Privacy Policy

Buraq Alliance L.L.C-FZ ("we", "us", "our") operates the Buraq ERP mobile and web application (the "App"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

By using Buraq ERP, you agree to the collection and use of information as described in this policy.

1. Who We Are

Buraq Alliance L.L.C-FZ
Dubai, United Arab Emirates
Contact (WhatsApp): +971 56 919 2649
(Also reachable via the "Contact Us" feature inside the App)

2. Information We Collect

2.1 Account & Business Information
When you register, we collect your business name, address, phone number, email, and Tax Registration Number (TRN); your login credentials; and company branding assets you upload (letterhead, signature, stamp).

2.2 Employee & HR Data
If you use the payroll and HR features, you may enter, for your own employees: name, designation, contact details, visa number and expiry, Emirates ID number and expiry, bank details, salary and attendance records, and uploaded documents (e.g. passport or visa copies).

You (the business/employer) are the data controller for your employees' information. We process it on your behalf as a data processor, strictly to provide the App's functionality to you.

2.3 Financial & Business Records
To provide the App's core functionality, we store the business data you create — invoices, quotations, purchase orders, receipt vouchers, income and expense entries, client and vendor details, inventory, assets, loans, timesheets, and VAT records.

2.4 Company Documents & Compliance Records
If you use the Company Documents feature, you may upload and store your business's official paperwork — trade licenses, vehicle registrations, insurance policies, contracts, and similar records — along with their reference numbers, issue dates, and expiry dates. This is used solely to help you track your own renewal deadlines.

2.5 Payment Information
Subscription payments are processed by Stripe, Inc. We do not store your full card details on our servers — Stripe handles payment processing directly and shares with us only what's needed to manage your subscription.

2.6 Biometric Authentication
If you enable biometric login (fingerprint/face unlock), authentication is handled entirely on your device using your device's operating system. We do not collect, transmit, or store your biometric data on our servers.

2.7 Push Notifications
We use push notification services (including Firebase Cloud Messaging) to send you alerts about your business activity. This requires a device notification token, which we store to deliver these alerts. You can disable notifications at any time in your device settings.

2.8 Device & Usage Information
We may automatically collect limited technical information, such as app version, device type, and general usage/error logs, to help us maintain and improve the App.

2.9 Photos & Attachments
The App may request access to your camera or photo library so you can attach receipts, documents, or images to records you create. These files are uploaded only when you choose to attach them.

3. How We Use Your Information

• Provide, operate, and maintain the App's features
• Process your subscription payments and manage your account
• Sync your data across your devices in real time
• Send you service-related notifications
• Respond to support requests
• Maintain the security and integrity of the App
• Comply with legal obligations (e.g. UAE tax/VAT record-keeping requirements)

We do not sell your personal data or your business data to third parties, and we do not use it for advertising.

4. Data Storage & Third-Party Service Providers

Your data is stored and processed using the following service providers:

Provider	Purpose
Supabase	Cloud database, authentication, and file storage
Stripe	Subscription payment processing
Firebase Cloud Messaging	Push notifications

These providers may store data on servers located outside the UAE. Each provider maintains its own security and privacy standards; we select providers that maintain industry-standard security practices.

5. Data Sharing

We do not share your personal or business data with third parties, except: with the service providers listed above solely to operate the App; with team members you explicitly invite via the App's multi-user features; if required by law or valid legal process; or with your explicit consent.

The App also includes optional "Share" features (e.g. sending a quotation, invoice, or receipt voucher via WhatsApp or email) — these only send the specific document you choose, at the moment you choose to share it, using your device's own WhatsApp/email app. We do not automatically share your data through these channels.

6. Data Retention

We retain your data for as long as your account is active, or as needed to provide you the App's services. If you delete your account, we will delete or anonymize your data within a reasonable period, except where we are required to retain records for legal, tax, or accounting purposes (e.g. UAE VAT record-keeping requirements typically require retaining financial records for 5 years).

7. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export the personal data we hold, or to withdraw consent where processing is based on consent. To exercise any of these rights, contact us using the details in Section 1.

8. Data Security

We take reasonable technical and organizational measures to protect your data, including encrypted data transmission, role-based access controls, and secure authentication. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Buraq ERP is a business management tool intended for use by business owners and their staff. It is not directed at, and we do not knowingly collect data from, children under 18.

10. International Data Transfers

As our service providers may process data outside the UAE, your information may be transferred to and processed in countries with different data protection laws than your own. We take steps to ensure your data remains protected wherever it is processed.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes through the App or by other reasonable means. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

12. Delete Your Account

You can permanently delete your Buraq ERP account and associated data directly from within the App:

• Open the Buraq ERP app and sign in
• Go to More → App Settings
• Tap Delete Account and confirm

This permanently deletes your login credentials and profile. Business records tied to your account (invoices, employee records, financial entries, etc.) are removed or anonymized within a reasonable period, except where we are legally required to retain financial/tax records (e.g. UAE VAT record-keeping, typically 5 years — see Section 6).

If you're unable to access the App, you can also request deletion by contacting us using the details in Section 13 below.