Terms & Conditions

Governed by the laws of the Sultanate of Oman

1. Acceptance of Terms

By accessing and using ArchCRM ("the App"), you agree to be bound by these Terms and Conditions. These Terms are governed by and shall be interpreted in accordance with the laws of the Sultanate of Oman. If you do not agree, please do not use the App.

2. Description of Service

ArchCRM is a complete project and contract management system designed for contractors, engineers, and service firms. The App provides:

• Quotation and Bill of Quantities (BOQ) creation and management
• Invoice and receipt generation and tracking
• Formal correspondence and site inspection reporting
• Supervision tracking and expense management
• Employee records and product catalog management
• Project file storage and client portal access
• Professional PDF document generation with company letterhead
• WhatsApp document delivery (optional integration)

3. User Accounts and Roles

You are responsible for maintaining the confidentiality of your account credentials. The App supports Admin, Project Manager, Staff, and Client Portal roles, each with specific permissions assigned by the system administrator. You agree to notify the administrator immediately of any unauthorized use of your account.

4. Data Accuracy

You are responsible for ensuring the accuracy of all data entered into the App, including client information, financial figures, project details, and employee records.

5. Intellectual Property

All content, design, and functionality of the App are the property of Levant Cloud and are protected by applicable intellectual property laws of the Sultanate of Oman and relevant international agreements.

6. Limitation of Liability

The App is provided "as is" without warranties of any kind. The developer shall not be liable for any direct or indirect damages arising from the use or inability to use the App, including loss of data or profits, to the extent permitted by Omani law.

7. Data Privacy and Sovereignty

The App is hosted exclusively on Levant Cloud's servers in Muscat, Sultanate of Oman — on local infrastructure, under local jurisdiction. All user data remains within the geographic boundaries of Oman and is subject exclusively to Omani law. Your data does not cross international borders and is not accessible to any foreign entity or jurisdiction.

7.1 Why This Matters

When business data is stored on cloud platforms headquartered in the United States, Europe, or other foreign jurisdictions, that data may be subject to legal frameworks beyond your control. Legislation such as the US CLOUD Act enables cross-border data requests regardless of where the server is physically located. This means that client lists, financial records, contract terms, and internal communications stored on foreign-owned platforms could be accessed by foreign government agencies — without notification to the data owner.

Beyond legal jurisdiction, international cloud providers may collect, aggregate, and analyze user behavior, spending patterns, business relationships, and communication habits — for product development, advertising, or purposes that are never clearly disclosed. When your business data resides on someone else's infrastructure, you have limited control over how it is used, who accesses it, or where it ultimately ends up.

7.2 How ArchCRM Protects Your Data

• Zero external calls. The App makes no external API calls unless WhatsApp integration is explicitly enabled by the user.
• No analytics tracking. No usage data is collected, aggregated, profiled, or transmitted to any third party — not by us, not by any embedded service.
• No third-party dependencies for core functions. Your quotations, invoices, client data, and project files never leave the regional infrastructure.
• Complete data isolation. Each customer receives a separate, independent instance with its own database. Your data is never mixed with, accessible to, or shared with any other customer.
• No foreign jurisdiction. There is no overseas server to subpoena. No foreign legal framework applies to your business data. The only authority over your data is you and the laws of the Sultanate of Oman.

8. Telemetry & Diagnostic Data

The App may share minimal telemetry data with the developer for the sole purposes of system health monitoring and maintenance. This telemetry is strictly limited to:

• Instance health status (online/offline)
• Company name and instance identifier
• Storage usage (total size used, not file contents or file names)
• Aggregate usage counts (number of users, clients, employees, and quotations)

8.1 What We Do NOT Collect

The following data categories are explicitly excluded from all telemetry and are never transmitted, accessed, or stored by the developer:

• Client names, contact details, or any client-identifying information
• Project content, descriptions, notes, or file contents
• Financial figures, invoice amounts, payment records, or pricing data
• Employee personal information, salary data, or HR records
• Uploaded documents, images, attachments, or any file contents
• User behavior patterns, click tracking, page views, or usage analytics
• Communication content (letters, correspondence, notes)
• IP addresses of end users or browsing metadata

There is no behavioral profiling, no advertising analytics, and no data monetization of any kind. Telemetry exists solely to ensure service continuity and to detect technical issues before they affect your operations.

9. Regulatory Compliance & Local Safety

As part of operating within Oman's regulatory environment, the App includes a built-in compliance layer designed to support national safety standards. This is a legal obligation consistent with the Sultanate's regulations on industrial materials and controlled substances.

9.1 How It Works

If document content — such as quotations, BOQ items, or project descriptions — references specific categories of regulated substances (industrial chemicals, controlled compounds, or similar materials), the system may flag those references for a routine compliance review by the relevant local authorities. In the vast majority of cases, this review is a routine matter that is acknowledged and dismissed with no further action — for example, standard construction materials, cement compounds, industrial solvents, and similar items commonly used in contracting and engineering projects.

