How we handle the personal and project data you entrust to BuildFlow. Last updated 11 August 2026.
BuildFlow is a construction and fit-out management system produced by Royex Technologies L.L.C, a software company registered in Dubai, United Arab Emirates. Where this policy says "we", "us" or "our", it refers to Royex Technologies L.L.C acting as the provider of BuildFlow.
Our registered office is Office 1706, 17th Floor, Saheel 2, 28th Street, Al Qusais – Al Nahda 1, Dubai, UAE.
We collect only what we need to respond to you and to deliver the software.
We do not buy contact lists, and we do not ask for payment card details through this website.
We use the information above to reply to your enquiry, prepare and run a demonstration, scope and price an implementation, deliver and support the software you have licensed, and meet our legal and accounting obligations in the UAE.
We may send you occasional product updates or guides relevant to construction and fit-out businesses. Every such message carries an unsubscribe link, and opting out never affects your support or licence.
The commercial and operational data you enter into BuildFlow — bills of quantities, rates, variation orders, invoices, retention records, snags, RFIs, drawings, daily reports and the rest — belongs to you. We claim no ownership over it and we do not use it to train models, benchmark against other clients, or share it with third parties.
Where you license BuildFlow with source code ownership, that data sits in a database you control. Our access is limited to what you grant us for support, and it can be revoked at any time.
BuildFlow can be deployed on UAE or Saudi cloud regions, or on your own infrastructure. Where you choose in-country hosting, your project data stays in that jurisdiction. Business correspondence and enquiry records are held on systems administered from Dubai.
Enquiries that do not lead to an engagement are deleted within 24 months. Client records are kept for the life of the licence and then for the period UAE commercial and tax law requires. You may ask us to delete your enquiry sooner at any time.
We use encryption in transit, role-based access control, audit logging and least-privilege administration. No system is perfect: if a breach affects your data, we will tell you and the relevant authority without undue delay, and explain what happened and what we are doing about it.
You may ask us for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or object to us using it for marketing. Write to us using the details in section 11 and we will respond within 30 days.
For anything in this policy, or to exercise a right described in section 9, reach us at:
This page is a plain-language summary of our data practices and is not legal advice. Where a signed agreement between us says something different, that agreement takes precedence.