Privacy Policy
Last updated: 8 September 2026
Akarestate (“we”, “us”) operates a map-based real estate marketplace for Egypt. This policy explains what personal data we collect, why, and your rights under Egypt’s Personal Data Protection Law (Law No. 151 of 2020, “PDPL”).
Data we collect
- Account details: your name and email address, whether you sign up with email, Google, or Facebook.
- WhatsApp number: collected and verified during onboarding via a one-time code so agents can reach you about listings.
- Identity documents (listers only): National ID or passport and a selfie, checked by our identity-verification provider before you can publish. Your National ID number is stored only as a one-way SHA-256 hash — never in plain text.
- Payment data(paid plans only): the pack you bought, the amount and date, your account’s renewal code, the receipt or transfer screenshot you upload, the status of our review, and a history of your payments and boost credits. Receipts may show your name and the last digits of your account. If you pay by card or wallet, the payment is processed by our payment service provider on its own secure page — we never receive or store your full card number; we receive only a confirmation, the amount and a masked reference.
- Listings & activity: properties you post, favorites, inquiries you send, and general usage of the map and search.
- Technical data: device, browser, and approximate location used to render the map and keep your session secure.
- Listing views: when you open a listing page we record that the listing was viewed that day, so the person who posted it can see how many people looked at it. If you are not signed in, a first-party cookie named
ak_vid(a random identifier, kept for one year) lets us count you once per listing per day rather than on every visit. It is not used for advertising and is not shared with anyone. Lister analytics show counts only — never who viewed a listing.
How we use your data
- To create and secure your account and verify your identity.
- To connect buyers and renters with agents and developers.
- To process payments, activate and manage paid plans, issue refunds where this policy and our refund policy allow, and keep the accounting records the law requires.
- To send transactional messages (verification, inquiries, service notices).
- To operate, improve, and protect the platform against fraud and abuse.
Service providers
We share the minimum data necessary with processors that help us run the service:
- Supabase — authentication, database, and file storage.
- Didit — phone-number verification (one-time codes) and identity verification (ID document and selfie checks).
- Paymob — card and mobile-wallet payment processing, when you choose to pay that way. Paymob receives the data needed to take the payment (amount, a reference for your order, and the details you enter on its page) under its own privacy policy.
- Google and Meta (Facebook) — optional social sign-in.
- Meta Pixel — measures how well our ads on Facebook and Instagram work. It tells Meta which pages you visit on Akarestate, along with your IP address, browser information, and any Meta cookies already in your browser, so Meta can attribute visits to our ads and show us aggregate results. Meta processes this under its own privacy policy. You can limit it in your Meta ad settings or with a browser tracking blocker.
- TikTok Pixel — measures how well our ads on TikTok work, in the same way: it tells TikTok which pages you visit on Akarestate, along with your IP address, browser information, and any TikTok cookies already in your browser, so TikTok can attribute visits to our ads and show us aggregate results. TikTok processes this under its own privacy policy. You can limit it in your TikTok ad settings or with a browser tracking blocker.
- Google Tag Manager— loads Google's advertising and analytics tags (Google Ads, including YouTube, and Google Analytics). These tell Google which pages you visit on Akarestate, along with your IP address, browser information, and any Google cookies already in your browser, so Google can attribute visits to our ads and show us aggregate usage statistics. Google processes this under its own privacy policy. You can limit it in your Google ad settings or with a browser tracking blocker.
- Mapbox — map rendering; Google Places — address search.
- Resend — transactional email delivery.
Your rights
Under the PDPL you may access, correct, or delete your personal data, withdraw consent, and object to certain processing. You can edit your profile in the app or request deletion (see our data deletion instructions). We retain data only as long as needed to provide the service or as required by law. Payment and invoicing records are kept for the period required by Egyptian tax and commercial record-keeping law even after an account is deleted; uploaded receipts are deleted once that period ends. Individual listing-view records are deleted after 90 days; only the daily count per listing is kept after that.
Security
We use industry-standard measures including encrypted transport, row-level access controls, private storage for identity documents, and hashing of sensitive identifiers. No system is perfectly secure, but we work to protect your data.
Contact
For any privacy question or to exercise your rights, contact Akarestate at support@akarestate.com. We aim to respond within 30 days.