Terms of Service

1. Agreement to Terms

These Terms of Service (“Terms”) constitute a legally binding agreement between you and Keyflow Technology Ltd (“Keyflow”, “Company”, “we”, “us”, or “our”), a company registered in the Dubai International Financial Centre (DIFC License No. CL-12435, Reference SR-661431), governing your access to and use of the Keyflow platform, including:

• LeaseFlow (leaseflow.keyflow.me) — property and lease management platform
• LeadsFlow (leadsflow.me) — real estate lead management and CRM
• Keyflow Connect (connect.keyflowae.com) — unified communications hub (WhatsApp Business and email)
• Keyflow Website (keyflowae.com) — our corporate website

(collectively, the “Services”), as well as any related software, applications, integrations, and documentation.

By accessing or using any of the Services, you agree to be bound by these Terms. If you do not agree to these Terms, you must not access or use the Services.

These Terms are governed by the laws of the Dubai International Financial Centre (DIFC) and the laws of the United Arab Emirates where applicable.

2. Definitions

• “Agency” means a real estate agency, property management company, or brokerage that registers for and subscribes to the Services.
• “User” means an individual authorized by an Agency to access and use the Services, including administrators, managers, and agents.
• “Client” means property owners, tenants, or other individuals whose personal data is managed through the Services by an Agency.
• “Contact” means any individual who communicates with an Agency through Keyflow Connect, including via WhatsApp or email.
• “Lead” means a prospective client or customer whose inquiry data is processed through LeadsFlow.
• “Content” means any data, information, documents, images, messages, or other materials uploaded to, generated by, or transmitted through the Services.
• “Organization” means the subscribing entity (Agency or other business) that holds the subscription to the Services.

3. Eligibility

To use the Services, you must:

• Be at least 18 years of age
• Have the legal capacity to enter into binding contracts
• Represent a legitimate real estate, property management, or related business (for LeaseFlow and LeadsFlow)
• Not be prohibited from using the Services under applicable law, including DIFC law, UAE federal law, and any applicable sanctions regulations
• Provide accurate and complete registration information
• Have authorization from your Agency or Organization to access the Services on their behalf

4. Account Registration and Security

4.1 Account Creation. To access the Services, your Agency must create an account by providing accurate and complete information. You agree to update your information promptly if it changes.

4.2 Account Security. You are responsible for maintaining the confidentiality of your account credentials. You agree to:

• Use a strong, unique password that meets our minimum password requirements
• Not share your account credentials with unauthorized parties
• Notify us immediately of any unauthorized access to your account
• Accept responsibility for all activities that occur under your account

4.3 SSO Access to Keyflow Connect. Access to Keyflow Connect is provided through single sign-on (SSO) authentication using your existing LeaseFlow or LeadsFlow account. You do not create a separate account for Connect. Your LeaseFlow or LeadsFlow credentials and permissions determine your access level in Connect. By accessing Connect, you agree that your user identity and organization affiliation will be transmitted via a secure JWT relay between the Services.

4.4 Account Termination. We reserve the right to suspend or terminate your account if we believe you have violated these Terms, engaged in fraudulent or illegal activity, or posed a risk to the security or integrity of the Services.

5. License and Access Rights

5.1 Limited License. Subject to your compliance with these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, revocable license to access and use the Services for your internal business purposes.

5.2 Restrictions. You agree not to:

• Copy, modify, or create derivative works of the Services or any component thereof
• Reverse engineer, decompile, or disassemble any part of the Services
• Rent, lease, sell, sublicense, or otherwise commercially exploit access to the Services
• Use the Services for any unlawful purpose or in violation of these Terms
• Interfere with or disrupt the Services or servers/networks connected to the Services
• Use automated systems (bots, scrapers, crawlers) to access the Services without our prior written permission
• Remove or alter any copyright, trademark, or proprietary notices
• Circumvent or attempt to circumvent any security measures, access controls, or usage limits
• Access the Services on behalf of a competitor for the purpose of benchmarking or competitive analysis

6. User Content and Data

6.1 Your Content. You retain ownership of all Content you upload to the Services. By uploading Content, you grant us a worldwide, non-exclusive license to use, store, process, and transmit your Content solely to provide the Services to you.

