Last updated: 03 October 2026 · Effective immediately
This Privacy Policy describes how the OBTECH Maintenance app and web portal (the "Service") handles your personal information. The Service is operated by MISSAN COMPUTER L.L.C.SP, a company registered in Sharjah, United Arab Emirates ("Missan"), on behalf of Belresheed Facility Management ("Belresheed"). "We" and "us" mean Missan and Belresheed together.
1. What we collect
The Service collects only the information needed to operate ticket management for Belresheed-managed buildings:
Account information: email address, mobile number, full name, role (tenant / technician / supervisor / admin).
Tenancy information: the building and unit you occupy or are responsible for.
Contract & payment information (for tenants whose records are provided by the building's property-management system, PACT): your contract reference, its start and end dates and the annual rent, and the payments recorded against maintenance jobs (cash, collected on site or paid at the office). Where the property system provides it, an Emirates ID reference may be received to verify your tenancy; it is checked against your contract and not kept.
Tickets you raise: category, description, photos and videos you upload, timestamps, and the technician assignment trail.
Location inside photos and videos: phone cameras can save the place where a photo or video was taken inside the file. When you upload a photo, the Service removes this location, together with the other camera details stored in the photo (such as the time it was taken and the phone model), before it is saved. Photos uploaded before this change may still contain it, and so may a picture the Service cannot process (for example an animated image, or a file it cannot read), which is stored as received. Videos are stored as recorded, so a video can contain the location if your phone's camera saves it; you can switch this off in your phone's camera settings.
Voice notes (older app versions only): versions of the app before 1.0.3 could attach a voice note to a ticket. From version 1.0.3 the app no longer records voice notes; videos you record in the app include sound. Voice notes already attached stay on their ticket so the staff handling it can listen to them. AI features, when enabled, may transcribe or translate such a voice note to text. AI features are currently switched off, so voice notes are stored and played back exactly as recorded. The app uses the camera and microphone only while you are taking a photo or recording a video inside the app — never in the background.
Push-notification token (optional): if you allow notifications on your device, the app registers a device token issued by Google Firebase Cloud Messaging (Android) or the Apple Push Notification service (iOS). We store it against your account only so we can send you ticket updates. It is removed when you sign out, when the token stops working, and when your account is deleted. If you do not allow notifications, no token is stored.
App version: the version of the app and the phone type (iOS or Android) you use, to support you.
Building location: the geographic coordinates of managed buildings, used to display them on a map and route the correct field crew. This is the building's location — the Service does not track the live location of your device.
Signatures & operational logs: e-signatures captured on completed work orders (including the time, IP address and device/browser used to sign), login timestamps, the IP address of failed logins, and audit events for sensitive actions.
2. What we do NOT collect
We do not collect biometric data, and we do not track the live location of your device.
Apart from the push-notification token and the technical details listed above (the IP address and browser/device recorded with signatures and failed logins), we collect from your device only what you choose to enter or attach (text, photos and videos, and voice notes from app versions before 1.0.3).
We do not embed third-party advertising or analytics SDKs. The app uses Google Firebase only to deliver push notifications.
We do not sell or rent your information to any third party.
3. How we use your information
To create and authenticate your account.
To route maintenance tickets to the correct technician and the building supervisor.
To produce an audit trail required for facility-management compliance.
To notify you about updates to tickets you are involved in — in the app, by email, and by push notification if you allow them.
4. Who we share it with
Belresheed Facility Management staff — admins, managers, supervisors, technicians, store keepers and building security staff (only the records relevant to their role).
MISSAN COMPUTER L.L.C.SP as the technology provider, for the limited purpose of operating, maintaining, and securing the Service.
Service providers that process data on our behalf, only as needed to run the Service:
DigitalOcean — hosts the application servers, database, uploaded files and the nightly backups in its Frankfurt data centre, in Germany.
Cloudflare — network security and delivery; all traffic to the Service passes through Cloudflare.
The email provider chosen by Belresheed — sends the Service's emails, such as invitations and ticket notifications. It receives your email address and the email content.
