Privacy policy

Who we are

ClientOS is operated by [Company legal name], based at [Address]. This policy explains how we handle personal data when you use our website and the ClientOS service.

Our role

We are the controller of your account and billing data. Data your company enters in its workspace, such as leads and contacts, belongs to your company: it is the controller, and we process that data on its behalf and on its instructions.

Data we collect

• Account data: name, email address, and your password in a one-way hashed form.
• Workspace data: the leads, contacts, activities and tasks you and your team enter.
• Billing data: company name, invoice details and payment history. Card details are processed by Paymob; we never store them.
• Technical data: IP address, browser and device type, and the usage logs needed for security and operations.

How we use data

• To provide, run and secure the service.
• To send necessary messages such as email verification, notifications and invoices.
• To give support and answer your questions.
• To improve the service using aggregated statistics that do not identify you.
• To meet our legal and accounting obligations.

Sharing

We do not sell your data. We share it only with providers who help us run the service and are bound to protect it: [Hosting provider], [Email provider], Paymob for payments, and [Error monitoring service]. We may disclose it where the law requires.

Retention

• Deleted leads and contacts: 30 days, then permanently deleted.
• Deleted workspaces: 30 days, then permanently deleted.
• Form submissions: 180 days.
• Read notifications: 90 days.
• Audit log: one year.
• Backups: [Backup retention period].

Security

We use encryption in transit, database-level isolation of each company’s data, encrypted backups, least-privilege access and two-step verification.

Your rights

You may ask to access, correct or delete your data, object to its processing, or receive a copy of it, under applicable laws such as Egypt’s Personal Data Protection Law No. 151 of 2020 and Saudi Arabia’s PDPL. For data inside your company’s workspace, please contact your company first.

Cookies

We use only the cookies needed to sign you in and secure your session, and we remember your language in your browser. We use no advertising cookies.

Changes and contact

We may update this policy and will tell you about any material change. For any privacy question, write to [Privacy email address].