Privacy Policy
This Privacy Policy explains how CGArabia (“we”, “our”, “us”) collects, uses, shares, and protects your personal data
when you access or use our community platform (the “Service”), including when you sign in using Google OAuth.
Quick summary: We only collect what we need to run the forum, fight spam/abuse, and deliver notifications.
We don’t sell your data. If you use Google login, we only receive basic profile information you permit.
1) Who We Are
CGArabia operates an online community platform focused on the GCC AECO (Architecture, Engineering, Construction, and Operations) ecosystem.
For privacy questions or requests, contact us at support@cgarabia.com.
Suggested jurisdiction text (edit as needed): United Arab Emirates (UAE)
2) Information We Collect
Depending on how you use the Service, we may collect:
- Account data: name, username, email address, password hash (if you register with email/password).
- Google OAuth data (if you choose “Sign in with Google”): email address and basic profile info (e.g., display name, profile picture) as permitted by you.
- Community content: posts, replies, comments, reactions, and any files you upload (if enabled).
- Support and communications: messages you send to us and our replies (e.g., via email).
- Security/technical data: IP address, device/browser info, timestamps, and activity logs used for security, troubleshooting, and abuse prevention.
3) How We Use Your Information
- To provide and operate the Service (account creation, authentication, forum participation).
- To maintain safety and prevent spam, fraud, and abuse.
- To communicate with you (verification emails, notifications, service updates).
- To improve the Service (analytics, performance monitoring, feature planning).
- To comply with legal obligations and enforce our Terms of Service.
4) Google OAuth (Sign in with Google)
If you sign in using Google, we use Google OAuth to authenticate you. We may receive:
your email address and basic profile information depending on what you authorize.
- We do not access your Google Drive, Contacts, Calendar, or other Google services unless explicitly stated and authorized.
- We do not sell or rent Google user data.
- You can revoke access anytime via your Google Account settings.
5) Cookies and Similar Technologies
We use cookies/session storage to keep you logged in, remember preferences, and protect the Service.
Some security providers may also set cookies to detect and mitigate malicious traffic.
6) Sharing and Disclosure
We may share limited information only in the following situations:
- Service providers: hosting, security, and email delivery providers used to run the Service.
- Security: to prevent abuse, enforce policies, and protect users and the platform.
- Legal: if required by law, regulation, or lawful requests.
- Business changes: in case of merger, acquisition, or asset sale (we’ll provide notice where required).
7) Security
We implement reasonable security measures to protect your data, including HTTPS encryption and security protections.
However, no system is 100% secure, and we cannot guarantee absolute security.
Stack note (optional): Cloudflare security + email via Zoho Mail + Flarum forum platform
8) Data Retention
We retain personal data only as long as necessary to provide the Service, comply with legal obligations, resolve disputes,
and enforce agreements. Forum posts may remain visible even if you deactivate your account, unless removal is requested
and permitted under our policies.
9) Your Rights and Choices
You may have rights depending on your location and applicable laws, including to:
- Request access to or correction of your personal data.
- Request deletion of your account and associated personal data (where applicable).
- Opt out of non-essential communications (e.g., marketing emails).
To make a request, email support@cgarabia.com from your registered email address.
10) Children’s Privacy
The Service is not intended for children under [Insert Age] (commonly 13 or 16 depending on your policy).
If you believe a child has provided personal data, contact us to request removal.
11) International Transfers
Your data may be processed in countries where our service providers operate. We take reasonable steps to protect your
data when it is transferred internationally.
12) Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the effective date and, where appropriate,
provide additional notice.