The Hub — Privacy Policy

Effective 8 October 2026 · Arabian Research Bureau (ARB) / OITE, Muscat, Oman

The Hub is an internal staff application for employees of Arabian Research Bureau and its OITE events division. It is not offered to the public. Only people with a company Microsoft 365 account (@oite.com or @arabianresearch.com) can sign in.

What the app collects

• Identity: your work name, email address, job title, department and profile photo, provided by Microsoft 365 when you sign in. We never see or store your Microsoft password.
• Work records you create or view: attendance and leave requests, approvals, tasks and projects, meeting-room bookings, meeting notes, CRM records (leads, accounts, contacts, opportunities), company documents and chat messages. These belong to the company and already exist in the company's systems.
• Device: a push-notification token so the Hub can alert you to approvals, assignments and announcements, and basic device information (platform, app version) to keep your session secure.
• Optional: photos or files you choose to upload (for example a document scan or a meeting recording), and the microphone only while you record a meeting note. Location is not collected.

How it is used

Solely to run the company's internal operations: HR and attendance, approvals, sales, project work and internal communication. Some features use an AI assistant (Google Gemini) to summarise text you provide, such as a meeting recording or a web page you share; the content is processed for that request only and is not used to train models.

Sharing

Data stays within the company's own systems: our servers, Microsoft 365 / SharePoint, and the AI provider for the features above. We do not sell data, show advertising, or share data with third parties for their own purposes.

Retention and your rights

Records are kept for as long as you are employed and as required by Omani employment law. Signing out of the app removes its session from your device. To access, correct or delete your data, or to remove a device, contact the IT department.

Security

All traffic is encrypted (HTTPS). Sign-in uses Microsoft Entra ID with the company's security policies. Access to HR data is role-based.