Privacy Policy

This policy explains how Kayan collects, uses and protects your personal data when you use the Kayan platform and website. We comply with the Personal Data Protection Law No. 151 of 2020 and its executive regulations and with other relevant Egyptian laws.

1. Who we are and our role

• For your account, billing and use of the Platform we are the "controller".
• For your business data that you enter into the Platform (your customers, suppliers, invoices…) you are the controller and we are the "processor", processing it on your behalf and on your instructions to provide the service.

2. Data we collect

• Account data: name/company name, business type, email, password (stored hashed, never in readable form) and the user's role.
• Your business data: what you enter into the Platform — customers, suppliers, products, invoices, payments, expenses and so on — which may include data about people (names, phone numbers, addresses).
• Order and payment data: the Package, payment option, amount, payment status and order/payment identifiers. We do not receive your card number or security code; you enter them on the XPay page.
• Acceptance record: the version numbers of the terms and policies you accepted, the date and time, network address and browser type.
• Technical data: operating and security logs and the device/browser information needed to secure the service and diagnose faults.
• Your communications with us and the data you provide when contacting support.

3. Why we process it and on what basis

• Performance of the contract: creating your account, providing the service, processing payment and renewal, issuing invoices.
• Legal obligation: keeping records, invoices and technical logs as Egyptian laws require.
• Consent: where your explicit consent is required; you can withdraw it as set out in section 8.
• Legitimate interest: securing the Platform, preventing fraud and improving performance, without harming your rights.

We do not sell your personal data and do not use it for advertising.

4. Who we share data with

• XPay to process payments (it receives the payment details you enter directly on its page).
• Cloud infrastructure providers: the database and authentication provider (Supabase) and the application host (Vercel), and the sender of account-confirmation and password-reset emails.
• Official authorities where there is a legal obligation or a court order.
• Your team members, according to their permissions inside the Account. Each company's data is isolated from other companies.

We require these providers to protect data appropriately, and we do not share your data with third parties for their marketing.

5. Transfers outside Egypt

Data may be stored and processed by providers whose servers are outside Egypt. Transfers outside Egypt are subject to the Law and its regulations, and we take the steps they require.

6. How long we keep data

• Account and business data: for the duration of the subscription, and afterwards handled under section 10 of the Terms and your request.
• Payment records and invoices: for the period tax and accounting laws require.
• Technical logs: for the period the law requires of service providers (180 days under the Anti-Cyber and Information Technology Crimes Law No. 175 of 2018) or shorter where the law requires no more.
• Acceptance record: as long as needed to prove the agreement and defend our rights.

7. How we protect your data

We apply appropriate technical and organisational measures: isolation of each company's data at database level, encrypted connections, hashed passwords, role-based permissions and logs for sensitive operations. No system is perfectly secure, so we recommend a strong password that you do not share.

8. Your rights

Under the law you may: be informed of and access the data we hold about you and obtain it; have it corrected or amended; restrict or object to its processing; have it deleted where there is no legal obligation or legitimate purpose to keep it; and withdraw your consent at any time without affecting earlier processing. To exercise your rights write to the contact details below; we respond within the period the law sets.

9. Cookies

We use only the essential cookies needed to sign you in, keep your session and secure the site. We do not currently use advertising trackers or third-party analytics. If we add them in future we will update this policy and ask for your consent where required.

10. Children

The Platform is for businesses and is not aimed at anyone under 18; we do not knowingly collect children's data.

11. Personal data breaches

If a breach of personal data creates a risk for you, we notify the relevant authorities and people as the law and its executive regulations require.

12. Changes to this policy

We may update this policy. The new version is published here with its number and date, and we ask for your acceptance of the current version at each new payment.

13. Contact and complaints

For any question or to exercise your rights: Kayan

• Phone: 01287712761
• Email: patrick.atef08@gmail.com
• Address: Cairo/Egypt

You may also complain to the Personal Data Protection Centre in Egypt.