Legal

Privacy Policy

Last updated: October 15, 2026

Repanza, a platform owned and operated by Axivra LLC (registered in the commercial registry of Alexandria, Arab Republic of Egypt), is committed to protecting the privacy of everyone who uses its platform — whether through the mobile app (iOS / Android) or the web portals for developers and brokers. This policy explains what data we collect, the legal basis for processing it, how long we keep it, how it can be deleted, and your rights over it. By using the platform, you acknowledge that you have read and agreed to this policy.

1. Definitions

"Platform": refers to the Repanza website, web portals (Developer Portal, Broker Portal), and the mobile app on iOS and Android.
"User": any individual using the platform on behalf of a subscribing real estate development or brokerage/marketing company.
"Subscribing Company": the legal entity (development or brokerage company) that owns the primary account on the platform.
"Personal Data": any information relating to an identified or identifiable individual.

2. Data We Collect

Account data: name, email, phone number, company name, job role, employee code.
Operational data: check-in/check-out attendance records, leave requests, payroll and bank account data (for employees registered by the subscribing company), clients and deals, real estate units and projects.
Device and notification data: device identifier, push notification token, device type and operating system version.
Location data: collected only when operationally necessary (e.g., field attendance check-in or client visits) and only after explicit permission via the device’s operating system; Repanza does not track location in the background without this permission.
Internal communication data: messages, comments, and attachments within holds/reservations and partnership requests.
Automatic technical data: IP address, error logs, cookies on the web portals (full details in Section 9).

3. Legal Basis for Processing

Repanza processes personal data based on one or more of the following grounds:

Contract performance: where processing is necessary to deliver the contracted service.
Consent: for cases requiring explicit permission (e.g., accessing location or sending push notifications).
Legitimate interest: such as improving performance, preventing fraud, and aggregated usage analytics.
Legal obligation: when certain data must be retained (e.g., financial records) under applicable Egyptian law.

4. How We Use Data

Operating core services (inventory management, CRM, HR, reservations).
Sending notifications related to your activity (reminders, reservation updates, approval requests).
Improving platform performance, analyzing usage in aggregate, and fixing technical issues.
Detecting fraud or misuse and protecting platform security.
Communicating about your account, support, or material updates to the service.

5. Data Sharing and Sub-Processors

Repanza does not sell user data to any third party, and does not use it for external advertising.
Each subscribing company’s data is fully isolated from other companies on the platform — developers cannot see broker data and vice versa, except what a user explicitly chooses to share.
Repanza relies on service providers to run its infrastructure, including hosting providers for backend servers and databases, hosting for front-end applications, and a push-notification provider (Firebase by Google). These providers are bound by agreements covering data confidentiality and security.
When a subscribing company chooses to connect its Facebook Page, Repanza exchanges data with Meta Platforms as described in Section 15.
Repanza may disclose limited data if required by a valid court order or legal obligation in effect in the Arab Republic of Egypt.

6. International Data Transfer and Cloud Hosting

Some of the platform’s infrastructure may be hosted with global cloud service providers whose data centers may be located inside or outside the Arab Republic of Egypt.
Where personal data is transferred outside the country, Repanza commits to implementing appropriate contractual and technical safeguards to ensure a level of data protection no less than that required under Egyptian Law No. 151 of 2020 on the Protection of Personal Data and its executive regulations.
Users or subscribing companies may request information about which countries their data is hosted in by contacting the support team.

7. Data Retention

Repanza retains active account data for as long as the subscribing company continues to use the platform.
Upon subscription cancellation or account closure, data is retained for 90 days from the closure date as a grace period for account recovery or a final data export; after this period the data is permanently deleted or anonymized from live systems.
Certain records (such as invoices and financial records) may be retained for a longer period to comply with Egyptian tax and accounting laws, even after account closure.
Backups may retain deleted data for a limited technical period not exceeding 30 days before being fully overwritten, solely for disaster-recovery purposes.

