01Who we are
mbsystems — MBSYSTEMS SPC, Muscat, Sultanate of Oman (commercial registration 1605115), with offices in Vienna and Cairo. We build and run business software, including Revora.
For anything in this policy, write to office@mbsyss.com.
02This website (mbsyss.com)
- The site is delivered through Cloudflare, which handles the connection and protects the site from attacks. Cloudflare sees your IP address and the pages you request.
- We measure visits with Matomo, which runs on our own server (analytics.mbsyss.com) — no third-party analytics company receives the data. Matomo records the pages you view, the time, the site that sent you, your browser, device and approximate location. Your IP address is shortened before it is stored — its last two parts are removed — so it cannot point to you. It sets first-party cookies to tell a returning visitor from a new one.
- If you send us the contact form, we keep what you wrote (your name, contact details and message) on our server and forward it to our team by email, to answer you.
- We do not sell this data, and we do not use it for advertising profiles.
You can block or delete cookies in your browser; the site works without them. To have your visit data or a message you sent deleted, write to office@mbsyss.com.
03Our systems (Revora and others)
Revora and our other systems hold the data a company puts into them: its customers, leads, units, contracts, payments, staff and so on. For that data the company that uses the system decides what is collected and why; we keep and process it on its behalf and on its instructions, to run the service.
- Each company's data is kept apart from every other company's.
- The data is kept on servers we operate, reached only over encrypted connections (HTTPS). Passwords are stored as one-way hashes, never as text.
- Only our staff who run and support the service can reach it, and only to do that.
- When a user asks the built-in assistant (Maged) a question that needs an AI model, the text of the request and the records needed to answer it are sent to the AI model provider we use for that feature, only to produce the answer.
- Integrations a company switches on — for example WhatsApp, email, advertising accounts or property portals — send data to those services on the company's instruction.
If your data is in a company's Revora (for example as its customer or employee), please contact that company first; we will help it answer you.
04Google Calendar and Outlook sync
Revora can keep a person's appointments in step with their Google Calendar or Outlook. It only happens when that person presses «Connect» and approves it in their Google or Microsoft account, and it can be stopped at any time.
What we access
- Google: your account's email address (to show which account is connected), and only the calendars that Revora itself creates in your account — Google's permission for this (calendar.app.created) does not let Revora see your other calendars.
- Microsoft: your account's email address, and the calendar permission Microsoft offers (Calendars.ReadWrite). Microsoft's permission covers your calendars, but Revora reads and writes only the one calendar named «Revora» that it creates, and nothing else.
What we do with it
- Put your Revora appointments into the «Revora» calendar, and — if you choose two-way sync — bring what you add, move or delete there back into Revora as your own private calendar entries.
- You choose which kinds of appointments are synced and whether sync runs one way or both ways; your company may limit those choices.
- Nothing received from Google or Microsoft is sold, used for advertising, used to train AI models, or sent to an AI provider.
What we keep, and for how long
- The access tokens Google or Microsoft give us, stored encrypted, and the identifiers that link each synced entry to its Revora appointment.
- When you press «Disconnect», we delete the tokens and the links and remove the «Revora» calendar from your account. Entries already brought into Revora stay there as your calendar entries until you delete them.
- You can also withdraw access yourself: in your Google Account under Security → Third-party apps, or in your Microsoft account under Privacy → Apps and services.
Revora's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
05Your rights
You can ask us what personal data we hold about you, have it corrected, or have it deleted, and you can object to how we use it. Write to office@mbsyss.com and we will answer within 30 days. Where the data belongs to a company that uses our systems, we pass the request to that company and help it answer.
06Keeping and deleting data
We keep data only as long as it is needed for the purpose above or as the law requires. A company's data is kept for as long as it uses our systems; when it leaves, the data is handed back or deleted as agreed with it.
07Children
Our website and systems are for businesses and are not directed at children.
08Changes to this policy
When this policy changes, the date at the top changes with it. Material changes to the calendar sync are shown in Revora before they take effect.
Book a live walkthrough on your own data, or ask for a quote for your company.