Privacy Policy

PREFAB UAE — operated by Masah Al Murabaa Prefab Houses Tr LLC, Dubai, United Arab Emirates.
Effective date: 2 July 2026. Last updated: 2 July 2026.

This Privacy Policy explains how PREFAB UAE ("we", "us", "our") collects, uses, and protects your information when you use our mobile application and website (together, the "Service"). By using the Service, you agree to this policy.

1. Information We Collect

We only collect information needed to show you our products, process your orders, and respond to your enquiries:

• Order & delivery details — your name, email address, phone number, and delivery address, which you provide at checkout or when requesting a quote.
• Payment information — card payments are processed securely by Stripe. We do not receive or store your full card number, CVC, or bank details; Stripe handles these directly.
• Design prompts — if you use the "Design Your Cabin" feature, the text description you enter is sent to our AI image provider (OpenAI) to generate an image for you.
• Device storage — your shopping cart and any AI-image credits are stored locally on your own device (in your browser's local storage). This data stays on your device and is not sent to us as a profile.

We do not require you to create an account, and we do not collect location tracking, contacts, photos, or advertising identifiers.

2. How We Use Your Information

• To process and deliver your orders, and arrange delivery within the UAE or provide international shipping quotes.
• To respond to quote requests and customer enquiries.
• To process payments through Stripe.
• To generate the AI cabin designs you request.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Third-Party Services

We share information only with the service providers that make the Service work:

• Stripe — payment processing. See stripe.com/privacy.
• OpenAI — AI image generation from your design prompts. See openai.com/policies.
• Vercel — application hosting. See vercel.com/legal/privacy-policy.

4. Data Retention

We keep order and enquiry records only as long as needed to fulfil your order, provide support, and meet legal, tax, and accounting obligations. Locally stored cart data can be cleared by you at any time by clearing your browser/app storage.

5. Your Rights

You may request access to, correction of, or deletion of the personal information you have provided to us. To make a request, contact us using the details below.

6. Children's Privacy

The Service is intended for adults and is not directed at children under 18. We do not knowingly collect personal information from children.

7. Security

We use reputable providers and encrypted connections (HTTPS) to protect your information in transit. No method of transmission or storage is completely secure, but we take reasonable steps to safeguard your data.

8. Changes to This Policy

We may update this policy from time to time. The "Last updated" date above shows when it was last revised. Continued use of the Service after changes means you accept the updated policy.