Privacy Policy & Data Protection

Welcome to EgyBay (egbay.shop / EgyBay Mobile Application). We are dedicated to maintaining the highest standards of data privacy and security. This Privacy Policy complies with: • Egyptian Personal Data Protection Law No. 151 of 2020 (قانون حماية البيانات الشخصية). • Egyptian E-Commerce Regulations and Consumer Protection Law No. 181 of 2018. • Apple App Store Review Guidelines (Section 5.1 - Privacy and Data Security). • Google Play Developer Policy on User Data. By accessing our website, creating an account, or transacting on EgyBay, you acknowledge and agree to the practices described in this policy.

To provide safe marketplace transactions, escrow payment protection, and courier fulfillment across Egypt, we collect: A. Personal & Contact Information: • Full name, email address, Egyptian mobile number (Vodafone, Orange, Etisalat, WE). • Delivery & shipping addresses (Governorate, City/District, Street address, Building details). B. Authentication & Security Data: • Passwords securely hashed and salted via Supabase Auth with Row-Level Security (RLS). • Session tokens, device IP address, and browser fingerprints for fraud and unauthorized access prevention. C. Transaction & Escrow Ledger Data: • Purchase and sale orders, escrow holding status, and confirmation PIN release timestamps. • Verified seller payout destinations: InstaPay Address (IPA), Vodafone Cash / Mobile Wallet numbers, or Egyptian Bank IBAN. • Note: Credit/debit card numbers are processed directly by our PCI-DSS Central Bank of Egypt-compliant payment gateway (Paymob). We never store complete credit card numbers or CVV codes on our servers. D. Optional KYC Verification Data (For High-Tier Sellers): • Egyptian National ID (بطاقة الرقم القومي) front and back images for account verification to safeguard buyers against fraud.

We process personal data strictly for legitimate business and transactional purposes: • Executing Escrow Transactions: Holding buyer funds safely until doorstep inspection or PIN confirmation, then disbursing payouts to sellers. • Logistics & Order Delivery: Sharing your delivery address and phone number with the seller of your order, who is responsible for arranging delivery via a courier of their choice. • Fraud Prevention: Detecting prohibited items, unauthorized logins, and lookalike marketplace attempts. • Direct Communication: Sending transactional SMS/email receipts, order delivery updates, and customer support resolutions.

EgyBay NEVER sells, rents, or monetizes your personal data or contact details to third-party marketing brokers. Data is shared strictly with authorized infrastructure partners necessary to fulfill platform operations: • Sellers: Your delivery address and phone number are shared with the seller of your order so they can arrange courier delivery or an in-person meetup. EgyBay does not currently have an exclusive courier logistics partner -- sellers arrange delivery independently. • Payment Processing (Paymob / Central Bank of Egypt Integrations): For card checkout and automated payouts. • Cloud Infrastructure (Supabase / AWS Ireland/Frankfurt): Encrypted database storage with automated backups and strict access controls. • Legal Authorities: Only when mandated by a legally binding court order or official warrant under Egyptian Law.

Under Law No. 151 of 2020 and Apple App Store guidelines, you have total control over your data: • Right to Access & Rectify: You can review and edit your profile details at any time in Profile Settings. • Right to Data Portability: Request an export of your order history, transaction records, and listing data. • Right to Permanent Erasure (Account Deletion): 1. In-App: Go to Profile → Settings → "Delete Account & Purge Data". 2. By Email: Send a deletion request to info@egbay.shop from your registered email. Upon request, all personal identifiers, active sessions, and uploaded documents are permanently purged within 72 hours, retaining only non-identifiable financial ledger records required by Egyptian commercial tax law.

• All traffic between your browser and our servers is encrypted using 256-bit TLS/SSL certificates. • Database Row-Level Security (RLS) guarantees that only you and your counterparty can read private chat messages. • National ID documents and verification media are stored in isolated private S3-compatible object storage with signed, expiring URLs.