This Privacy Policy explains what Khebretk ("we", "us", "our") collects about you, why we collect it, who else sees it, and what you can ask us to do about it. It covers the Khebretk marketplace, every seller storefront hosted on our domain, and the buyer and seller dashboards. Read it together with our Terms & Conditions and Refund Policy. If you do not accept it, please do not use Khebretk.
1. Who Is Responsible for Your Data
Khebretk is responsible for the personal data the platform collects in order to run your account, take payments, and deliver what you bought. A seller is separately responsible for the data they collect through their own storefront — including anything captured by analytics or advertising tags they have added themselves, and anything you send them directly on the contact number they publish. When you deal with a seller off the platform, that seller's own practices apply, not ours.
2. What We Collect
(a) What you give us: your name, email address, profile picture, and account identifier from Google when you sign in; your contact number; and, if you sell, your store details, bio, links, payout handle, and account-holder name. (b) What you create: products, listings, prices, uploaded files, messages, feedback, and support tickets. (c) Payment data: our payment provider collects the card or wallet details used to pay — we receive the result of the payment, the amount, and a transaction reference, and we never store full card numbers. (d) Usage data: IP address, approximate location derived from it, device and browser, referring page, pages viewed, features used, timestamps, and diagnostic logs.
3. Why We Use It
We use your data to create and run your account; to show your storefront and deliver products to the people who bought them; to take payments, calculate commission, and pay sellers out; to detect and prevent fraud, abuse, and chargebacks; to send service messages about orders, payouts, security, and policy changes; to answer support requests; to measure and improve how the platform works; to enforce our Terms; and to meet our legal and accounting obligations. We do not sell your personal data, and we do not use the content of your account to advertise to you.
4. Google Account Data
(a) Signing in: when you choose "Sign in with Google", Google gives us your name, email address, profile picture and Google account identifier. We use them to create your Khebretk account, to sign you in, and to contact you about your orders. (b) Google Calendar: if you sell live sessions or consultations you may connect Google Calendar from your seller dashboard. The connection is optional, is never asked for at sign-up, and grants us one permission — to manage calendar events. We use it only to put an event on your calendar for a session a student has booked from you, to create the Google Meet link that student joins, and to move that event if the session is rescheduled. We do not read, list, change or delete any other event on your calendar. (c) Storage: the token that keeps the Calendar connection alive is encrypted before it is stored and is never returned to you, to a seller, or to any other user. (d) Sharing: we do not sell Google user data, do not share it with third parties for advertising, and do not use it to develop, improve or train any generalised artificial-intelligence or machine-learning model. Our staff read it only where you have asked us for support, or where the law requires it. (e) Disconnecting: you can disconnect Google Calendar at any time from your seller dashboard, which revokes our access at Google and deletes the stored token; you can also revoke it yourself from your Google Account permissions page. (f) Khebretk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5. Payment Data
Payments are processed by Paymob. When you pay, you are handed to their checkout and give your card or wallet details to them, not to us. We store what we need in order to prove that a payment happened and to reconcile it: the amount, the currency, the status, the transaction reference, and the last digits and card type where the provider returns them. Paymob processes your payment data under its own privacy policy and under the rules of the card networks.
6. What a Seller Learns About You
A seller sees what they need in order to fulfil and support an order: your name, the email address on your account, the contact number you gave, what you bought, when, for how much, and the order reference. For a consulting session they also see the slot you booked. They see aggregated figures about their store's traffic and sales. They do not receive your payment details, and they may not use what they learn to contact you about anything other than the order — no marketing lists, and no attempt to move you off the platform for a future sale.
7. Analytics on Seller Storefronts
Sellers may connect their own Meta, TikTok, Snapchat, Google Analytics, or Google Tag Manager tags to their storefront. Where a seller has done so, your visit to that storefront — the pages you view, and the fact that you started or completed a purchase — is reported to that seller's account with that provider, under that provider's terms. These tags run only on storefront pages, never on Khebretk's own pages, and what a seller can inject is restricted to an identifier issued by the provider. You can limit this through your browser's tracking controls or an ad blocker.
8. Cookies
We use cookies and similar storage to keep you signed in, remember your language and theme, secure your session, and understand how the platform is used. Blocking essential cookies will break sign-in and checkout. We do not use cookies for cross-site advertising of our own; where a storefront carries a seller's tags, Section 6 applies.
9. Who Else Sees Your Data
We share personal data with the vendors that make the platform work — cloud hosting, storage and content delivery, database, email delivery, analytics, and payment processing — under agreements that limit them to what we authorise. We share order details with the seller you bought from, as described in Section 5. We may also disclose data when required by law, a court, or a regulator; to protect the rights, property, or safety of Khebretk, our users, or the public; to investigate fraud or a chargeback; and in connection with a merger or a sale of assets, in which case we will tell you before your data moves.
10. Security
We use commercially reasonable technical and organisational measures: encryption in transit, access control, signed and time-limited links to purchased files, and routine review. No system is perfectly secure and we cannot promise absolute safety. If a breach affecting your personal data occurs, we will notify you and the relevant authority where the law requires it.
11. Your Rights
Subject to applicable law, you may ask us to give you a copy of the data we hold about you, correct it, export it, delete your account and its data, restrict or object to particular processing, or withdraw consent where we relied on it. Email [email protected] from the address on your account. We answer verified requests within 30 days. Some data survives a deletion request where we are required to keep it — billing records above all — and deleting a seller account does not withdraw the access that buyers have already paid for. Signing out of Google does not delete your Khebretk account.
12. How Long We Keep It
We keep your data while your account is active and for a reasonable period afterwards, in order to close out disputes, chargebacks, and audits. Order and payout records are kept for as long as tax and accounting law requires, which in Egypt is up to 10 years. Diagnostic logs are kept for a short operational period. What we no longer need is deleted or anonymised.
13. International Transfers
Our vendors operate in more than one country, so your data may be processed outside your country of residence, including where data-protection law differs from your own. Where required, we put appropriate safeguards in place — such as standard contractual clauses — before data is transferred.
14. Children
Khebretk is for people aged 16 and above, and selling requires you to be 18. We do not knowingly collect data from anyone under 16. If you believe a child has an account, tell us and we will remove it and the data with it.
15. Changes to This Policy
We may update this Policy as the platform, our vendors, or the law changes. We will update the "Last updated" date above and, for material changes, notify you in the app or by email before they take effect.
16. Contacting Us
Questions, requests, or complaints about this Policy go to [email protected], or by post to Khebretk, Ismailia, Egypt. If we cannot resolve your concern, you may complain to the data-protection authority in your country of residence.
Questions about this policy? Email us at [email protected]