6.2 Responsibility for Content. You are solely responsible for the accuracy, legality, and appropriateness of your Content. You represent and warrant that:

• You have the right to upload and use the Content
• Your Content does not infringe any third-party intellectual property rights
• Your Content complies with all applicable laws and regulations, including the DIFC Data Protection Law 2020
• You have obtained all necessary consents from Clients and Contacts whose personal data you upload or process through the Services

6.3 Data Protection Responsibilities. You acknowledge that:

• Your Agency acts as the party with the direct relationship to Clients and Contacts whose personal data is processed through the Services
• Your Agency is responsible for ensuring it has an appropriate lawful basis for collecting personal data from Clients and Contacts (e.g., contract performance under the tenancy or management agreement)
• Your Agency must inform Clients and Contacts about data processing in accordance with applicable data protection laws
• Keyflow processes personal data in accordance with the Keyflow Privacy Policy (available at keyflowae.com/privacy-policy), which forms part of these Terms

6.4 Cross-Product Data. Where you use multiple Services (e.g., LeaseFlow and Connect), your Content may be linked across Services to provide integrated functionality. For example, a contact's phone number in Connect may be matched to a tenant record in LeaseFlow. This cross-product linking is governed by the Privacy Policy.

7. Acceptable Use — Keyflow Connect

In addition to the general restrictions in Section 5, your use of Keyflow Connect is subject to the following:

7.1 WhatsApp Business API Compliance. When using Connect to send WhatsApp messages, you agree to:

• Comply with Meta's WhatsApp Business Policy and Commerce Policy at all times
• Only send messages to contacts who have initiated a conversation with you or who have consented to receive messages from your Agency
• Not use WhatsApp messaging for spam, unsolicited marketing, or bulk messaging that violates Meta's policies
• Use approved WhatsApp message templates for business-initiated messages (outside the 24-hour conversation window)
• Not send messages containing content that is illegal, harassing, abusive, threatening, defamatory, or otherwise objectionable
• Not use WhatsApp messaging to collect sensitive personal data (such as financial account numbers or health information) unless absolutely necessary for the provision of your services and in compliance with applicable data protection law

7.2 Email Communications. When using Connect to send emails, you agree to:

• Comply with applicable anti-spam laws and regulations
• Not send unsolicited marketing emails without the recipient's prior consent
• Include accurate sender identification in all emails
• Honor unsubscribe requests promptly

7.3 Communication Recording. You acknowledge that all messages sent and received through Connect (both WhatsApp and email) are stored in the Keyflow platform for the purposes of conversation threading, audit logging, and service delivery. You are responsible for informing your Contacts that their communications are processed and stored by Keyflow, as described in the Privacy Policy.

7.4 Per-Agent WhatsApp Numbers. WhatsApp Business numbers in Connect are assigned per agent, not per agency. You are responsible for all messages sent from your assigned WhatsApp number. You must not share your WhatsApp number credentials or allow unauthorized persons to send messages from your number.

8. Fees and Payment

8.1 Subscription Fees. Use of the Services requires payment of subscription fees as specified in your selected plan. Fees are billed in advance on a monthly or annual basis as agreed.

8.2 Payment Terms. You agree to provide valid payment information and authorize us to charge your payment method. All fees are non-refundable except as required by applicable law or as otherwise specified in your subscription agreement.

8.3 Price Changes. We may change our fees upon 30 days' written notice. Continued use of the Services after a price change takes effect constitutes acceptance of the new fees. If you do not agree with a price change, you may terminate your subscription before the new fees take effect.

8.4 Late Payment. If payment is not received when due, we may suspend your access to the Services until payment is received in full. Suspension does not relieve you of your payment obligations.

8.5 Taxes. All fees are exclusive of applicable taxes, including UAE Value Added Tax (VAT). You are responsible for payment of all applicable taxes.

9. Intellectual Property Rights

9.1 Our IP. The Services, including all software, designs, text, graphics, logos, icons, and other materials (excluding your Content), are owned by Keyflow Technology Ltd and protected by copyright, trademark, and other intellectual property laws of the DIFC, the UAE, and international treaties.

9.2 Trademarks. “Keyflow”, “LeaseFlow”, “LeadsFlow”, “Keyflow Connect”, and our logos are trademarks of Keyflow Technology Ltd. You may not use our trademarks without our prior written permission.

9.3 Feedback. If you provide us with feedback, suggestions, or ideas about the Services, we may use that feedback without any obligation or compensation to you.

10. Third-Party Services and Integrations

10.1 Third-Party Integrations. The Services may integrate with third-party services, including but not limited to:

• Property portals (PropertyFinder, Bayut, Dubizzle) for lead ingestion and listing syndication
• Meta (Facebook/Instagram) for lead advertising integration
• Meta (WhatsApp Business API) for messaging through Connect
• Webhook and API integrations configured by your Agency (e.g., Zapier)
• UAE PASS for identity verification (where applicable)
• Government systems (RERA, Ejari, Dubai Land Department) for regulatory compliance

10.2 Third-Party Terms. Your use of third-party services through the Keyflow platform is subject to the respective terms and conditions of those third-party providers. You are responsible for complying with all applicable third-party terms.

