Privacy Policy for UAE and GCC field teams

1. Who this policy covers

AmalCrew provides project-based workforce timesheets, approvals and Telegram notifications for contractors and field-service teams. In this policy, ‘AmalCrew’, ‘we’ and ‘us’ mean the operator of the AmalCrew service.

For marketing enquiries and website visitors, AmalCrew acts as the party deciding how that information is used. When an organization uses the workspace to manage its workers, that organization normally decides why and how worker information is used; it is responsible for its workforce notices and lawful basis, while AmalCrew processes the information to provide the service.

2. Personal data we collect

We collect only data needed for the relevant service interaction.

• Website enquiries: name, work email, company, team size, preferred language and the message you choose to send.
• Account and organization data: account holder name, work email, organization details, language and workspace settings.
• Workforce data entered by a customer: worker names, contact details where provided, job role, preferred language, project assignments, submitted regular and overtime hours, approval decisions and related audit records.
• Telegram data needed to run the worker workflow: chat or user identifiers, username where available, messages or choices required to complete an invitation or timesheet action.
• Technical data: basic service and security logs, plus privacy-conscious website analytics. We do not intentionally use query strings or authentication codes as marketing analytics data.

3. Why we use personal data

We use personal data to provide and secure the service, create and administer workspaces, deliver Telegram workflows and notifications, respond to a request, improve product reliability, prevent misuse, and comply with applicable legal obligations. We use contact-enquiry data to respond to the specific request and, where appropriate, to discuss AmalCrew with the enquirer.

4. Service providers and data sharing

We use carefully selected service providers to operate the product. They may process data only as needed to provide their services to us.

• Supabase provides the hosted application database and authentication services.
• Vercel provides website hosting and privacy-conscious web analytics.
• Telegram provides the messaging channel when a customer or worker chooses to use the AmalCrew Telegram workflow.
• We may disclose information where required by applicable law, to protect rights and security, or as part of a corporate transaction, subject to applicable safeguards.

5. International transfers

Our service providers may process data from locations outside the UAE. Where personal data is transferred internationally, we use the transfer only for the stated service purpose and take steps intended to ensure the transfer is made in accordance with applicable UAE data-protection requirements and appropriate contractual or technical safeguards.

6. Security and retention

We use measures appropriate to the service, including role-based access controls, restricted server-only credentials, authenticated workspace access and encrypted connections provided by our hosting providers. No service can guarantee absolute security.

We keep personal data only for as long as it is needed for the service, a legitimate operational purpose or a legal obligation. Contact enquiries are reviewed and deleted or anonymised when no longer needed. Workspace data is retained while an organization maintains the service and is handled on closure or a valid deletion request, subject to lawful retention requirements. Do not submit sensitive personal data in the public contact form.

7. Your choices and rights

Subject to applicable law, you may request information about your personal data, access a copy, request correction or deletion, restrict or object to certain processing, withdraw consent where processing relies on it, or raise a concern about our handling of data. Workforce users should normally first contact their employer or organization, which controls the workspace data.

• Use the AmalCrew Contact page or Telegram contact shown there to make a request.
• We may need to verify identity and authority before acting on a request.
• You may also have a right to raise a concern with the competent UAE authority where applicable.

8. Changes and contact

We may update this policy when the product, providers or legal requirements change. The date above shows the latest version. For privacy questions or requests, use the Contact page so we can route the request to the right person.