Legal

Privacy Policy

What this website collects, why, who receives it, how long it is kept, and how to use your rights over it.

Last updated: October 5, 2026

In short

We collect what you type into a form, plus a few technical details recorded with it.
Section 2
No advertising trackers and no analytics cookies.
Section 4
We do not sell your data, and we do not use it to train AI models.
Section 3
Every service that receives your data is listed.
Section 5
You can ask to see, correct or delete your data.
Section 8
On a client project, the code and the data are yours.
Section 11

A summary to take you to the right clause - the numbered sections below are the policy.

Who is responsible

Altruvex is a web engineering studio based in Cairo, Egypt. Altruvex decides how the personal data described here is used, which makes it the controller of that data under Egypt's Personal Data Protection Law (Law No. 151 of 2020) and, where they apply to you, the EU General Data Protection Regulation (GDPR) and the data protection laws of Saudi Arabia and the United Arab Emirates.

This policy covers altruvex.com in English and Arabic, and the enquiries and projects that start from it.

Contact: hello@altruvex.com

What we collect

We collect only what you choose to send, and a few technical details recorded with some forms:

Contact form: Your name, phone number, email address and message, and, if you choose them, the service you are interested in, a budget range, a timeline and a preferred meeting time.
Consultation booking: Your name, phone number, an optional message, and the date and time you pick.
Project estimator: Your phone number and name, an optional email address, company and notes, together with your answers and the range the estimator showed you.
Call-back request: A phone number only, and which prompt you used, when you ask us to call you back.
Recorded with a form: With the contact form: your IP address, your browser and device type, the page that sent you here, campaign tags in the link (UTM) and the language of the page. With a consultation booking: the same, without campaign tags. With the estimator: the page that sent you here, campaign tags and the language, but not your IP address or browser. With a call-back request: nothing beyond the number.
Email and WhatsApp: Whatever you write to us directly, and the address or number you write from.

Each form marks the fields it needs. Without them we cannot answer the request; leaving an optional field empty changes nothing else.

Why we use it

We use personal data for these purposes, each with its own legal basis:

Answering your enquiry: replying, and preparing an estimate, a proposal or a call. Basis: steps you asked for before a contract, or your consent.
Delivering and invoicing a project once there is a contract. Basis: the contract.
Protecting the forms from spam and abuse, using your IP address to limit repeated submissions. Basis: our legitimate interest in keeping the site working.
Understanding which pages are read and how fast they load, in aggregate. Basis: our legitimate interest in improving the site.
Keeping accounting and tax records. Basis: legal obligation.

Where the law asks for your consent, sending a form is that consent. You can withdraw it at any time by writing to us; withdrawal does not undo processing already done.

We do not sell or rent your data, we do not use it for advertising, and we do not use it to train AI models. The estimator calculates a range from your answers; it is an estimate, not a decision about you.

Analytics, cookies and storage on your device

Analytics: The site uses Vercel Web Analytics and Speed Insights. They set no cookies. They record the page, the referring site, the country, region and city, and the browser, operating system and device type, to show which pages are read and how fast they load. Visitors are counted with a hash of the request that resets every 24 hours, so a visit cannot be linked to you or to your next visit.

On your device: The site keeps a few small values in your browser so it stays as you left it:

The language you chose (a cookie)
Light or dark theme (local storage)
Whether you have already seen the opening animation (local and session storage)
Whether the call-back prompt was already shown during this visit (session storage)
Copies of pages and images you opened, so they can load offline (browser cache; page copies expire after one day)

None of these is used for advertising or to follow you to other sites. You can clear them in your browser settings at any time.

No advertising trackers: no Google Analytics, no Meta Pixel, no ad networks.

Who receives it

These are the services that handle personal data for us. Each receives only what its task needs:

Vercel: Hosts the website and runs the analytics described in section 4. Your form submissions pass through it.
Neon: Runs the PostgreSQL database where form submissions and client records are stored.
Email provider: Sends and receives project email.
WhatsApp (Meta): Carries messages when you write to us on WhatsApp, or when we reply there.
GitHub: Holds the source code and project records of client builds.
Slack: Receives short internal notices about project events, such as a new enquiry.

We disclose data to a public authority only when the law requires it.

Transfers outside your country

Altruvex is in Egypt, and the services in section 5 run servers in other countries, including the United States. Sending a form therefore moves your data across borders.

We use these services under the data protection terms each of them publishes. If you need to know where a specific record is stored, or under which terms, write to us and we will tell you.

How long we keep it

Each kind of data has its own period:

Enquiries, estimates and call-back requests: 2 years after our last contact, unless a contract needs them for longer.
Client and project records, invoices and payments: as long as Egyptian tax and accounting law requires.
Spam-protection records (an IP address and a request count for each form): used for nothing but the limit itself.
Analytics: the visitor hash is discarded after 24 hours; what remains is aggregate statistics.
Data in your browser: until you clear it. Session values end when you close the tab; offline page copies expire after one day.

When a period ends, we delete the data or remove what identifies you.

Your rights

Depending on the law that applies to you, you can:

Be told how your data is used - this page is that notice
Get a copy of the personal data we hold about you
Have it corrected or updated
Have it deleted, unless the law requires us to keep it (invoices, for example)
Withdraw your consent, or object to processing based on our legitimate interest
Ask us to restrict processing, or to give you your data in a portable format

Write to hello@altruvex.com from the address or number you used with us, or tell us how we can confirm it is you. We answer within the time the applicable law sets.

Complaints

If you think we handled your data wrongly, write to us first so we can put it right. You can also complain to the authority where you live:

Egypt: the Personal Data Protection Center
Saudi Arabia: the Saudi Data & AI Authority (SDAIA)
United Arab Emirates: the UAE Data Office
European Union: the data protection authority of your country

Security

Every page and form is served over HTTPS. Submissions are stored in a database that only Altruvex's administrators can reach, through signed-in accounts limited by role. The forms check where a request comes from and limit repeated submissions.

No system is perfectly secure. If a breach puts your personal data at risk, we will inform the regulator and you within the time the applicable law sets.

Client projects

When we build or maintain a site for you, the project follows your contract:

The source code, designs and accounts pass to you at the final payment
The personal data your own site collects is yours: you are its controller, and we handle it only to build, run or maintain the site on your instructions

Your site needs its own privacy policy for the data it collects, issued by you.

Payments

This website takes no payments and asks for no card details. Each invoice states how to pay. We keep invoices and payment records as accounting law requires.

Changes to this policy

When the site starts collecting something new, or uses data in a new way, we update this page and its date first. The date at the top shows the current version.

Questions and requests: hello@altruvex.com

Questions about this document?

Write to us and a person answers, not an auto-reply.

hello@altruvex.com Contact