10.3 No Liability for Third Parties. We are not responsible for the availability, accuracy, or content of third-party services. Any issues with third-party services should be directed to those service providers.

11. Service Availability and Support

11.1 Uptime. We strive to provide reliable Service availability but do not guarantee uninterrupted access. The Services may be temporarily unavailable due to scheduled maintenance, updates, or circumstances beyond our reasonable control.

11.2 Modifications. We reserve the right to modify, enhance, suspend, or discontinue any part of the Services at any time with reasonable notice. Material changes to core functionality will be communicated at least 30 days in advance.

11.3 Support. Technical support is provided via email at support@keyflowae.com during business hours (Sunday through Thursday, 9:00 AM to 6:00 PM GST). Response times may vary based on your subscription plan and the severity of the issue.

12. Prohibited Conduct

You agree not to:

• Use the Services for any illegal purpose or in violation of any applicable laws, including DIFC law, UAE federal law, RERA regulations, and data protection laws
• Upload malicious code, viruses, or harmful content to the Services
• Attempt to gain unauthorized access to the Services, other users' accounts, or Keyflow's infrastructure
• Harass, abuse, threaten, or harm other users, their Clients, or their Contacts
• Impersonate any person or entity, or falsely represent your affiliation with any person or entity
• Collect personal information about other users without their consent
• Use the Services to send spam, unsolicited communications, or messages in violation of applicable anti-spam laws
• Violate any applicable data protection or privacy laws, including the DIFC Data Protection Law 2020
• Use the Services in a manner that could damage, disable, overburden, or impair the Services or interfere with any other party's use of the Services
• Process special categories of personal data (as defined in Article 9 of the DIFC Data Protection Law) through the Services without our prior written consent and appropriate safeguards

13. Data Retention and Deletion

13.1 Active Accounts. While your account is active, we will retain your Content and data as necessary to provide the Services.

13.2 Account Termination. Upon termination of your account, we will retain your data for 30 days to allow for account reactivation. After 30 days, your Content will be securely deleted or anonymized, except as required by law or regulation.

13.3 Legal Retention. Certain data will be retained beyond account termination as required by law:

• Audit logs: 7 years minimum retention (DIFC regulatory requirement)
• Consent records: 7 years minimum retention (DIFC accountability requirement)
• Communication records (Connect messages): 7 years (audit trail requirement)
• Lease and property records: 7 years (RERA, Ejari, and DIFC regulatory requirements)
• Identity document records: 7 years (tenant verification requirements)

13.4 Data Export. You may request an export of your data at any time through the privacy settings in the applicable Service, or by contacting privacy@keyflowae.com. We will fulfil data export requests within 30 days.

14. Privacy and Data Protection

14.1 Privacy Policy. Our collection, use, and protection of personal data is governed by the Keyflow Privacy Policy, available at keyflowae.com/privacy-policy. The Privacy Policy is incorporated into these Terms by reference.

14.2 Data Subject Rights. Individuals whose personal data is processed through the Services have rights under the DIFC Data Protection Law 2020, including the rights of access, rectification, erasure, restriction, portability, and objection. Details of how to exercise these rights are set out in the Privacy Policy.

14.3 Data Processing. By using the Services, you acknowledge that:

• Personal data may be processed using artificial intelligence (AI), optical character recognition (OCR), and face detection technologies as described in the Privacy Policy
• Personal data may be transferred to processors outside the DIFC, with appropriate safeguards (Standard Contractual Clauses) in place as described in the Privacy Policy
• Communication data transmitted through Connect is processed by Meta (WhatsApp Business API) and AWS (email) as described in the Privacy Policy

15. Disclaimers and Warranties

15.1 AS-IS Basis. THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE” WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

15.2 No Guarantee. We do not warrant that:

• The Services will be error-free or uninterrupted
• Defects will be corrected within a specified timeframe
• The Services are free from viruses or harmful components
• Results obtained from the Services, including AI-generated analysis, will be accurate or reliable
• WhatsApp messages sent through Connect will be delivered (delivery is subject to Meta's infrastructure and policies)
• Third-party integrations will remain available or function without interruption

15.3 Legal Advice. The Services do not provide legal, financial, or regulatory advice. AI-generated document analysis, OCR extraction, and other automated features are tools to assist your work — they do not replace professional judgement. You should consult appropriate professionals for legal, financial, and regulatory matters.

16. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY DIFC LAW:

16.1 WE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, USE, OR GOODWILL, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICES.

