This Privacy Policy explains how Future Solutions Dev — the company that owns and operates the Est8Core product — collects, uses, discloses, and safeguards personal data in connection with our real-estate brokerage CRM platform. It applies to all individuals who access or use our services through est8core.com, including account holders (brokerage companies and individual brokers) and end-users operating within their accounts on the platform. We process personal data in compliance with Egypt's Personal Data Protection Law No. 151 of 2020 (PDPL), its implementing regulations, and applicable international privacy standards.
Definitions
For the purposes of this Policy, the following terms have the meanings set out below:
- Personal Data: Any information relating to an identified or identifiable natural person, such as a name, phone number, email address, or real-estate transaction data.
- Processing: Any operation or set of operations performed on personal data, whether automated or manual, including collection, storage, modification, retrieval, disclosure, and deletion.
- The Subscribing Company: A brokerage company or individual broker subscribed to the Est8Core platform, operating within a dedicated private space on the platform.
- Account Holder: The person or entity that has created an account directly on the platform and holds a contractual relationship with Future Solutions Dev.
- End User: Any authorised individual accessing their account's private space on the platform, such as team members, sales agents, and branch managers.
- Supervisory Authority: The Egyptian Personal Data Protection Center, the competent regulatory body responsible for enforcing the Personal Data Protection Law No. 151 of 2020.
Data We Collect
1. Account Data
When a company or individual registers or creates an account on the platform, we collect:
| Data Type | Examples |
|---|---|
| Identity data | Full name, company name |
| Contact data | Email address, phone number |
| Subscription data | Selected plan, subscription start date, billing details |
| Account credentials | Encrypted password, user roles within the account |
2. Business Data (Including Clients' Personal Data)
Subscribing companies direct us to store business data generated in the course of their real-estate operations. This may include:
- Leads and contacts data: Names, phone numbers, email addresses, and notes relating to prospective clients.
- Deal data: Details of real-estate transactions, values, pipeline stages, and associated documentation.
- Property data: Property listing information, images, and related files.
- Team data: Staff profiles within the account's private space, including branch and team structures.
3. Usage and Technical Data
We automatically collect technical data to maintain platform security and performance, including:
- IP addresses, browser types, and device information.
- Activity logs and error logs.
- Session timestamps and navigation paths within the platform.
- Performance and diagnostic data.
4. Cookies and Tracking Technologies
See Section 12 below for full details.
How We Use Your Data
We use the data we collect for the following purposes:
- Service delivery: Operating, maintaining, and improving the Est8Core platform, including managing accounts and ensuring complete separation between each customer's data.
- Billing and subscription management: Processing payments, issuing invoices, and managing subscription lifecycles.
- Support: Responding to enquiries, resolving technical issues, and communicating with account holders and users.
- Security and compliance: Detecting and investigating fraudulent or unauthorised activity, and ensuring compliance with applicable legal obligations.
- Platform improvement: Analysing usage patterns to develop features and enhance user experience, using aggregated or de-identified data wherever possible.
- Legal obligations: Responding to lawful requests from competent authorities, and fulfilling obligations under PDPL No. 151 of 2020 and other applicable law.
- Communications: Sending essential service notifications, policy updates, and contract-related correspondence.
Legal Basis for Processing
Under Egypt's Personal Data Protection Law No. 151 of 2020, our processing of personal data rests on the following legal grounds:
- Consent: Where we require explicit consent — for example, for marketing communications — we request it clearly and separately. Consent may be withdrawn at any time.
- Contract performance: A significant portion of our processing is necessary to deliver the agreed service under the Terms of Service entered into with the account holder.
- Legitimate interests: We may process certain data on the basis of our legitimate interests or those of the subscribing company, such as ensuring platform security, detecting fraud, and improving our services, provided such processing does not override the rights and interests of the individuals concerned.
- Legal obligation: Some processing is required to comply with binding legal requirements, such as retaining financial records or responding to court orders.
Who Is Responsible for Your Data
Future Solutions Dev operates in two distinct capacities depending on the category of data involved.
Your Data as an Account Holder
We are fully responsible for protecting the personal data that relates to your account directly — such as your name, email address, billing details, and contractual correspondence. We determine how this data is used and why, and we bear full accountability for its protection.
Your Clients' Data That You Upload
The personal data you upload about your own clients, leads, and contacts — such as lead profiles, contact details, and deal information — belongs to you. You decide how it is used; we store it and protect it on your behalf and according to your instructions. This relationship is governed by the Data Processing Agreement incorporated into the Terms of Service or concluded separately. In this capacity, you are responsible for ensuring that an appropriate legal basis exists for collecting and processing such data before uploading it to the platform.
Data Sharing and Third-Party Service Providers
We do not sell or rent your personal data to third parties. We may share data with a limited set of third-party service providers solely to support the operation of the platform, subject to appropriate contractual safeguards:
| Category | Purpose |
|---|---|
| Hosting and operations providers | Data storage and computing services |
| Payment processors | Processing financial transactions and subscriptions |
| Email and SMS providers | Delivering service notifications and identity verification |
| Security and monitoring tools | Threat monitoring and anomaly detection |
| Legal and regulatory authorities | Compliance with lawful orders from competent authorities |
All third-party service providers are bound to an equivalent standard of data protection. We enter into agreements that restrict their use of data strictly to the contracted purpose.
International Data Transfers
Personal data may be transferred to servers or service providers located outside Egypt for operational reasons. In all cases, we ensure appropriate safeguards are in place, including:
- Binding contractual terms with service providers requiring equivalent data protection standards.
- Restricting transfers to providers subject to internationally recognised data protection frameworks.