8. Account and Data Deletion

Any user, or the primary account holder of a subscribing company, may request deletion of their account and associated data at any time.
Account deletion can be requested directly from within the mobile app (account settings), in addition to being available through the support team.
When an individual account within a subscribing company is deleted, that person’s personal data is deleted, while operational records tied to their activity remain part of the subscribing company’s records, unless the law requires otherwise.
When a subscribing company’s account is deleted entirely, all of its operational and personal data is permanently deleted after the grace period, except for what must be retained by law.
Repanza commits to processing deletion requests within a maximum of 30 days from the date the request is received and the requester’s identity is verified.
Instructions for deleting data received from Facebook are available at: getrepanza.com/data-deletion

9. Cookies — Web Portals

Essential cookies: to maintain the login session and run core platform functions — these cannot be disabled.
Preference cookies: to save user settings such as the selected language and sidebar states.
Analytics cookies (if used): to understand general usage patterns and improve performance, kept as aggregated as possible.
Repanza does not currently use cookies for advertising or third-party tracking purposes.
Users can control or delete cookies through their browser settings; disabling essential cookies may affect the ability to use the platform.

10. AI Features and User Data

Repanza may currently or in the future offer AI-powered features.
When these features are used, some user data may be processed through internal AI models or specialized external providers, only to the extent necessary to deliver the requested feature.
Data belonging to any subscribing company is not used to train AI models that serve other companies, and is not shared between different subscribing companies.
This section will be updated, and users notified, whenever a new AI feature involving additional data processing is added.
Users may request to disable optional AI features where offered as a toggleable option.
The chat assistant on our website is AI-powered: your messages in the conversation are sent to an AI model provider to generate the answer. We save the text of the question and whether it was answered, to improve our help guides and website content, without linking it to your name, email or IP address, and delete it automatically after 180 days. We use your IP address only temporarily in memory to limit abuse and do not store it. Please do not type personal or sensitive information into the chat.

11. Data Security

Repanza uses encrypted communication (HTTPS), fine-grained access control, full isolation of each company’s data from others, and periodic security reviews. Despite these measures, no electronic system can be guaranteed absolutely secure; Repanza commits to notifying affected users in the event of any material breach, as required by Egyptian law.

12. User Rights

Access to their personal data and requesting a copy of it.
Correcting or updating inaccurate data.
Requesting deletion of their data as set out in Section 8.
Objecting to certain processing of their data, or requesting it be restricted, where permitted by law.
Withdrawing consent at any time for consent-based processing, without affecting the lawfulness of processing carried out before withdrawal.
Full control over notification preferences.

13. Children’s Privacy

The service is intended for business (B2B) use by adults working in the real estate sector, and is not directed at children under 18. Repanza does not knowingly collect data from this group. If Repanza discovers it has unknowingly collected data about a minor, it will delete that data as soon as it becomes aware.

14. Changes to This Privacy Policy

Repanza may update this policy from time to time. Users will be notified of any material changes via email or an in-platform notice with reasonable advance notice before they take effect. Continued use of the platform after changes take effect constitutes acceptance of them.

15. Facebook Integration and Lead Ads (Meta)

Repanza allows subscribing real estate development and brokerage companies — not individuals — to connect Facebook Pages owned by the company using Facebook Login for Business, in order to receive leads from Lead Ads forms inside the company’s own CRM. This connection is entirely optional.

Permissions we request: leads_retrieval, pages_show_list, pages_read_engagement, pages_manage_metadata, pages_manage_ads, ads_management, business_management — used only to list the company’s Pages and forms, subscribe to new-lead notifications, retrieve lead data, and read the performance of linked campaigns.
Data we receive: the form data entered by the interested person (such as name, phone number, email and answers to form questions), the form, ad, campaign and Page identifiers, the submission time, and ad performance statistics if an ad account is connected.
How we use it: solely to create the lead inside the CRM of the company that owns the Page, assign it to that company’s employees, notify them, and show that company its own campaign statistics.
Repanza does not sell this data, does not use it for its own advertising, and does not share it with any other subscribing company on the platform.
The subscribing company is the controller of the lead data from its own ads; Repanza acts as a data processor on its behalf.
Facebook access tokens are stored encrypted on our servers; they are never sent to the browser or the app, and are not visible to the subscribing company’s staff.
A company can disconnect at any time from the Repanza portal, or by removing the “Repanza Leads” app from its Facebook settings (Business Integrations). On disconnection, access tokens are deleted immediately and no new data is received.
The raw log of data received from Facebook is deleted within 90 days of receipt, while the lead created from it remains part of the subscribing company’s records under Section 7, unless the company or the person concerned requests its deletion.
To request deletion of data received from Facebook, see the Data Deletion Instructions page: getrepanza.com/data-deletion
Our use of data received from Meta is subject to the Meta Platform Terms and Developer Policies.

16. Privacy Contact

For any inquiry or request regarding this policy, or to exercise any of the rights described above, please contact Axivra LLC (the operator of Repanza) at: support@getrepanza.com