Privacy Policy

Makeen ERP Privacy Policy

Last updated: July 17, 2025

Please read this Privacy Policy (“Policy”) carefully to understand how Makeen Technology (“we,” “us,” or “our”) collects, uses, shares, and protects your information when you visit or use the Makeen ERP website and related services (collectively, the “Services”). By accessing or using our Services, you agree to the terms of this Policy.

1. Introduction

This Policy explains the purpose and scope of our privacy practices. It applies to all personal data collected through our website, mobile applications, APIs, and any other channels by which you interact with Makeen ERP. Our goal is to be transparent about our data practices and to provide you with meaningful control over your information.

2. Information Collection

We collect the following categories of data:

• Personal Information
  – Name, title, organization
  – Email address, postal address, telephone number
  – Authentication credentials (username, hashed password)

• Device & Usage Data
  – IP address, browser type/version, operating system
  – Pages viewed, features used, timestamps, error logs

• Transactional Data
  – Subscription plan, billing history, payment method (limited tokenized details)

• Support & Feedback
  – Customer service inquiries, survey responses, chat transcripts

3. Data Usage

We use your information to:

1. Provide & Maintain Services
   – Authenticate users, process subscriptions, deliver updates.

2. Improve & Personalize
   – Analyze usage patterns to enhance features, tailor UI/UX.

3. Analytics & Reporting
   – Generate aggregate reports, track performance, detect anomalies.

4. Communications
   – Send transactional emails (invoices, notifications) and respond to inquiries.

5. Security & Fraud Prevention
   – Monitor for unauthorized access and suspicious activity.

4. Data Sharing

We may share your data in the following scenarios:

• Service Providers & Partners
  – Hosting, payment processors, analytics providers (under strict contracts).

• Legal Requirements
  – In response to lawful requests by public authorities, court orders, or to defend legal rights.

• Business Transfers
  – In connection with mergers, acquisitions, or asset sales, with notice and safeguards.

We never sell your personal information to third parties.

5. Data Security

We implement robust safeguards, including:

• Encryption
  – TLS 1.2+ for data in transit; AES‑256 for data at rest.

• Access Controls
  – Role‑based access, multi‑factor authentication for internal systems.

• Secure Development
  – OWASP‑guided code reviews, automated vulnerability scans, timely patch management.

• Incident Response
  – Formal breach notification procedures to affected users and authorities within 72 hours.

6. User Choices

You have control over your personal data:

• Access & Portability
  – Request a copy of your data in a machine‑readable format.

• Correction & Deletion
  – Update inaccurate information or request account deletion.

• Opt‑Out
  – Unsubscribe from marketing emails via links in communications or by contacting us.

• Account Settings
  – Manage cookie preferences and other tracking settings in your profile.

7. Cookies & Tracking Technologies

We use cookies and similar tools to:

• Enable Core Functionality
  – Session management, authentication.

• Analytics
  – Google Analytics, Matomo (anonymous usage insights).

• Performance & Personalization
  – Remember preferences, optimize load times.

You can manage cookie settings through your browser or via our cookie banner. Blocking cookies may affect site functionality.

8. Third‑Party Links

Our Services may contain links to external websites or services. We do not control, endorse, or assume liability for the content, privacy practices, or policies of those sites. We encourage you to review their privacy policies before providing any personal data.

9. Data Retention

We retain your personal data only as long as necessary to:

• Fulfill the purposes outlined in this Policy

• Comply with legal, tax, or accounting requirements (typically up to 7 years)

• Resolve disputes and enforce agreements

After these periods, we securely delete or anonymize your data.

10. Legal Basis & Compliance

• Omani Law
  – Compliant with Oman’s Personal Data Protection Law.

• International Regulations
  – GDPR: We process EU resident data under legitimate interests, performance of a contract, or consent.
  – CCPA: California residents may exercise rights to access, delete, or opt out of data sales (though we do not sell personal data).

You may lodge complaints with supervisory authorities in your jurisdiction.

11. Updates to This Policy

We may update this Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated via email or a prominent notice on our Site at least 30 days before taking effect.