سياسة الخصوصية

This policy applies to Bunyan Engineering Business System, a platform for managing companies, projects, teams, site reports, approvals, engineering documents, and related financial records. “We” means the operator of the Bunyan system. Each company manages its users, projects, and access roles. A separate agreement between your company and the operator may also apply.

• Account information: name, email address, a protected password representation, account status, membership, and role.
• Company information: company name, contact details, address, and identity details entered by an authorized company manager.
• Work information: projects, tasks, site reports, photos, attachments, comments, review and approval decisions.
• Contract and finance records: contracts, bill items, payment claims, invoices, payments, and audit records entered by the company.
• Operational information: sign-in and change events needed for security and service operation, and technical information sent by your browser.

The system does not request a user’s payment card or bank account details just to sign in.

We use information to create and verify accounts, determine the authorized company workspace and role, display projects and tasks, record reports and decisions, produce documents requested by a company, and send membership invitations and account recovery messages when email delivery is enabled.

We also use change records for review, accountability, account protection, and troubleshooting. We do not use project data for targeted advertising.

When Google Sign-In is enabled, Bunyan uses Google's stable account identifier and verified primary email to link sign-in to an existing active Bunyan account with the same email. This option does not create an account, membership, or role, and does not grant platform-owner access.

Bunyan does not request access to Gmail, Google Drive, or contacts for sign-in. Google data is used only to verify identity and link the existing account.

Company and project data is shown to authorized members according to their membership, roles, and project scope. Membership in one company does not grant access to another company’s data. Authorized company managers may manage memberships and view information needed to administer their company.

The system runs on LibyanSpider JPaaS hosting infrastructure. The hosting provider may technically process data to provide the service. We do not sell personal information or share it for marketing. We may disclose limited information where required by an applicable legal obligation or to protect service and user security.

The system uses an essential session cookie to keep a user signed in and enforce permissions. A session lasts up to eight hours. In production, the session cookie is configured with HttpOnly and Secure attributes and appropriate cross-site sending restrictions. It is not used for advertising.

We apply access controls by company and role and restrict attachment access according to permissions. No electronic transmission or storage method is completely risk-free. Please protect your password and do not share it.

We retain account and company content while needed to provide the service or meet operational, contractual, or security needs. Some decision and audit records or documents may remain after an account is disabled to preserve work history or meet applicable obligations.

To request access, correction, or deletion of account information, contact us from your registered email. If the information belongs to a company workspace, we may need to involve an authorized company manager. Removing work records may require company approval or completion of relevant obligations.

For privacy questions or requests, email email@bunyan.net.ly. We will publish changes on this page and update the revision date.