalypso is built to follow its principles. We do not claim formal certification, because the law has no certification badge to hold.

Lawful basis and consent

We process personal data only where there is a lawful basis to do so, such as running the property management you have asked us to run, and we ask for consent where the law requires it.

Data minimization

We collect the data the service genuinely needs to work, not more. Less data held is less data at risk.

Purpose limitation

Data you give us to manage your property is used to manage your property. We do not repurpose it for advertising, profiling or resale.

Breach-notification posture

Our commitment is that if a personal-data breach were to affect you, we would investigate, contain it, and notify affected users and the relevant authority in line with PDPPL expectations. This is our policy, not a claim that an incident-response system is live today.

This is a plain-language summary of our approach, not legal advice or an official interpretation of the PDPPL. For the authoritative text, refer to the law and the NDPO.

Your rights over your data

Access, export, erasure.

Owners and tenants should be in control of their own personal data. Our commitment is that you can ask us to do each of the following. The product is pre-launch, so the self-serve tooling that performs these actions automatically is not built yet. Until it ships, we honor these requests directly.

Access

Ask what personal data we hold about you and why we hold it.

Export

Get a copy of your records in a portable form so your data can move with you.

Erasure

Ask us to delete your account and the personal data tied to it, subject to any records the law requires us to keep.

Where we are today

Honest about the stage we are at.

Qalypso is pre-launch and building toward its first Qatar customers. Accounts and the database are still being built, so some of what we describe here is our policy and direction rather than a live, running feature. We would rather tell you plainly what is live and what is planned than imply more than is true.

Live today

  • The public market data hub, ROI calculator and open API, with sourced, dated figures
  • HTTPS encryption in transit across the site
  • A privacy-first design with no advertising trackers selling your behavior

Policy and direction

  • Accounts with tenant isolation enforced by row-level security on organization_id
  • EU data residency (Frankfurt) through managed Supabase servers
  • Self-serve access, export and erasure of personal data, honored directly until the tooling ships

This page describes our approach and direction, not a contractual guarantee, and we make no claim of holding any formal security or privacy certification. For specific assurances, talk to us before you commit.

Common questions

Security, in plain language.

Who can see my property data?

Only you and the people you invite. Every record is scoped to your organization and your role, so one account can never read another account's data. Owners see their own properties. Tenants see only their own lease.

Where is my data stored?

On managed cloud servers in the European Union, in the Frankfurt region, through Supabase. The EU holds data to strict, well-established data-protection rules.

Is my data encrypted?

Yes. All traffic between your browser and Qalypso is encrypted in transit over HTTPS. Data at rest is encrypted by the managed database platform we use. We hold no formal security certification, and we will not claim one we do not have.

How are my documents protected?

The same way as the rest of your data. Every document is scoped to your organization and your role, so it never leaves your organization and is never shared outside it.

Can managers control who sees what?

Yes. Roles decide what each person can see. A manager sees everything in their organization. An owner sees their own properties. A tenant sees only their own lease. Those lines are not crossed by accident.

Do you sell or share my data?

No. We never sell your data, and we never share your data or your tenants' data with advertisers or other third parties for marketing. We use it only to run the service for you.

How are payments and payouts handled?

Qalypso records and tracks payments, invoices and owner settlements. We never hold, collect or move your money. Funds move directly between you, your tenants and your bank, outside Qalypso.

Does Qalypso give legal, tax or financial advice?

No. Qalypso gives you information to help you manage your property. It is not legal, tax or financial advice. Talk to a qualified professional for that.

How does this relate to Qatar's data-protection law?

Qalypso is built to follow the principles of Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016, overseen by the NDPO under the NCSA): a lawful basis for processing, data minimization and clear purpose limitation. We say built to follow its principles, not certified, because there is no PDPPL certification to hold.

Can I request access to, export of, or deletion of my personal data?

Yes, this is our policy and our commitment to you. Owners and tenants will be able to request access to, export of, and erasure of personal data. The product is pre-launch, so the self-serve tooling that performs this is not built yet. Until it ships, we honor these requests directly.

What about the public market data on this site?

The Qatar market figures we publish come from official open data under CC BY 4.0 and public sources, always cited and dated. That public hub is completely separate from any private account data.

Launching soon in Qatar

Join the waitlist, or look around first.

Qalypso opens to a first group of owners and managers soon. Leave your email and we will invite you, in English or Arabic. Prefer to explore now? The live demo runs on sample data, no sign-up.

  • Be first in line when Qalypso opens in Qatar
  • A live walkthrough for larger portfolios, in English or Arabic
  • Your details stay private, nothing is shared

Prefer email? Write to hello@qalypsoqatar.com.

Launching soon in Qatar. We email you only about your invite, never shared.