1. Data Controller

Zeidan Law & Legal Consulting ("Platform"), registered in Giza, Arab Republic of Egypt. Data Protection Officer: [email protected]

2. Data We Collect

Registration data: Full name, national ID (14 digits), phone, email, ID card photo (both sides), biometric video with GPS.

Professional data: Syndicate number, professional card photo, specializations, years of experience, office details, bank account.

Usage data: GPS location, request history, financial transactions, conversations (E2E encrypted), call logs, ratings.

Device data: Device type, OS, device ID (for notifications).

3. Legal Basis for Processing (Article 5 — PDPL)

Contractual necessity: Processing data required to fulfill the service contract.

Explicit consent: Your consent at registration to the Terms including the data use clause.

Legitimate interest: Improving services, preventing fraud, ensuring security.

4. Use of Data for AI (Clause 7)

By accepting the Terms, the Platform automatically anonymizes your data and uses it to train AI models and produce market reports.

Anonymized data is not personal data under Article 2 of Egypt's PDPL.

This use is an essential part of the service contract and cannot be objected to while you are an active user.

5. Encryption & Security

Conversations are E2E encrypted using Signal Protocol (X3DH + Double Ratchet).

Financial data is protected by a hash-chained audit trail.

Local mobile data is encrypted with SQLCipher (AES-256).

6. Your Rights (Articles 3 & 4 — PDPL)

You have the right to: access, correct, delete, transfer your data, and object to processing (except Clause 7).

To exercise rights: email [email protected] — we respond within 15 business days.

7. Data Sharing

We do not sell your data. We share only with: Stripe (payments), Firebase (notifications), cloud providers, and judicial authorities upon legal request.

8. Data Retention

We retain data for your active account lifetime + 5 years after closure (legal obligation). Anonymized data is stored permanently.

9. Complaints

You may file a complaint with the Personal Data Protection Centre (PDPC) under Law No. 151 of 2020.