This policy explains what data Exqela collects, why, where it is kept, and your rights over it. Exqela is offered by Exqela in the Arab Republic of Egypt. You can reach us at info@exqela.com.
Our role and your organization's
We control your account data (your name and email).
What your organization enters (its strategy, analysis, documents, records and the rest) belongs to the organization. It decides what goes in and who sees it; we process it on its behalf, only to provide the service.
What we collect
- Account data: name, email, password (stored hashed; we cannot read it) and preferred language.
- Organization data: what its members enter and the files they upload.
- Workshop participants without an account: the name they type and the ideas they send.
- Technical data: sign-in times, the change log inside the organization, errors the platform meets, and IP addresses in server logs.
Why we use it
- To provide, run and protect the service.
- To send only the messages that are needed: invitations, password recovery and work notifications that concern you.
- For support: our team enters an organization's data only after its admin approves, for a set time, and it is logged.
- We do not sell your data, show ads, or use your organization's data for anything else.
Artificial intelligence
When you ask for an AI suggestion, the text the request needs is sent to Anthropic to process and return the suggestion. Under its commercial terms, Anthropic does not use this data to train its models.
A suggestion is saved to your data only if you accept it.
Who processes data with us
- Supabase: database, sign-in and files, in Ireland (European Union).
- Vercel: hosting and running the platform, in Ireland (European Union).
- Google (Gmail): sending email.
- Anthropic: AI suggestions when asked for, in the United States.
This means data is stored and processed outside Egypt.
How long we keep it
We keep an organization's data for as long as it uses the platform. After an organization is closed we delete its data within 60 days, except what the law requires us to keep.
Records the standards require (such as who approved a document and when) are kept under the retention your organization sets.
Your rights
- See and correct your data: from "My account".
- Delete your account: from "My account". Your name and email are erased; required records stay without your name.
- A copy of your organization's data: its admin can download it from the organization settings.
- Objections or any other request: write to info@exqela.com; we answer within 30 days.
- You may also complain to the Personal Data Protection Center.
Security
Connections are encrypted, each organization is isolated from the others in the database, access follows permissions, and every change is logged. No system is perfectly secure; if a breach affects your data we will tell you.
Cookies
We use only the cookies that are needed: to keep you signed in and to remember your language and theme. No tracking or advertising cookies.
Changes to this policy
If we change anything material we will tell you in the platform or by email before it applies, and update the date at the top.