Privacy policy

Thiqa operates this website and is the controller of the personal data described here. Thiqa is not yet incorporated; until it is, the website is run by its founding team. You can reach us about anything in this policy at [email protected].

Four kinds of information, and nothing else:

• The waitlist. If you join the early-access waitlist, we receive the work email address you enter and which sign-up form on the site you used.
• Contact requests. If you use the “Get compliant” form, we receive what you enter: your name, work email, company and, if you give them, your job title, phone number and message, together with the page you sent it from.
• Usage analytics. We measure how the site is used: which pages are viewed, the referring page, and general browser, device and country information. This is collected without cookies and without storing anything on your device.
• Technical logs. Like any website, our hosting and network providers record requests to the site, including IP address, browser and the page requested, to deliver it and protect it from abuse.

We do not ask for, and do not want, any sensitive personal data through this website.

• Waitlist email: to tell you when early access opens and to contact you about joining it. We do not sell it, and we do not use it for unrelated marketing.
• Contact requests: to reply to you and follow up about Thiqa. We do not sell them, and we do not use them for unrelated marketing.
• Analytics: to understand which pages are useful and to improve the site.
• Technical logs: to run the site, keep it secure and fix faults.

For the waitlist and contact requests we rely on your consent, which you give by submitting the form and can withdraw at any time. For analytics and technical logs we rely on our legitimate interest in running a secure, working website, using measurement set up to collect as little as possible.

Where Egypt’s Personal Data Protection Law (Law 151 of 2020) applies, we process your data on the grounds it permits, including your consent for the waitlist and contact requests.

This website does not set its own cookies and does not use cookies for analytics or advertising. Our network provider, Cloudflare, may set a strictly necessary cookie to protect the site from automated abuse.

We share personal data only with service providers that process it on our instructions:

• Vercel, which hosts the website.
• Cloudflare, which delivers and protects the website and provides Cloudflare Web Analytics, a cookieless measurement service.
• PostHog, where we use it for product analytics. It is configured so that no cookies are set, nothing is stored on your device, your IP address is removed before an event is sent, and no session recordings are made.
• Google (Google Sheets), which receives and stores waitlist sign-ups and contact requests.
• Zapier, which passes contact requests from that sheet to our customer relationship tool.
• Relate, the customer relationship tool where we keep contact requests and our follow-up with you.

We may also disclose information where the law requires it.

Our providers operate internationally, so your data may be processed outside Egypt and outside the European Economic Area, including in the United States. Where a transfer needs a safeguard under the applicable law, such as standard contractual clauses, we rely on one.

• Waitlist email: until you ask us to remove it, and in any case no longer than 24 months after you joined unless you become a customer.
• Contact requests: until you ask us to remove them, and in any case no longer than 24 months after our last contact with you unless you become a customer.
• Analytics: no longer than 12 months.
• Technical logs: for the short periods our hosting and network providers keep them for security and operations.

Under Egypt’s PDPL you can ask to know what personal data we hold about you and to get a copy, to correct or update it, to have it erased, to restrict or object to its processing, and to withdraw your consent. You are also entitled to be told about a breach affecting your data.

If you are in the European Economic Area or the United Kingdom, the GDPR gives you similar rights: access, rectification, erasure, restriction, objection, data portability and withdrawal of consent.

To use any of these rights, email [email protected]. We will answer within the time the law allows. You can also complain to a data protection authority: in Egypt, the Personal Data Protection Center; in the EEA or UK, the authority where you live or work.

This website is for businesses and is not directed at children. We do not knowingly collect children’s personal data.

If what we collect or how we use it changes, we will update this page and the date at the top of it.