- Minimising transfers to only what is strictly necessary to deliver the service and meet legal obligations.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, in accordance with the following guidelines:
- Account data: Retained for the duration of the active subscription and deleted or anonymised within 90 days of account termination, subject to applicable legal retention requirements.
- Business data of the subscribing company: Exported to the account holder and deleted from our systems upon subscription cancellation in accordance with the applicable Terms of Service.
- Billing and accounting records: Retained for the period required by Egyptian tax and accounting law.
- Security logs and activity records: Retained for a maximum of 12 months, unless a specific incident investigation requires longer retention.
The Confidentiality of Your Data & Your Private Space
This section is the most important in our policy, and we set it out plainly and completely:
A Dedicated, Isolated Space — Yours Alone
Every customer has their own private workspace on our servers. Your data is completely separate from any other customer's data and never mingles with it. What you place in your space is seen only by you and the people you authorise within your team.
We Do Not Access Your Data
The Est8Core team does not access the contents of your private space — we do not read it, browse it, or analyse it. Our staff are prohibited from accessing it except in exactly two circumstances:
- With your explicit permission to help you with a support request that you have raised.
- When subject to a binding legal obligation issued by a competent judicial or regulatory authority.
In both cases, access is limited to the narrowest scope and shortest duration necessary — no more than the immediate need requires.
Full Transparency — A Visible Access Log for You
Any access attempt by any of our staff to your private space is automatically recorded and displayed to you with full transparency. You will know who attempted access, when, and why. Nothing happens behind your back.
Your Data Is Encrypted
Your data is encrypted while it travels between your device and our servers, and while it is stored on our servers, using strong, industry-standard encryption.
Our Future Commitment
We are working, as part of our roadmap, to develop advanced protection where your data is encrypted in a way that prevents even us from viewing its contents — as a goal we are committed to achieving. We will be fully transparent at every step of progress toward this goal. (This is a future commitment, not a claim that such protection is already in place.)
Security Measures
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:
- Encryption in transit: All communications between your device and our servers are protected using strong, industry-standard encryption.
- Encryption at rest: Stored data and backup files are encrypted using industry-standard algorithms.
- A dedicated, isolated space for each account: Every account operates in its own fully isolated private workspace, preventing any customer from accessing another customer's data.
- Two-step verification: Available for all accounts and strongly recommended for accounts with administrative privileges.
- Internal access controls: Our staff operate on a least-privilege basis — no employee is granted more than the access their role requires. As described above, access to your account space occurs only with your permission or under legal compulsion, is always logged, and is always visible to you.
- Regular backups: Data is backed up on a periodic schedule with recovery procedures tested to verify their effectiveness.
- Security monitoring: Continuous monitoring for suspected unauthorised access or anomalous patterns.
While we are committed to the highest standards of protection, no system can guarantee absolute security. We will notify affected account holders and the Egyptian Personal Data Protection Center as required by law in the event of a security breach.
Your Rights under the PDPL
Egypt's Personal Data Protection Law No. 151 of 2020 grants you the following rights in relation to your personal data:
- Right of access: The right to obtain a copy of the personal data we hold about you.
- Right to rectification: The right to correct any inaccurate or incomplete personal data.
- Right to erasure: The right to request deletion of your personal data in circumstances permitted by law.
- Right to object: The right to object to the processing of your personal data in certain circumstances, particularly processing based on legitimate interests.
- Right to restriction: The right to request the suspension of processing in specific legally permitted circumstances.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
- Right to lodge a complaint: You have the right to file a complaint with the Egyptian Personal Data Protection Center, the competent supervisory authority.
To exercise any of these rights, please contact us at: [email protected]
Note for clients of subscribing companies: If you are a client of a brokerage company that uses Est8Core, your personal data is primarily under the control of that brokerage company and you should contact them directly to exercise your rights. We will cooperate with that company to assist it in fulfilling its legal obligations in this regard.
Cookies and Tracking
We use cookies and similar tracking technologies on est8core.com and within the platform for the following purposes:
- Strictly necessary cookies: Essential to the operation of the platform and the provision of secure sessions; these cannot be disabled.
- Analytical cookies: Used to monitor performance and understand feature usage patterns in order to improve the service. Where possible, analytical processing is carried out in aggregate form.
- Functional cookies: Used to save user preferences such as language settings and display themes.
You may configure your browser settings to refuse or delete cookies; however, doing so may affect certain platform functions. We do not use cookies for behavioural advertising or cross-site tracking.
Children's Privacy
Est8Core is directed exclusively at businesses and professionals in the real-estate brokerage sector. The platform is not intended for persons under the age of 18, nor designed to collect their data. If we become aware that we have inadvertently collected personal data from a person under 18 without parental or guardian consent, we will take prompt steps to delete that data.
Changes to This Policy
We may update this Policy periodically to reflect changes in our practices or applicable legal requirements. Where material changes are made, we will notify account holders by:
- A prominent notice on est8core.com.
- An email notification to the registered address of the account holder.
The updated Policy will display a "Last Updated" date at the top. Your continued use of the platform following publication of changes constitutes your acceptance of the revised Policy. If you do not agree with any change, you may close your account before the announced effective date of the change.
Contact Us
For any enquiries, requests, or complaints relating to this Policy or our data protection practices, please contact us at:
Email: [email protected]
Postal address: Future Solutions Dev — Est8Core product Fifth Settlement (Al-Tagammu Al-Khames), New Cairo, Egypt
If you believe we have not adequately addressed your concern, you have the right to submit a complaint to the Egyptian Personal Data Protection Center, the supervisory authority responsible for enforcing the Personal Data Protection Law No. 151 of 2020.