العربية

EgyGomla

Privacy policy

This page explains the data the platform actually handles, what it is used for, who can see it, and how to ask for your account to be deleted.

Last updated: 27 September 2026

The data we handle

  • Account and sign-in data: your name, email address, sign-in details and interface language. Sign-in runs through an identity system we operate on our own servers (Keycloak), and passwords are never stored as readable text.
  • When you choose “Continue with Google”: we receive your basic account details from Google through Firebase Authentication, such as your name and email address, to link them to your account with us. This option is optional.
  • Organisation data: the organisation's name, type, members and their roles; a supplier's public profile if it chooses to publish one (description, categories, governorate and products); and verification documents if they are uploaded.
  • Trade data: requests for quotes, quotes, commercial orders and their documents, transfer receipts you upload, messages tied to requests, and reports.
  • Mobile notifications: if you turn on notifications in the EgyGomla app, we store the device identifier for Firebase Cloud Messaging in encrypted form. Notification text is generic, with no amounts, order details or message text.
  • Technical logs needed to run the service and protect it from abuse and intrusion.

What we use it for

  • Running your account, signing you in and protecting your session.
  • Showing published supplier profiles and products, and delivering requests, quotes and messages only to the party concerned.
  • Reviewing verification documents before a verification badge appears.
  • Support, preventing abuse and fraud, and legal obligations.

We do not sell your data or use it for advertising, and our sites carry no third-party analytics or advertising trackers.

What is public and what is private

  • Public: published supplier profiles, published products and verification status. A supplier's public profile shows no direct contact details such as phone, email or WhatsApp.
  • Private: verification documents and their numbers, requests, quotes, orders, messages, contact details and payment receipts. They are visible to the parties to the request and to the operations team according to its permissions. Verification documents are kept in private storage and seen only by the reviewing team.

Cookies and browser storage

  • egygomla.com itself sets no cookies. It keeps a temporary note in the browser session (sessionStorage) so a page's entrance motion does not replay when you return to it.
  • The buyer and supplier sites use a session cookie that holds only a random identifier, not your account data, and cannot be read by scripts. A session ends after 30 minutes without activity or 8 hours at most.
  • There is also a short-lived cookie for the sign-in step (10 minutes), a cookie that remembers the organisation you selected, and on the buyer site a cookie that remembers your interface language for one year.
  • There are no advertising or analytics cookies.

Who helps us run the service

  • Hosting: our servers are rented from the hosting provider netcup.
  • Backups: we keep encrypted database backups with the storage provider Backblaze so the service can be restored after a failure.
  • Public images: published product and certificate images are delivered to visitors through the Cloudflare network.
  • Email: an email delivery provider sends account messages such as email confirmation and password resets.
  • Google and Firebase: for signing in with Google if you choose it, and for mobile notifications if you turn them on.
  • The other party to a request: the supplier or trader concerned sees only the data needed to deal with you.
  • Public authorities, when the law requires it.

How long we keep data

We keep your data while your account is active, and afterwards only as far as the law and contractual obligations require or as needed to prevent fraud and settle disputes. Requests for quotes and transactions that concern another party may remain, but are separated from your name and email once your account is deleted.

Deleting your account

You can ask for your account to be deleted from the account-deletion page on the web, without installing the app, or from the settings inside the EgyGomla app. That page explains what is erased, what remains and for how long.

Privacy questions

For any question or request about your data, call our support number or message us on WhatsApp.