Privacy Policy & Data Protection

1. Introduction & Regulatory Scope

Safqa Platform ("we", "us", or "our") places personal data protection and user confidentiality at the core of its operational framework. This Privacy Policy establishes the binding regulatory standards governing the categories of data collected, legal bases for processing, legitimate operational purposes, and technical safeguards implemented pursuant to international best practices.

By accessing or registering on the Platform, you unconditionally acknowledge and agree to the data collection and processing practices described herein.

2. Categories of Data Processed

Data processing is strictly limited to information necessary for platform operations, identity verification, and fraud prevention:

• Account & Identification Data: Full name, verified email address, verified phone number, account age, and registration metadata.
• Commercial Listing Data: Ad titles, descriptions, uploaded product images, currency parameters, pricing, and approximate geographic location (governorate and district) to balance local supply and demand.
• Communication & Transaction Records: In-app messages exchanged between buyers and sellers, deal confirmation timestamps, and offer negotiation history, securely preserved solely for dispute resolution and investigating abuse reports.
• Identity Verification & Anti-Fraud (KYC): National identity document captures and liveness video recordings voluntarily submitted by merchants seeking official verification badges to eliminate fraudulent impersonation.
• Technical & Session Telemetry: Non-identifying device parameters, access logs, IP addresses, and essential functional cookies required to preserve secure sessions and defend against cyber attacks.

3. Purposes & Legal Bases for Processing

Personal data is processed pursuant to valid legal grounds for the following legitimate purposes:

• Contractual Execution: Establishing user accounts, publishing and updating listings, and enabling direct peer-to-peer communication.
• Legitimate Security Interests: Monitoring abusive activities, detecting fraud, auditing image quality, and preventing the distribution of prohibited or unlawful goods.
• Statutory Compliance: Satisfying mandatory legal requirements issued by judicial bodies or regulatory authorities.
• Infrastructure Optimization: Assessing technical performance to maintain high availability and server stability.

4. Information Security & Technical Safeguards

Safqa enforces comprehensive technical and administrative security controls, including:

• Encrypted data transmission using Transport Layer Security (TLS 1.2 / TLS 1.3) across all network endpoints.
• Segregated, access-controlled cloud vault environments for sensitive verification documents and evidence logs with strict role-based access.
• Separation of operational databases from forensic and archive records to preserve integrity and prevent unauthorized disclosures.

5. Data Sharing & Third-Party Disclosure

We maintain an absolute commitment not to sell, rent, or trade personal data to commercial data brokers. Disclosures are limited to:

• Trusted Cloud Infrastructure Providers: Enterprise hosting, real-time messaging, and notification delivery partners bound by strict confidentiality and data protection agreements.
• Judicial & Law Enforcement Authorities: Disclosures strictly compelled by enforceable legal court orders or official investigations into cybercrimes and fraud.

6. Data Retention & Account Deletion Policy

Users maintain full autonomy over their personal data pursuant to the following protocols:

• Self-Service Account Termination: You may submit an account and data erasure request at any time via in-app security settings or through the dedicated portal: https://safqa.app/delete-account.
• Immediate Deactivation: Upon confirmation, your account is immediately logged out across all devices, and all listings and public profile information are removed from search visibility.
• 30-Day Security Retention Period: To protect legitimate counterparty interests and prevent fraudulent evasion of active disputes or law enforcement inquiries, records are archived in a secure, restricted environment for thirty (30) days.
• Permanent Irreversible Wipe: Following the 30-day period without reactivation, all personal data is permanently and irreversibly wiped or fully anonymized into generalized statistical metrics.

7. User Rights & Legal Inquiries

Pursuant to applicable data protection frameworks, you maintain the right to access, rectify, or request deletion of your information, or submit legal inquiries to our Data Compliance Officer via: [email protected]