Google (Firebase Cloud Messaging) and Apple (Apple Push Notification service) — deliver push notifications. They receive your device's push token and the notification title and text. That text can include the ticket number and status, the names or email addresses of the people involved, amounts, and short notes about the job.
AI features (automatic transcription or translation of voice notes, photo categorisation), when enabled, send the audio, photo or text to an AI speech-to-text / translation / image-analysis provider only to produce the transcript, translation or suggested category. These features are currently switched off, so no AI provider receives your data.
The Service's servers, database and uploaded files are in Germany (DigitalOcean, Frankfurt), so your information is stored outside the United Arab Emirates. Cloudflare, the email provider, Google and Apple may also process it in other countries. These providers act only on our instructions, to operate the Service.
OpenStreetMap: the map screens that Belresheed's administrators and managers use to place buildings and draw service areas (on the web and in the app) load their map images from the OpenStreetMap Foundation's servers. As with any website, the device showing the map sends them its IP address and the name of the browser or app; no account or ticket information is sent. Tenants and technicians do not use these screens.
We do not sell or rent your information to any third party.
We disclose information to authorities only when required by UAE law.
5. How we protect your information
All traffic is encrypted in transit using HTTPS.
Passwords are stored hashed with bcrypt; we cannot recover plain-text passwords.
Sign-in tokens are cryptographically signed and expire after 30 days: you stay signed in on a device until you sign out, for up to that long. A session ends at once when you sign out, when your password changes, or when your account is deactivated.
Biometric sign-in (optional, phone app): if you turn it on, the app keeps a random device key in the phone's secure storage, readable only after Face ID, fingerprint or the device passcode. Your fingerprint or face never leaves the phone, and your password is not stored on it. The server keeps only a one-way hash of the key, the phone's name and type, and when it was set up and last used. The key stops working when you turn the option off, sign out on that phone, sign out on all devices, change your password, or when your account is deactivated.
Uploaded photos are served only via per-request signed URLs that re-validate your authorization on every fetch.
The Service is hosted by DigitalOcean in Frankfurt (Germany) behind Cloudflare, with rate limiting, security headers, and audit logging.
6. Data retention
Active tickets, photos, voice notes, and user accounts are retained for the duration of your tenancy / employment with Belresheed plus 7 years (UAE record-keeping norms, and because ticket/payment records document work already billed or performed).
Backups: the database and uploaded files are backed up every night. Each nightly backup is kept for 14 days on the server in Frankfurt, and an off-site copy kept by MISSAN COMPUTER in the United Arab Emirates is also kept for 14 days; older backups are deleted automatically. A one-off copy taken just before a software update is deleted within 14 days too. So information deleted from the Service, including an erased account, is gone from every backup within 14 days.
Requesting account deletion: open the app (Android build 21 or later; iPhone version 1.0.1 or later), go to Profile → Request account deletion, and submit the request (you can add an optional reason). This creates an audited request that is routed to a Belresheed / MISSAN COMPUTER administrator — it is not an instant automatic erase, because tenancy, payment and ticket records for buildings you occupied or worked on may need to be kept for accounting and legal purposes. Once actioned, your personal identifiers (name, contact details, login) are removed or anonymised; financial and ticket records required for retention are kept without your name attached. You can also cancel a pending request from the same screen. If you cannot access the app, you may instead email support@missan365.com from the address on your account and we will action it manually within 30 days. Step-by-step instructions, and exactly which data is deleted and which is kept, are on the account deletion page.
7. Your rights
Access — request a copy of your data.
Correction — ask us to fix anything inaccurate.
Deletion — request removal of your account in-app (Profile → Request account deletion), or by email as described above.
Portability — request your data in machine-readable form.
To exercise the access, correction or portability rights, email support@missan365.com from the address on your account.
8. Children
The Service is intended for facility-management staff and adult tenants. We do not knowingly collect information from anyone under 13.
9. Changes
If we materially change this policy we will notify you in-app and update the "Last updated" date above. Continued use after a change constitutes acceptance of the new policy.
10. Contact
MISSAN COMPUTER L.L.C.SP
Email: support@missan365.com
Address: Office 1503, Lake Corniche Street, Al Majaz, Sharjah, United Arab Emirates (P.O. Box 21017)