Legal
Privacy Policy
Last updated: [Effective date]
How HiVouch handles personal data, for our customers and for the people they verify.
1. Who we are
HiVouch is a product of DevLab Technologies, [Registered address], Cairo, Egypt (commercial registration number [Commercial registration number]). Questions about privacy: [email protected].
This policy follows the Arab Republic of Egypt's Personal Data Protection Law No. 151 of 2020 and its executive regulations.
2. Our role: controller and processor
- Controller. For the data about our customers and their team ("account data"), HiVouch decides why and how it is used, so we are the controller.
- Processor. For the data about our customers' end users, the people who verify a phone number, our customer decides why and how it is used. The customer is the controller and HiVouch is its processor. The Data Processing Addendum sets out those terms.
If you are an end user and want to use your rights over data processed for a business, please contact that business first. We will help it respond.
3. Data we process
Account data (we are the controller)
- Name, email address, company name and the details of team members.
- For custom numbers, the company documents we need to verify your business (KYC).
- Billing records and invoices. Card details are handled by our payment processor, ezPayments, and are not stored by us.
End-user data (we are the processor)
- Phone numbers, encrypted at rest.
- Message metadata for the WhatsApp message used to verify.
- IP address, approximate country and city, and device and browser type.
- Risk signals that help detect abuse and fraud.
4. Why we use data
- To run the Service: matching an incoming WhatsApp message to a verification and returning the result to the customer.
- To create and manage accounts, bill customers, send invoices and give support.
- To keep the Service secure and prevent abuse and fraud.
- To meet our legal obligations, including accounting and tax rules, and to establish or defend legal claims.
- To send service emails, such as security notices and price changes. We do not send marketing about third-party products.
5. How long we keep data
- Inbound WhatsApp message records are deleted after 7 days.
- API request logs are deleted after 30 days. Request and response bodies are stored only for errors, are capped in size, and have sensitive fields redacted.
- Account data is kept while your account is open. After it closes we keep what the law requires us to keep, such as billing records, and delete the rest.
The records of a verification kept by a customer in its own systems are governed by that customer's policy.
7. International transfers
Some of the providers above process data outside Egypt. Where we transfer personal data abroad we do it as the law allows, with contractual and technical safeguards. Contact [email protected] for details.
8. Security
Phone numbers are encrypted at rest, traffic uses encryption in transit, and access to personal data is limited to those who need it. No system is perfectly secure. If a breach affects your data we will tell you and the authorities as the law requires.
10. Your rights
Under Law No. 151 of 2020 you can, in the cases the law sets out:
- know what personal data is held about you and access it;
- correct or update it;
- restrict or object to its use, and withdraw consent where we rely on it;
- ask for it to be erased;
- be told about a breach that affects it.
Write to [email protected]. We may need to confirm who you are first. You can also complain to Egypt's Personal Data Protection Centre.
11. Children
HiVouch is for businesses and is not directed at children. Customers must not use it to verify children's numbers without the consent the law requires.
12. Changes and contact
We will update this page when our practices change and will tell customers about material changes by email. Contact: [email protected], or DevLab Technologies, [Registered address], Cairo, Egypt.