Privacy Policy

Altruvex operates both SaaS products and custom project engagements. Depending on how you use our services, we may collect:

We use the information we collect for these specific purposes only:

Your data is stored securely and we're explicit about how:

• Database: PostgreSQL with SSL encryption for all data in transit and at rest
• Hosting: Vercel for application layer, with DDoS protection and automatic backups
• Backups: Daily automated backups, retained for 30 days
• Access Control: Encrypted environment variables; only essential team members have database access
• SaaS Data: Account and product data is retained while your subscription is active, plus a reasonable period after cancellation for billing and legal compliance
• Project Data: Contact and project information kept for 2 years after last contact unless a longer retention period is required by contract

We do not sell, trade, or transfer your personal information to third parties. We also do not use your data to train AI models or for marketing beyond direct service communication.

You have explicit control over your data:

We use minimal tracking:

• Essential Cookies: Site and product functionality (language preference, authentication sessions, security tokens)
• No Third-Party Advertising Trackers: We don't use Google Analytics, Facebook Pixel, or similar ad platforms by default
• No User Profiling for Ads: We don't build behavioral profiles or sell data to advertisers

If we implement optional analytics in the future, we will use privacy-first tools (like Fathom or Plausible) and provide explicit opt-in consent where required.

For SaaS products:

• You retain ownership of the content and business data you upload or generate in the product
• Altruvex owns the platform, software, and underlying infrastructure
• When you cancel, you can export your data within the period stated in your plan or agreement
• We delete or anonymize account data after the applicable retention period, unless law requires otherwise

For custom projects:

• Code Ownership: You own 100% of the custom source code delivered under your project agreement
• Database Ownership: Your databases and data within them are yours; we provide export formats and migration documentation
• Compliance: We support GDPR/CCPA requirements during the build; ongoing compliance transfers to you after handoff
• No Lock-In: If you switch providers, we provide documentation so another team can take over

For SaaS subscriptions and custom project payments:

• We use Stripe or Egyptian bank transfers (we never store full card details directly)
• Payment information is processed securely through PCI-DSS compliant systems
• We send invoices and receipts to your email; we don't retain full payment card details
• Subscription billing may renew automatically according to your selected plan unless cancelled
• For local Egyptian payments, we work with authorized payment processors that comply with CBE regulations

We use these specific tools (not vague 'partners'):

Infrastructure: Vercel (US), PostgreSQL hosting (EU or Egypt-region if requested) Email: SendGrid for transactional emails only Payment Processing: Stripe (US), Fawry (Egypt), Vodafone Cash (Egypt) Code Hosting: GitHub (Microsoft) Monitoring: Sentry for error tracking (EU servers, no personal data) Communication: Slack (internal only; we don't share your data)

Each of these services has signed Data Processing Agreements where applicable. You can request our DPA template anytime.