سياسة الخصوصية

1. Scope

This policy explains how data is collected, used, and protected when using Khamat Hub, a business marketplace connecting buyers, suppliers, and industrial businesses.

2. Data we process

• Account data: name, email, phone number, account type, and profile image.
• Business data: trading name, address, governorate, licenses, contacts, and photos.
• Marketplace content: listings, RFQs, quotations, images, specifications, quantities, and prices.
• Communication and trust data: chats, attachments, ratings, reports, and status history.
• Operational data: notification tokens, crash reports, app version, and security data.
• Usage data: searches, favourites, viewed items, and saved preferences.

The app does not store passwords; Firebase Authentication manages them. The current release does not request payment data in the app.

3. Purposes

We process data to create accounts, operate and moderate the marketplace, match RFQs, provide chats and notifications, prevent abuse, resolve reports, improve reliability, and meet legal obligations.

4. Visibility and sharing

Approved business and listing information may be visible according to product settings. Private chats, private requests, and reports are limited to authorized parties and platform administration where needed. Firebase supports authentication, database, messaging, analytics, and crash monitoring. Cloudinary hosts, optimizes, and delivers images and attachments through its network. These providers may process data in other countries under applicable safeguards. We do not sell personal data.

5. Retention and deletion

Data is retained only as needed to provide and secure the service, prevent fraud, resolve disputes, and meet legal duties. When a deletion request is accepted, account data and associated content, including images and attachments in active storage services, are deleted or hidden to the extent permitted by applicable obligations. Limited security, audit, or backup records may remain only for the period required for security, disputes, or law, then are deleted or overwritten through the operating cycle.

Users can request deletion from in-app Settings or the account deletion page.

6. Security

Controls include encrypted transport, authentication, role and ownership rules, file restrictions, Firebase App Check, crash monitoring, and content moderation. No digital system is perfectly secure, so users must protect their devices and credentials.

7. Children and changes

The service is intended for businesses and adults legally able to contract and is not directed to children. Infrastructure providers may process data in other countries subject to applicable safeguards. The latest update date appears above.