Privacy Policy

Effective date: September 3, 2026 | Contact: privacy@eczact.com

ECZACT provides premium software sourcing solutions — custom software, cloud integration, and enterprise security — for organizations across the GCC and Middle East, headquartered in Giza, Egypt. This Privacy Policy explains how we handle personal data across eczact.com and related business systems.

1. Who we are (controller)

Elite Creators for Data and Technical Solutions Ltd. (ECZACT), 6th of October City, West Somid, Giza, Egypt.
Privacy requests: privacy@eczact.com.

2. What data we collect

Website & contact: name, business email, company, message content, and technical logs (IP, user-agent) for security when you visit eczact.com or email us.
Client engagements: business contact details and information you share when we scope or deliver a project.
Platform integrations (only if you connect them): when you authorize ECZACT to publish to a social platform you own (for example, Pinterest via OAuth), that platform gives us an access token and refresh token. We store only the tokens, your profile identifier and display name, and the scopes you approved (for example, Pinterest boards:read pins:read pins:write to list your boards and create Pins you authored). We do not read your messages, followers, or other accounts’ private data.
Content you provide: text, images, or videos you upload for publishing, and related scheduling metadata.

3. Why we process it (lawful basis)

Consent (Art. 6(1)(a) GDPR) — you submitting a contact form, or you connecting a social account and approving its scopes.
Contract / pre-contract (Art. 6(1)(b)) — responding to your inquiry and delivering services you asked for.
Legitimate interest (Art. 6(1)(f)) — securing our website and business systems.

You can withdraw consent at any time (for connected platforms: disconnect in Settings, or email us — tokens are deleted immediately).

4. Sharing

We share data only with (a) the platform you chose to publish to (for example, api.pinterest.com when you publish a Pin), and (b) our hosting provider that stores your uploads. No data brokers or ad networks. Sub-processors available on request.

5. Cookies

eczact.com uses only essential cookies for security and preferences. Internal business systems use an httpOnly, Secure (in production) session cookie to keep you logged in. No advertising cookies.

6. Storage & security

Transit: HTTPS everywhere (HSTS in production).
At rest: hosting volumes are encrypted at disk level where hosted; OAuth tokens are additionally encrypted at column level with key rotation support.
Access: scoped by account and tenant; media is stored under isolated prefixes with short-lived URLs.

7. Retention

Contact inquiries — until the matter is closed, then archived per legal hold or deleted on request.
Connected platform tokens — while you stay connected; deleted immediately on disconnect or account deletion.
Content & media — while your account exists; soft-deleted items kept 30 days for recovery, then deleted.
Logs — 1 year, then deleted.
Backups — 30 days, encrypted.

8. Your rights (GDPR Art. 15–20)

Access, rectification, erasure, restriction, portability, and objection. Email privacy@eczact.com — we respond within 30 days. Where we offer account tools, you can also export or erase directly in Settings.

9. International transfers

Primary hosting is EU/GCC region. When you choose to publish to a platform (for example, Pinterest Inc., US), that content is transferred to that platform at your explicit request (Art. 49(1)(a)).

10. Children

Our website and business systems are B2B and not directed to children under 16. We do not knowingly process children’s data.

11. Changes

Material changes will be posted here with a new effective date. Continued use after that date means acceptance.

12. Contact & complaints

Questions: privacy@eczact.com. You also have the right to lodge a complaint with your local supervisory authority.