Privacy policy
Last updated: 27 September 2026
This policy explains how Servawy collects, uses and protects personal data in Khadmato, in line with Egypt's Personal Data Protection Law No. 151 of 2020.
1. Our role
- For your account, your users' accounts, subscription and payment data we are the controller.
- For the company's customer data it enters into the system, the company is the controller and we process it on its behalf and instructions only.
2. What we collect
- Sign-up data: your name, company name, mobile, email, governorate and team size.
- Usage data: sign-ins, IP address, device type and the security log, to protect accounts.
- Billing data: plan, invoices and payments, while card details go straight to the payment provider and are never stored by us.
- Company data: what the company enters (customers, addresses, units, work orders, invoices, photos and files).
3. Why we use it
- To run the service, confirm your number and protect accounts from unauthorised access.
- For billing and to contact you about your account, subscription and support.
- To improve the service from aggregated usage figures that identify no one.
- We never sell your data and never use the company's customer data for marketing.
4. Who sees it
- Providers that help us run the service, each within its role: hosting and databases, Cloudflare (storage and protection), Meta (WhatsApp), Paymob (payments), the Tax Authority (e-invoicing, if enabled) and the AI provider (for features that use it, with no model training on your data).
- The Khadmato team enters a company's account only with its admin's approval and for a limited time; every access is logged.
- Authorities, where the law requires it.
5. Security
- All traffic is encrypted (HTTPS), each company's integration keys are stored encrypted, and each company has its own database.
- Private files open only through short-lived signed links, and important accounts use two-factor sign-in.
6. Retention
- Company data is kept while the account is active; backups for 14 days.
- After cancelling you can download a full copy; on a deletion request we erase your database and files, keeping the last copy for 30 days only.
- Invoice and payment records are kept as long as tax law requires.
7. Your rights
- To know what data we hold about you and get a copy, correct it, ask for deletion or restriction, and object to marketing.
- Customers of companies should address their requests to the company, which we help to fulfil them.
- You may complain to the Personal Data Protection Center if you believe your rights were not respected.
8. Cookies
- We use only essential cookies for sign-in and security, and if ad measurement tools are enabled on khadmato.com, this page will say so.
9. Contact
- For any request about your data: [email protected].