rabtone
RABTONE · YOUR RIGHTS & RESPONSIBILITIES

Privacy policy

سياسة الخصوصية

Understand what is saved, who can see it, and how to make a privacy request.

Effective 1 November 2026 · Version 2026-11-01Ask a question or make a request ↗
01

Private identity and licence verification

Through the private verification form, UAE profiles may submit Emirates ID, trade licences, broker cards and applicable authorisations. International profiles may submit national ID and, for company profiles, company registration certificates, import/export licences or registrations and applicable authorisations. These files are available to the account owner and authorised reviewers. With separate consent, OpenAI processes only the licence or broker card for a preliminary reading and consistency check. Identity documents, company registration certificates and authorisation letters are handled by the manual review team; processing may take place outside the UAE, and provider abuse-monitoring records may be retained for up to 30 days under its policies. AI results do not authenticate a document or prove identity. Independent checks, the declared profile details, the approval decision, expiry and an audit reference control access. Contact verification and document approval are separate. Account deletion includes these uploads, subject to applicable lawful retention. You may request correction, restriction or withdrawal through the support form.

02

Who handles your information

RABTONE is the platform brand at rabtone.ae. Company registration is pending; no registered company name, trade licence or government approval is claimed. The current platform operator handles privacy requests through the Support & privacy request form, available without login. Registered operator and business contact particulars must be confirmed and published before commercial launch.

03

Information we process

Account identifiers, your sign-in email and optional name; business profiles; requirements; saved items and follows; messages and shared reply details; contact-verification records; reviews and reports; policy acceptances; and support requests. CVs, business documents and attachments are processed only when you submit them. Infrastructure providers may process request logs, device/network information and IP addresses for hosting and security. Do not upload passports, payment-card details, medical records or third-party confidential information.

04

Why we use it

To provide the features you request, keep records connected to the right account, deliver verification codes, share a specific inquiry with its recipient, secure the service, investigate abuse, respond to rights requests and meet applicable legal duties. Feature-specific choices and sharing consent are requested where appropriate. We do not treat accepting terms, following a business or posting a need as permission for unrelated marketing. We do not sell personal contact lists.

05

Public and private information

Public business and requirement content may be viewed, indexed, copied or shared by others. Private seller leads and their attachments are visible to the poster and verified brokers. Keep personal contact details out of public descriptions. Raw business and requirement contact destinations are withheld from public APIs; selected destinations are released to a logged-in member after a consented inquiry. The recipient sees the reply details you agree to share. Inquiry counts are public totals, not public lists of people. CV access, owner documents and verification evidence have separate permission checks; choose visibility carefully.

06

Inquiry tracking and your controls

We save the submitted inquiry and its recipient, sender, channel and time. Distinct-person counts use signed-in account identifiers; external app handoffs are recorded separately and do not prove delivery, a conversation or a sale. Requirement owners can pause new contact, mark fulfilled, reopen or remove a post from public listings. Removal is not automatic deletion of related inquiry or audit records. A person who already saved a phone number may still contact it outside RABTONE.

07

Providers and international processing

The service uses hosting/authentication infrastructure associated with ChatGPT/OpenAI and Cloudflare, email delivery through Resend and configured phone verification through Twilio. Public website imports, map/place lookup and remote media may involve external services. WhatsApp, email apps, booking providers and other linked sites apply their own policies after you open them. Processing may occur outside the UAE. Appropriate provider terms, safeguards and transfer conditions must be maintained where required; we do not promise UAE-only storage or claim a completed transfer assessment.

08

Retention and security

We retain information while needed to run the relevant service, handle a request or dispute, prevent abuse or meet a legal obligation. Necessity must be reviewed; keeping a history does not override a valid deletion or restriction right. Expiry of a displayed post does not itself erase stored records. Access checks, private file permissions, hashed credentials and service safeguards reduce risk but cannot guarantee absolute security. Report a suspected exposure through Support & privacy requests without including passwords or OTP codes.

09

Your privacy choices and rights

Use account settings to review contacts, visibility and saved activity. Through the public request form you can ask for access, correction, deletion, restriction or withdrawal of a sharing choice, subject to applicable law. We may need proportionate proof that the account or data is yours before disclosure or action; never send an identity document unless specifically requested through a suitable secure process. We review any lawful retention exception and explain the outcome. You may approach the competent UAE data-protection authority where applicable. Necessary service messages and existing lawful records are separate from optional marketing.