U.A.EXX·PLATES

Privacy Policy

Last updated: 2026-08-23

Who we are

XX.PLATES is an advertising platform for distinctive UAE car number plates, available at xxplates.com and as a mobile app. This policy explains what data we collect, why, what we do with it, and how you can delete it.

We are an advertising venue only. We are not a party to any sale, and we never hold money between a buyer and a seller.

What we collect

If you are a buyer: nothing. Browsing needs no account, you are never asked to pay, and we ask for no personal data to view ads or contact a seller.

If you are a seller and create an account, we collect:

  • Your email address — from Apple, Google, or email-link sign-in.
  • The display name you choose.
  • A WhatsApp number in international format — required to publish an ad, since it is the channel buyers use to reach you.
  • Your emirate and Instagram handle — both optional.
  • Your ad content: emirate, plate code, number, price, and an optional note.
  • Payment records: the processor's transaction reference, amount, currency, status and date. Card numbers are handled by a licensed payment processor and never reach our servers.

We also record aggregate per-ad counters (view count and Buy-button taps). These are totals, not tied to any individual. Like any web server, IP addresses and browser details appear in short-lived technical logs used for security and abuse prevention.

The app stores your language, light/dark preference and signed-in state on your own device. That data never leaves the device and is erased when you uninstall the app.

What we do not collect

We do not collect your location, your contacts, your photos or files, or advertising identifiers. The app contains no third-party analytics or advertising SDKs, we do not track you across other apps or websites, and we never sell your data to anyone.

How we use it

  • To publish your ad and let buyers reach you.
  • To moderate ads before they go live, and to prevent fraud and duplicate listings.
  • To collect the AED 50 ad fee and issue receipts.
  • To send you notices about your own account: ad approved or rejected, ad expiring, and a weekly reminder for unsold ads. You can turn these off.
  • To show you your own ad's statistics (views and interested buyers).

The WhatsApp handoff

Tapping Buy opens WhatsApp with a prefilled message containing the plate details. From that moment the conversation is directly between you and the seller and is governed by WhatsApp's privacy policy, not this one. XX.PLATES is not a party to it and cannot see its contents.

A seller's WhatsApp number never appears in browse pages or in the app's listing data; it is issued only at the moment you tap Buy.

Who we share it with

We use service providers who process data only on our behalf:

  • Supabase — database and authentication, hosted in Frankfurt, EU.
  • Apple and Google — when you choose to sign in with your account there.
  • A licensed payment processor — to handle the AED 50 ad fee.
  • The hosting provider that runs the site.

We do not sell personal data and we do not share it with advertising networks. We may disclose data if a competent UAE judicial or regulatory authority requires it.

How long we keep it

  • Your account data: until you delete your account.
  • Your ads: until you delete them, or delete your account.
  • Payment records: five years, per UAE financial record-keeping requirements — but after you delete your account nothing in them links back to you.
  • Technical server logs: a short period, for security purposes.

Deleting your account

You can delete your account at any time, in three ways:

  • In the app: Settings → Delete account.
  • On the web: Account → Delete account, or directly at xxplates.com/en/delete-account.
  • By email to support.xx.plates@gmail.com from the address on your account.

Deleted immediately: your account, display name, email address, WhatsApp number, all of your ads, and the reports filed about them.

Retained but unlinked from you: payment records (amount, date, transaction reference) for five years as a legally required financial record, and the moderation log that documents decisions taken about other users. After deletion neither contains your name, email or number.

Deletion is permanent and cannot be undone. Buyers have no account in the first place, so there is nothing for them to delete.

Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law 45 of 2021) you have the right to access your data, correct it, delete it, restrict or object to its processing, withdraw consent, and receive a copy of it. To exercise any of these, email support.xx.plates@gmail.com and we will respond within 30 days.

Children

The service is intended for people aged 18 and over. We do not knowingly collect data from anyone younger, and we delete it if we learn that we have.

Security

All traffic is encrypted over HTTPS. Database access is governed by row-level security policies, so no seller can reach another seller's data. We do not store payment card details.

Changes to this policy

If we make a material change we update the date above and notify account holders by email.

Contact us

For any privacy question, or to exercise your rights: support.xx.plates@gmail.com