Privacy Policy · سياسة الخصوصية

Effective date: 26 April 2026 · Last updated: 26 April 2026

1. Who we are

Oqody Technology Solutions ("Oqody", "we", "us") provides software for businesses to manage contracts, accounting, customer relationships, legal compliance, and cheques. The Oqody mobile and web applications (the "Service") are operated from Abu Dhabi, United Arab Emirates.

2. Information we collect

2.1 Information you give us

• Account data: first name, last name, email address, country code, mobile number, password (stored as a one-way hash), account type (Normal user / Agent / Company).
• Company data: when you register or are invited to a company, we store the company's name, short code, license number, activity, phone, logo and your role within it.
• Profile updates: any changes you make to your name, phone number, or country code.

2.2 Information generated when you use the Service

• Authentication sessions (device-bound 30-day session tokens).
• Notifications you send or receive within Oqody (e.g. company invitations).
• Permission grants made by your company's owner or admin (which screens you can open within the company workspace).
• Operational logs (timestamps, IP address) for security investigations and abuse prevention.

2.3 Information we do NOT collect

• No third-party advertising identifiers.
• No location tracking.
• No third-party analytics SDKs (no Firebase, no Google Analytics, no Mixpanel).
• No social-graph data.

3. How we use your information

• To create and authenticate your account and keep your session secure.
• To deliver the contract / accounting / CRM / cheque-management features you request.
• To send transactional emails: email verification, password reset, company invitations, and account-status notices.
• To enforce permission rules within your company (only the owner / admins of a company can manage its users).
• To detect abuse and protect the Service.

4. Email and notifications

System emails are sent from info@oqody.com via Hostinger SMTP. We do not send marketing emails. You receive an email only when an action requires it (verify your address, reset your password, accept an invitation, confirm account deletion).

5. How we share your information

We do not sell your data. We share information only as needed to operate the Service:

• Inside your company workspace: the company's owner and admins can see your name, email, role, and activation state — this is the basis of team collaboration.
• Service providers: Hostinger (hosting + SMTP), the storage provider for our PostgreSQL database, and the platform stores (Google Play / Apple App Store) for app distribution.
• Legal obligations: if compelled by lawful order from a competent authority in the United Arab Emirates.

6. Data location and retention

Your data is stored on infrastructure operated from the United Arab Emirates. We retain account data for as long as your account is active. When you delete your account (Profile → Delete account), the account is marked inactive immediately and all sessions are revoked. Data is held for 30 days in case you contact us to recover it, after which it is permanently removed (excepting backups, which roll off within 90 days).

7. Your rights

You can:

• Access the personal data we hold about you (request via info@oqody.com).
• Update your name, country code and phone number from the in-app Profile screen.
• Reset your password from the Reset password screen.
• Delete your account from the in-app Profile → Delete account flow. Required by App Store Guideline 5.1.1(v) and provided to all users equally.
• Withdraw from a company by asking the company's owner to remove you, or by deleting your account.
• Lodge a complaint with the UAE data-protection authority if you believe we have mishandled your data.

8. Children

Oqody is a business tool not directed at children under 13. We do not knowingly collect personal data from anyone under 13. If you believe a child has provided us data, contact info@oqody.com for removal.

9. Security

Passwords are stored as salted one-way hashes — we cannot recover your password, only let you reset it. All public traffic between your device and our servers is encrypted via HTTPS. Database access is limited to authenticated server processes on the same private network.

10. Changes to this policy

We may update this policy as features change. Material changes will be communicated by email and via an in-app notice 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent version.

11. Contact