Privacy policy
Romeya Marketing (روميا للتسويق), Cairo, Egypt, provides this dashboard — the website and the mobile app — to its team and to the clients it works with. This policy explains what personal data the dashboard handles, why, and the choices you have.
What we collect
- Account details: name, email address, phone number, job title, department and profile photo.
- Work content: projects, tasks, comments, messages, files, approvals, requests, quotations, invoices and payment records, expenses and receipt photos, and time logs.
- Staff HR information: leave requests, employment details and HR documents. Only HR, administrators and the employee concerned can see these.
- Security data: sign-in times, two-step login settings and a log of important changes, used to keep accounts safe.
We do not use advertising trackers, and we never sell personal data.
Why we use it
- To run the service: manage projects, share work, collect approvals and communicate.
- Billing and accounting: quotations, invoices, payments and expenses.
- HR administration for Romeya staff.
- Security: protecting accounts and preventing misuse.
- Meeting legal, tax and accounting obligations.
Who can see it
Access depends on your role. Clients only see their own company's projects, approvals, invoices and messages — never internal notes, costs or other clients. Staff see what their role allows.
Trusted cloud providers host the dashboard for us under their data-protection terms: one for the database, sign-in and file storage, and one for the website. Their servers may be outside Egypt; data is encrypted while it travels between you and them.
How long we keep it
We keep data while your account is active and for as long as it's needed for the project or for legal and accounting duties (for example, invoices are kept for the period tax law requires). After that it is deleted or anonymised.
How we protect it
- Encrypted connections (HTTPS) everywhere.
- Permission rules enforced inside the database, so each person only reaches the data their role allows.
- Optional two-step login with an authenticator app.
- Sign-in sessions on phones are stored encrypted in the device's secure storage.
- A log of important changes for accountability.
Your rights
In line with Egypt's Personal Data Protection Law (Law No. 151 of 2020), you can ask to see, correct or delete your personal data, or object to how it's used. Ask your Romeya account manager or the dashboard administrator. We answer requests, including account deletion, within 30 days, keeping only what the law requires us to keep.
Changes
If this policy changes, we'll update this page and the date at the top.