1. Information We Collect

When you contact us, request an estimate, or schedule a meeting, we collect minimal information:

• Contact Information:Name, email address, phone number
• Project Details:Service interest, project timeline, project type, complexity level
• Technical Data:IP address (for security and rate limiting), browser type, device information

2. How We Use Your Information

We use the information we collect for these specific purposes only:

• Respond to your inquiries and provide project investment estimates
• Schedule and conduct discovery meetings
• Improve our website performance and user experience
• Protect against spam and abuse (rate limiting, honeypot validation)

3. Data Storage & Security

Your data is stored securely and we're explicit about how: • **Database**: PostgreSQL with SSL encryption for all data in transit and at rest • **Hosting**: Vercel for application layer, with DDoS protection and automatic backups • **Backups**: Daily automated backups, retained for 30 days • **Access Control**: Encrypted environment variables; only essential team members have database access • **Data Retention**: Contact information kept for 2 years after last contact; you can request deletion anytime We do not sell, trade, or transfer your personal information to third parties. We also do not use your data to train AI models or for marketing beyond direct project communication.

4. Your Rights

You have explicit control over your data:

• Request access to your personal data (we'll provide a data export within 5 business days)
• Request correction or deletion of your data (with exceptions for legal/compliance records)
• Withdraw consent at any time (you can opt out of all communications)
• Lodge a complaint with the Egyptian Data Protection Authority or relevant data protection authority in your jurisdiction

5. Cookies & Tracking

We use minimal tracking: • **Essential Cookies**: Site functionality only (language preference, session ID) • **No Third-Party Tracking**: We don't use Google Analytics, Facebook Pixel, or similar platforms • **No User Profiling**: We don't build behavioral profiles or sell data to advertisers If we ever implement analytics in the future, we will use privacy-first tools (like Fathom or Plausible) and provide explicit opt-in consent.

6. Project Data & Client Ownership

When you hire Altruvex to build your system: • **Code Ownership**: You own 100% of the source code. We deliver it in a Git repository under your control. • **Database Ownership**: Your databases and all data within them are yours. We provide export formats and migration documentation. • **Compliance**: We handle GDPR/CCPA on your behalf during the build, but the compliance responsibility transfers to you after handoff. • **Third-Party Services**: Any services we integrate (Fawry, Vodafone Cash, Stripe, email providers) have their own privacy policies. We choose services that meet Egyptian/EU standards. • **No Lock-In**: If you switch providers mid-project or after launch, we provide complete documentation so another developer can take over immediately.

7. Payment & Security

For project payments: • We use Stripe or Egyptian bank transfers (never storing your card details directly) • Payment information is processed securely through PCI-DSS compliant systems • We send payment receipts to your email; we don't retain payment card details • For local Egyptian payments, we work with authorized payment processors that comply with CBE regulations

8. Data Processing & Subprocessors

We use these specific tools (not vague 'partners'): **Infrastructure**: Vercel (US), PostgreSQL hosting (EU or Egypt-region if requested) **Email**: SendGrid for transactional emails only **Payment Processing**: Stripe (US), Fawry (Egypt), Vodafone Cash (Egypt) **Code Hosting**: GitHub (Microsoft) **Monitoring**: Sentry for error tracking (EU servers, no personal data) **Communication**: Slack (internal only; we don't share your data) Each of these services has signed Data Processing Agreements where applicable. You can request our DPA template anytime.