Privacy Policy

What this covers

Arbun is a commercial workflow tool for contractors. Two different groups of people appear in it, and they are not treated the same way.

• Contractors — the businesses that hold an account and sign in.
• Their customers — the people a contractor quotes for. They never hold an account. Their details are entered by the contractor, or submitted through that contractor’s own enquiry form, and belong to that contractor.

What is recorded

For a contractor holding an account:

• Name, work email, phone number and company details.
• Trade licence and TRN, where entered — these are printed on quotes and tax invoices because UAE invoicing requires them.
• Sign-in sessions, and a log of significant commercial actions.
• Subscription tier and usage against its limits.

For a customer of a contractor:

• Name, phone, email and site address as the contractor recorded them.
• The enquiry, scope, quotes, approvals and any signature given.
• Photographs and documents uploaded against the job.

Separation between contractors

Every record is scoped to the company that created it, and that scope is enforced on each request rather than only in the interface. One contractor cannot read, alter or list another contractor’s customers, quotes, costs or margins.

Internal commercial figures — cost, margin, supplier rates and markup — are stripped before anything is rendered on a customer-facing page or returned from a public endpoint.

Who else receives data

Arbun does not sell data and does not share it for advertising. It is passed to these providers only to deliver the service:

• OpenAI — scope text, measurements and job photographs, to produce an estimate. Used to answer the request, not to train a public model.
• SendGrid — the recipient address and message when a quote, invoice or notification is emailed.
• Stripe — subscription billing. Card details are entered with Stripe and are never held by Arbun.
• Hosting and database providers — for storage and for running the application.

How long it is kept

Commercial records — quotes, approvals, variations, invoices and their version history — are kept for the life of the account and are deliberately not editable after approval, because they evidence what was agreed. UAE tax rules require invoicing records to be retained for five years.

Closing an account ends processing for new work. Records already created are retained for the statutory period, then deleted.

Your rights

You can ask for a copy of what is held about you, ask for a correction, or ask for deletion where no legal retention obligation applies. A customer of a contractor should raise these with that contractor first — they control the record; Arbun processes it for them.

Write to contact@arbun.build.

Security

Access requires an authenticated session. Passwords are stored hashed, never in readable form. Administrative access to another company’s records is restricted to named platform staff and is written to an audit log that records who looked at what and when.