9.2 Scope and Safeguards

The compliance process is subject to the following strict safeguards:

• Encrypted transfer. All flagged content is transmitted exclusively through end-to-end encrypted channels. No data is sent in plaintext or through unprotected pathways.
• Scoped review. Only the specific flagged terms and their immediate surrounding context are shared with authorities. Full business data, client records, financial information, employee data, and project files are never included. This is not bulk data access — it is a narrow, targeted reference check.
• Local authority only. Reviews are conducted exclusively by Omani regulatory bodies operating under Omani law. No foreign agency, government, or entity has access to this process or its data. This is fundamentally different from international cloud platforms where your entire dataset may fall under foreign jurisdiction.
• Transparent process. Flagged items are subject to clear, established Omani legal procedures. The process follows documented regulatory frameworks and does not involve secret or extrajudicial review.

9.3 What This Is — and What It Is Not

This compliance layer is equivalent to the standard regulatory checks that apply to any business handling industrial materials. It exists to support public safety within Oman, in the same way that any responsible business dealing with industrial materials cooperates with local regulations.

This is not surveillance. It is not profiling. It is not behavioral analysis. It is a narrow, encrypted, locally governed safety check — limited to specific regulated-substance keywords, processed entirely within Omani jurisdiction, subject to Omani law, and conducted by Omani authorities only.

The distinction is clear: on international platforms, your entire dataset resides under foreign jurisdiction with broad, often opaque access frameworks. On ArchCRM, your data is private by default — and the only compliance obligations are local, encrypted, narrowly scoped, and fully transparent.

10. Client Portal

The App provides a client portal protected by a 6-digit PIN. As the account holder, you are responsible for managing client portal access including expiry dates, PIN resets, and reviewing access logs.

11. Payment Terms and Service Continuity

Use of the App is contingent upon timely payment of all applicable fees. If payment is not received within twenty (20) days of the due date, access will be restricted. If payment remains outstanding for thirty (30) days, the instance will be automatically shut down. Following shutdown, data will be retained for up to one (1) year, after which it will be permanently destroyed.

12. Data Backup & Preservation

The App provides automatic backups with a 30-backup rotation cycle. You are responsible for regularly downloading backup files and storing them in a separate, secure location. The developer is not responsible for any data loss resulting from failure to maintain adequate backups.

13. Storage & Limits

Storage is subject to limits based on your subscription plan. File size and type restrictions apply. The service provider reserves the right to restrict uploads when storage limits are exceeded.

14. Governing Law

These Terms are governed by and shall be construed in accordance with the laws of the Sultanate of Oman. Any disputes arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of the Sultanate of Oman.

15. Modifications

We reserve the right to modify these Terms at any time with prior notice through the App. Continued use of the App after changes constitutes acceptance of the updated Terms.

Privacy Policy

1. Information We Store

The App stores information you provide directly, including your name, email address, company details, client records, invoices, project files, and employee information. All data is stored exclusively on Levant Cloud's servers in the Sultanate of Oman.

2. How We Use Your Information

Your information is used solely to operate the App and provide your requested services. The developer does not access or view your client data, project details, financial records, or any other business content.

3. Data Security

We implement multiple layers of security to protect your information:

• Password hashing using industry-standard algorithms
• CSRF protection on all forms and state-changing operations
• File upload validation (type, size, and content checks)
• Session isolation between users and instances
• Immutable activity audit logging (who, what, when, from which IP)
• Role-based access control (Admin, Project Manager, Staff, Client Portal)
• Granular permission management for each user role

All data remains on local infrastructure within the Sultanate of Oman. No data is replicated to, mirrored on, or backed up to any server outside of Oman.

4. Data Sharing

We do not sell, trade, rent, or share your information with any third party. Specifically:

• No data is shared with advertising networks, analytics services, or data brokers
• No user profiling or behavioral analysis is performed by any party
• No business data is accessible to the developer except through telemetry as described in Section 8 of the Terms & Conditions
• The only exception is disclosure required by Omani law or with your explicit written consent

Regulatory compliance regarding controlled substances (Section 9 of the Terms & Conditions) is conducted exclusively through end-to-end encrypted channels with the relevant Omani authorities, limited strictly to flagged terms and their immediate context.

5. Data Sovereignty & Jurisdictional Protection

Your data is stored exclusively within the Sultanate of Oman and is governed solely by Omani law. Unlike international cloud platforms where your data may be subject to foreign laws such as the US CLOUD Act, your information on ArchCRM is not accessible to any foreign government, agency, or legal process. There is no overseas server, no foreign data center, and no cross-border data flow. The only jurisdiction that applies to your data is the Sultanate of Oman.

6. Data Retention

We retain your data for as long as your account is active. In the event of payment default, data will be retained for one (1) year following service shutdown, after which it will be permanently destroyed. You may request deletion of your data by contacting the administrator.

7. Cookies & Local Storage

The App uses cookies and local storage to maintain your session, preferences, and language settings. These are essential for the App to function properly.

8. Contact

For any questions regarding these Terms or the Privacy Policy, please contact the system administrator or Levant Cloud support.