Legal

Privacy

This is a draft. It has not been legally reviewed and it is not a finished privacy policy. It stays out of the search index until accurate policies are supplied.

Warehouse Bahrain is a marketplace for warehouses and industrial properties for rent and sale in Bahrain. Brokers publish the listings. Prices are in BHD. It is not a self-storage operator.

When Supabase is configured, accounts, profiles, listings and enquiries are stored there, and signed-in sessions use Supabase auth cookies. Listing photographs are stored in Cloudflare R2 when that storage is configured. The repository schedules a Vercel cron at /api/cron/lifecycle. Favourites and saved searches belong to the signed-in account that created them.

An enquiry stores the name, email, phone and message you submit, the listing it refers to, and later replies. The broker for that listing can see those details in order to reply. An enquiry does not reserve a warehouse or change its status. Names, phone numbers, email addresses and message text are not sent to analytics.

Page measurement uses Google Analytics, measurement ID G-PN6E9F0BCR. It receives page views, a successful enquiry, a phone click, and a WhatsApp click, together with the listing identifier and the locale. It does not receive names, phone numbers, email addresses, or message text.

The language switch stores a wb-lang cookie for one year. The public map uses Leaflet, OpenStreetMap and MapLibre. Listing text can be machine-translated with Google Cloud Translation when those server credentials are set. A Groq key can polish a broker's title and description when it is set. Google and Facebook sign-in run through Supabase only when those providers are enabled there.

A published listing stays on the public catalogue for 90 days unless it is renewed, marked leased or sold, or removed earlier. That is how long the listing stays public. It is not a decision about how long personal data is kept.

Still unresolved: retention periods for accounts, enquiries and expired listings are not decided. No production privacy contact is stored in this repository.

Local-demo path, still in the code: if the Supabase environment variables are absent, account, listing and enquiry records stay in the project's local data file, and sign-in uses the alp_demo_session cookie for 14 days. That sentence describes local testing only. It is not a production retention policy.

Developer note: this draft has not received legal approval. Counsel must review it before it is treated as a policy.