16.2 OUR TOTAL LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICES SHALL NOT EXCEED THE AMOUNT YOU PAID US IN THE 12 MONTHS PRECEDING THE EVENT GIVING RISE TO LIABILITY.

16.3 THE LIMITATIONS IN THIS SECTION DO NOT APPLY TO LIABILITY ARISING FROM: (A) OUR GROSS NEGLIGENCE OR WILFUL MISCONDUCT; (B) DEATH OR PERSONAL INJURY CAUSED BY OUR NEGLIGENCE; OR (C) ANY LIABILITY THAT CANNOT BE EXCLUDED OR LIMITED UNDER DIFC LAW.

17. Indemnification

You agree to indemnify, defend, and hold harmless Keyflow Technology Ltd, its affiliates, and their respective officers, directors, employees, and agents from any claims, liabilities, damages, losses, costs, or expenses (including reasonable attorneys' fees) arising out of or related to:

• Your use of the Services
• Your violation of these Terms
• Your violation of any law or regulation, including data protection laws
• Your Content or any data you upload to or transmit through the Services
• Your infringement of any third-party rights
• Messages you send through Connect that violate applicable laws, Meta's policies, or recipients' rights
• Your failure to obtain necessary consents from Clients, Contacts, or Leads

18. Termination

18.1 By You. You may terminate your subscription at any time through your account settings or by contacting us at support@keyflowae.com. Termination does not relieve you of any payment obligations for the current billing period.

18.2 By Us. We may suspend or terminate your access to the Services immediately, without prior notice, if:

• You materially breach these Terms
• Your payment is overdue by more than 15 days
• We are required to do so by law, regulation, or court order
• Your use of the Services poses a security risk or legal liability
• We cease to offer the Services (with 90 days' notice)

18.3 Effect of Termination. Upon termination:

• Your right to use the Services immediately ceases
• Data retention provisions (Section 13) apply
• Provisions that by their nature should survive termination (including payment obligations, disclaimers, limitations of liability, indemnification, and governing law) will survive
• Any outstanding fees become immediately due and payable

19. Dispute Resolution and Governing Law

19.1 Governing Law. These Terms shall be governed by and construed in accordance with the laws of the Dubai International Financial Centre (DIFC).

19.2 Jurisdiction. Any disputes arising out of or related to these Terms or the Services shall be subject to the exclusive jurisdiction of the DIFC Courts.

19.3 Informal Resolution. Before filing any formal dispute, you agree to contact us at legal@keyflowae.com to seek an informal resolution. We will attempt to resolve any dispute within 30 days of receiving your notice.

20. Changes to These Terms

We may modify these Terms from time to time. If we make material changes, we will notify you by email or through the Services at least 30 days before the changes take effect.

Your continued use of the Services after the effective date of the revised Terms constitutes acceptance of those changes. If you do not agree to the revised Terms, you must stop using the Services before the new Terms take effect.

The current version of these Terms is always available at the Terms of Service page within each product.

21. General Provisions

21.1 Entire Agreement. These Terms, together with the Keyflow Privacy Policy and any subscription agreement or order form, constitute the entire agreement between you and Keyflow regarding the Services.

21.2 Severability. If any provision of these Terms is found to be unenforceable by a court of competent jurisdiction, the remaining provisions will remain in full force and effect.

21.3 Waiver. Our failure to enforce any provision of these Terms does not constitute a waiver of that provision or our right to enforce it in the future.

21.4 Assignment. You may not assign or transfer these Terms or your rights under them without our prior written consent. We may assign these Terms without restriction in connection with a merger, acquisition, or sale of all or substantially all of our assets.

21.5 Force Majeure. We shall not be liable for any failure or delay in performance of our obligations under these Terms due to causes beyond our reasonable control, including but not limited to natural disasters, war, terrorism, pandemics, labour disputes, government actions, power failures, Internet disruptions, or third-party service outages.

21.6 Notices. All notices under these Terms must be in writing. Notices to us should be sent to legal@keyflowae.com. Notices to you will be sent to the email address associated with your account.

22. Contact Information

If you have any questions about these Terms, please contact us:

23. Acknowledgment

BY USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ THESE TERMS OF SERVICE, UNDERSTAND THEM, AND AGREE TO BE BOUND BY THEM. IF YOU DO NOT AGREE TO THESE TERMS, YOU MUST NOT USE THE SERVICES.

Document Control

Review Schedule: Annually at minimum, or when Services or regulatory requirements change materially.

Next review date: 22 February 2027

These Terms of Service are maintained in accordance with the laws of the Dubai International Financial Centre (DIFC). They should be read in conjunction with the Keyflow Privacy Policy.

Document Reference: TOS-2026-001 | Keyflow Technology Ltd | DIFC License CL-12435