Privacy policy
Last updated: 7 August 2026
Who we are
The controller responsible for the TPI portal is Trojan Property Investment (TPI), Abu Dhabi, United Arab Emirates, part of Alpha Dhabi Holding. TPI operates the portal at tpinvest.ai.
What we collect
The portal holds a narrow set of information, all of it tied to operating your account and the access registry:
- your account email and name, collected through the authentication provider;
- service-grant records — which TPI services an account may open, and at what role level;
- authentication and security logs;
- a theme preference, kept in your browser's local storage.
Where it comes from
The account details come from you, at sign-in. The service-grant records are synced hourly from TPI's own services' backends into the access registry.
Why we process it
We process this information in order to:
- operate your account and let you sign in;
- reflect which TPI services you may open, and at what role level;
- keep authentication and security logs for protection and auditing.
The bases for this processing are the performance of the service relationship with you, and TPI's legitimate interest in access management and security.
Who processes it
The portal relies on the following processors to operate. Each one handles only what it needs to deliver its part of the portal.
| Processor | What they do | Where |
|---|---|---|
| Clerk | Authentication | United States |
| Vercel | Hosting and edge delivery | United States and global edge |
| Supabase | The access-registry database | ap-south-1 (Mumbai) |
International transfers
Because these processors operate outside the United Arab Emirates, your information is processed outside the UAE. Transfers are limited to the processors named above and to what each one needs to deliver its part of the portal. Each transfer relies on the safeguards that apply to that processor's service.
How long we keep it
We keep your account data for as long as the account exists.
- Service-grant and audit records are kept while they remain operationally required.
- On request, TPI will delete data, subject to its legal obligations.
How we protect it
The portal protects information through:
- encryption of data in transit;
- server-side credentials that are scoped and access-controlled;
- role-gated administration of the portal itself.
Your rights
You can request access to, correction of, or deletion of the information the portal holds about you. Write to TPI at the address below.
A grant that was sourced from a TPI service may need to be actioned within that service as well.
Cookies and local storage
The portal uses only the following cookies and local storage:
| Name | Purpose | Type |
|---|---|---|
| Authentication session cookies | Sign-in session | Essential, session-scoped |
| tpi-theme | Theme preference | Local storage, persistent, non-tracking |
No marketing use
The portal does not process payments. It does not run marketing analytics, and it does not carry third-party advertising. The email addresses held in the access registry are never used for marketing.
Changes to this notice
TPI may update this notice from time to time. The current version is posted here, with the last-updated date shown above.
Contact
Questions about this notice can be sent to legal@tpinvest.ai.