Draft for review — have an Egyptian lawyer check this before public launch.
Privacy Policy
Last updated: 7 November 2026
This policy explains what personal data Eghaz collects, why, and your rights, in line with Egypt’s Personal Data Protection Law (Law No. 151 of 2020).
What we collect
- Account data: name, email, password (stored only as a secure hash), role, language.
- Profile data: university, faculty, city, discovery answers, skills, experience notes, portfolio links.
- Assessment data: quiz answers, practical work links, scores and reviewer feedback.
- Business data: company name, contact person, phone, project requirements and files you link.
- Payment data: transaction records. Card details are handled by our payment provider and never reach Eghaz.
- Payout data: wallet number, InstaPay address or IBAN and account holder name.
- Optional: WhatsApp number if you opt in.
Why we use it
- To recommend skill paths, run assessments and match talent to projects (matching is explainable and reviewed by people).
- To run projects, payments, payouts and notifications.
- To keep the platform safe (fraud prevention, audit logs, rate limits).
Who sees what
- Businesses see a student’s first name, relevant skills, assessment scores, portfolio and match reasons — never their email, phone, payout details or raw assessment answers.
- Payout details are visible only to you and Eghaz administrators.
- Service providers we use: hosting, database, email, payment and (if you opt in) WhatsApp. They process data only to provide their service.
- We never sell personal data.
Your rights
You can access, correct or delete your data, withdraw consent (e.g. turn off email/WhatsApp notifications in Settings), and object to processing. Email us to exercise these rights. Financial records may be kept as required by law.
Retention
We keep account data while your account is active and delete or anonymise it within 90 days after you close it, except records we must keep for tax and accounting.
Security
Passwords are hashed, sessions are signed, every request is permission-checked on the server, and sensitive admin actions are logged.
Contact
privacy@eghaz.com (replace with your real address)