This Privacy Policy explains what Khebretk ("we", "us", "our") collects about you, why we collect it, who else sees it, and what you can ask us to do about it. It covers the Khebretk marketplace, every expert storefront hosted on our domain, and the client and expert dashboards. Read it together with our Terms & Conditions and Refund Policy. If you do not accept it, please do not use Khebretk.
1. Who Is Responsible for Your Data
Khebretk is responsible for the personal data the platform collects in order to run your account, take payments, and deliver what you bought. An expert is separately responsible for the data they collect through their own storefront — including anything captured by analytics or advertising tags they have added themselves, and anything you send them directly on the contact number they publish. When you deal with an expert off the platform, that expert's own practices apply, not ours.
2. What We Collect
(a) What you give us: your name, email address, profile picture, and account identifier from Google when you sign in; your contact number; and, if you sell, your store details, bio, links, payout handle, and account-holder name. (b) What you create: products, listings, prices, uploaded files, messages, feedback, and support tickets. (c) Payment data: our payment provider collects the card or wallet details used to pay — we receive the result of the payment, the amount, and a transaction reference, and we never store full card numbers. (d) Usage data: IP address, approximate location derived from it, device and browser, referring page, pages viewed, features used, timestamps, and diagnostic logs.
3. Why We Use It
We use your data to create and run your account; to show your storefront and deliver products to the people who bought them; to take payments, calculate commission, and pay experts out; to detect and prevent fraud, abuse, and chargebacks; to send service messages about orders, payouts, security, and policy changes; to answer support requests; to measure and improve how the platform works; to enforce our Terms; and to meet our legal and accounting obligations. We do not sell your personal data, and we do not use the content of your account to advertise to you.
4. Google Account Data
(a) Signing in: when you choose "Sign in with Google", Google gives us your name, email address, profile picture and Google account identifier. We use them to create your Khebretk account, to sign you in, and to contact you about your orders. (b) Google Calendar: if you sell live sessions or consultations you may connect Google Calendar from your expert dashboard. The connection is optional and is never asked for at sign-up. It grants us one permission — to create a calendar of our own inside your account and manage the events on that calendar alone. When you connect, we make a calendar named "جلسات خبرتك" (Khebretk sessions) and use it only to place an event there for a session a client has booked from you, to create the Google Meet link that client joins, and to move that event if the session is rescheduled. We have no access to your other calendars at all — Google withholds it from us, rather than us choosing not to look. (c) Storage: the token that keeps the Calendar connection alive is encrypted before it is stored and is never returned to you, to an expert, or to any other user. (d) Sharing: we do not sell Google user data, do not share it with third parties for advertising, and do not use it to develop, improve or train any generalised artificial-intelligence or machine-learning model. Our staff read it only where you have asked us for support, or where the law requires it. (e) Disconnecting: you can disconnect Google Calendar at any time from your expert dashboard, which revokes our access at Google and deletes the stored token; you can also revoke it yourself from your Google Account permissions page. (f) Khebretk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Payment Data
Payments are processed by Paymob. When you pay, you are handed to their checkout and give your card or wallet details to them, not to us. We store what we need in order to prove that a payment happened and to reconcile it: the amount, the currency, the status, the transaction reference, and the last digits and card type where the provider returns them. Paymob processes your payment data under its own privacy policy and under the rules of the card networks.
6. What an Expert Learns About You
An expert sees what they need in order to fulfil and support an order: your name, the email address on your account, the contact number you gave, what you bought, when, for how much, and the order reference. For a consulting session they also see the slot you booked. They see aggregated figures about their store's traffic and sales. They do not receive your payment details, and they may not use what they learn to contact you about anything other than the order — no marketing lists, and no attempt to move you off the platform for a future sale.
7. Analytics on Expert Storefronts
Experts may connect their own Meta, TikTok, Snapchat, Google Analytics, or Google Tag Manager tags to their storefront. Where an expert has done so, your visit to that storefront — the pages you view, and the fact that you started or completed a purchase — is reported to that expert's account with that provider, under that provider's terms. These tags run only on storefront pages, never on Khebretk's own pages, and what an expert can inject is restricted to an identifier issued by the provider. You can limit this through your browser's tracking controls or an ad blocker.
8. Cookies
We use cookies and similar storage to keep you signed in, remember your language and theme, secure your session, and understand how the platform is used. Blocking essential cookies will break sign-in and checkout. We do not use cookies for cross-site advertising of our own; where a storefront carries an expert's tags, Section 6 applies.
9. Who Else Sees Your Data
We share personal data with the vendors that make the platform work — cloud hosting, storage and content delivery, database, email delivery, analytics, and payment processing — under agreements that limit them to what we authorise. We share order details with the expert you bought from, as described in Section 5. We may also disclose data when required by law, a court, or a regulator; to protect the rights, property, or safety of Khebretk, our users, or the public; to investigate fraud or a chargeback; and in connection with a merger or a sale of assets, in which case we will tell you before your data moves.
10. Security
We use commercially reasonable technical and organisational measures: encryption in transit, access control, signed and time-limited links to purchased files, and routine review. No system is perfectly secure and we cannot promise absolute safety. If a breach affecting your personal data occurs, we will notify you and the relevant authority where the law requires it.
11. Your Rights
Subject to applicable law, you may ask us to give you a copy of the data we hold about you, correct it, export it, delete your account and its data, restrict or object to particular processing, or withdraw consent where we relied on it. Email [email protected] from the address on your account. We answer verified requests within 30 days. Some data survives a deletion request where we are required to keep it — billing records above all — and deleting an expert account does not withdraw the access that clients have already paid for. Signing out of Google does not delete your Khebretk account.
12. How Long We Keep It
We keep your data while your account is active and for a reasonable period afterwards, in order to close out disputes, chargebacks, and audits. Order and payout records are kept for as long as tax and accounting law requires, which in Egypt is up to 10 years. Diagnostic logs are kept for a short operational period. What we no longer need is deleted or anonymised.
13. International Transfers
Our vendors operate in more than one country, so your data may be processed outside your country of residence, including where data-protection law differs from your own. Where required, we put appropriate safeguards in place — such as standard contractual clauses — before data is transferred.
14. Children
Khebretk is for people aged 16 and above, and selling requires you to be 18. We do not knowingly collect data from anyone under 16. If you believe a child has an account, tell us and we will remove it and the data with it.
15. Changes to This Policy
We may update this Policy as the platform, our vendors, or the law changes. We will update the "Last updated" date above and, for material changes, notify you in the app or by email before they take effect.
16. Contacting Us
Questions, requests, or complaints about this Policy go to [email protected], or by post to Khebretk, Ismailia, Egypt. If we cannot resolve your concern, you may complain to the data-protection authority in your country of residence.
Questions about this policy? Email us at [email protected]