Privacy Policy
Undertun Operations & Business Management System

Last updated: 25 June 2026

This Privacy Policy explains how Undertun Middle East LLC ("Undertun", "we", "us") collects, uses, and protects information within the Undertun Operations & Business Management System ("OBMS", the "Application"), an internal business application used by Undertun and its authorized personnel.

1. Scope

OBMS is a single-tenant internal application for Undertun Middle East LLC. Access is limited to authorized employees and contractors with login credentials. This policy applies to information processed by the Application, including data obtained through connected third-party services such as QuickBooks Online.

2. Information We Collect

  • Account information: name, email address, role, and credentials of authorized users.
  • Operational data: CRM, quotation, contract, equipment, personnel, and maintenance records entered by users.
  • Financial data from QuickBooks Online: when an authorized administrator connects a QuickBooks Online company, we access financial information (such as accounts, invoices, bills, and reports) on a read-only basis through Intuit's OAuth 2.0 API.

3. How We Use QuickBooks Online Data

  • Access is strictly read-only. We never create, modify, or delete data in your QuickBooks Online account.
  • QuickBooks data is used solely to display financial visibility and reporting within the Application to authorized Undertun personnel.
  • A cached copy of the retrieved data is stored in our PostgreSQL database and refreshed periodically (approximately every four hours, or on manual refresh) to reduce calls to Intuit and improve performance.
  • We do not sell, rent, or share QuickBooks Online data with any third party.

4. Data Storage and Retention

Data is stored in a secured PostgreSQL database, and documents are held in S3-compatible storage with access restricted to the Application. Cached QuickBooks Online data is retained while the integration remains connected. When an administrator disconnects QuickBooks Online, the stored OAuth tokens are removed and cached financial data is deleted.

5. Data Sharing

We do not sell personal or financial information. Data is not disclosed to third parties except: (a) service providers that host the Application on our behalf, under confidentiality obligations; or (b) where required by law.

6. Security

We use industry-standard measures including encrypted transport (HTTPS), role-based access control, encryption of OAuth tokens at rest, and append-only audit logging of system actions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Choices

Authorized administrators may disconnect the QuickBooks Online integration at any time from within the Application, which revokes our access and removes cached financial data.

8. Intuit and QuickBooks Online

Our use and transfer of information received from QuickBooks Online APIs adheres to Intuit's applicable terms and policies. Your use of QuickBooks Online is also governed by Intuit's own privacy policy.

9. Changes

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest revision.

10. Contact

Questions about this Privacy Policy can be directed to hisham.saleh@sunbirdit.com.

This Privacy Policy is governed by the laws of the United Arab Emirates (Emirate of Dubai).