Privacy policy

This policy explains the personal data the Brokers Connect platform — the website and the mobile app — collects, why it collects it, who sees it, where it is processed, how long it is kept, and your rights over it. It is written under Egypt's Personal Data Protection Law, Law No. 151 of 2020.

Who we are

Brokers Connect is a job platform for the real estate sector in Egypt, connecting real estate companies with consultants and job seekers in the sector.

The party responsible for processing the data (the controller): Top Suite Digital Marketing, based in Dubai, United Arab Emirates.

For privacy questions: info@topsuite.net — phone +971507071591.

Because the platform is aimed at the Egyptian market and processes the data of people living in Egypt, we follow Egyptian Law No. 151 of 2020 in this processing, even though the company is based outside Egypt.

The data we collect

When you create an account: your email address, and your password in a scrambled form we cannot read. If you sign in with Google, Google gives us your name, your email, your account ID and a link to your Google photo — we use the name and the email, and do not make your Google photo your profile picture. If you sign in with Apple, Apple gives us an ID for your account and your email — or a relay address from Apple if you chose to hide your email — and your name the first time, if you share it. If you turn on two-step verification, we keep what is needed to check its codes.

When you complete your account: whether you are a consultant or a company, your full name, your WhatsApp number, your interface language, and a profile photo if you upload one. We record which versions of the Terms of use and this Privacy policy you agreed to, and when, and the directory visibility you chose, and when.

If you are a consultant: what you add to your directory profile — your professional title, specialisations, the areas you work in, years of experience, availability, languages, the developers you have worked with, your sales record, your experience, education and certifications, and your CV if you upload one — and the visibility you choose yourself.

When you apply for a job: the job, your experience band, an optional note, your CV if you attach it, and the application's stages (the company opening it, adding it to its shortlist, and its decision and any note to you). A company may also write internal notes on your application for its team, which you do not see.

If you represent a company: the company's name, details, location and logo, the verification documents you upload — the commercial register and the tax card — its listings, its team members and their roles, and the shortlist it keeps.

While you use the platform: the jobs you save, the searches you save and their alerts, the companies you follow, the companies you hide, your notifications, and your email and notification preferences.

In the consultant directory: when a company opens a consultant's profile we record the company and the day, once a day however many times it opens it. When it asks for their contact details we record the company and when it asked.

What you send us: reports, requests to review a decision (appeals), support messages, and account deletion requests.

Technical and security data: a log of security events — such as failed sign-ins and sensitive actions — in which network and email addresses are kept only as salted hashes that cannot be turned back into the original; short-lived counters that limit repeated requests; a log of the emails we send (the kind of email, the address and whether it was delivered, without the email's text); and the technical logs our hosting provider keeps for a short time to run and protect the service.

We do not collect sensitive personal data in the law's sense — such as health, religious or political data — and we ask you not to put any in your CV or in any text field.

Why we collect it

• To run the service you asked for: showing jobs, receiving applications and passing them to the company that posted the job, and showing your profile in the directory as you chose. The legal basis is performing the agreement between us.
• To review listings, verify companies and handle reports: the basis is our and our users' legitimate interest in preventing fake listings and fraud.
• To keep in touch with you: emails and notifications about your account, your applications and your listings; a weekly email with new jobs matching the searches you saved and the companies you follow, which you can turn off at any time; and a reminder to complete your profile, sent only if you turn it on yourself. Every non-essential email has a link to stop it in one click.
• To keep the platform secure: preventing abuse and unauthorised access. The basis is our legitimate interest.
• To meet legal obligations: what the law requires of us.

We do not sell your personal data, rent it, offer the CV database as a subscription, or use it for advertising. We do not track whether you open our emails or click their links.

Who sees your data

The company you applied to — and the members of its team — see your name, photo, WhatsApp number, experience band, note, and your CV if you attached one. They also see your directory profile, unless you made it "Hidden". That is what applying is for.

The consultant directory is open only to approved companies — not to the public, to search engines or to other consultants — according to the visibility you choose:

• Hidden: no company sees it, except that a company you apply to sees your application as described above.
• Verified companies only: verified companies see it in full. Approved companies that are not verified see a card without your name, photo or contact details.
• All companies: every approved company sees it in full.

Your contact details are shown in the directory only when a company asks for them, within a daily limit, and we record every request. In the copy of your data you can see the names of the companies that asked, and when. In your account you see how many companies opened your profile in the last thirty days, without their names. No company can find out who opened anyone else's profile.

Shortlists: a company can save a consultant's profile to a private list for its team to come back to, if it is allowed to see the profile when it saves it. No other company sees the list and the consultant is not told. If you make your profile "Hidden", the platform stops showing your details on it from that moment.

Our team sees data as far as needed for review, support, and handling reports and appeals, and we record the actions it takes.

Our service providers, listed below, process data on our behalf and only on our instructions.

Public authorities, if the law or a court order requires us to disclose data.

Service providers and where data is processed

• Supabase — the database, sign-in, and storage of photos, CVs and documents: servers in Mumbai, India.
• Vercel — hosting the website and its servers: servers in Mumbai, India, and a global delivery network that requests pass through on the way.
• Resend — sending emails: from its region in Tokyo, Japan.
• Expo — delivering the app's notifications and updates: United States.
• Apple and Google — delivering notifications to your phone, and signing in if you choose one of them.
• Cloudflare (Turnstile) — checking you are a person on the sign-in and sign-up pages: a global network.

We use no advertising tools. If we ever turn on visit counting, it will be with a tool that sets no cookies and does not identify individuals, as the cookie page explains.

Data transfers outside Egypt

As the list above shows, your data is stored and processed outside the Arab Republic of Egypt — mainly in India — and some processing passes through other countries, under the contractual and technical safeguards agreed with each provider.

We say so plainly because the law sets conditions on transferring personal data abroad, and because you have the right to know where your data is kept before you share it.

The mobile app

The Brokers Connect app works with the same account and the same data, and this whole policy applies to it, with the following:

Notifications on your phone: if you allow them, we keep the notification token your phone's system creates, the type of system, the app's language and its version number, so we can send your phone the same account notifications that appear in the bell. They pass through Expo's notification service and then Apple's or Google's, which receive only the phone's token, the notification's text and your unread count. You can turn them off, choose which kinds you get and hold back those that arrive at night, from your account in the app or in your phone's settings. We delete your phone's record when you sign out on it and when you delete your account, and stop sending to a phone the app is no longer on.

Camera, photos and files: the app opens them only when you choose to upload your photo, your company's logo, verification documents or your CV, and uploads only what you choose.

Signing in with Apple: when you delete your account from the app, we ask Apple to remove the link between your Apple account and the app.

App updates: when it opens, the app asks Expo whether a newer version is available. That request carries nothing from your account — only the app's version, the type of system, and a random number the app creates when it is installed — and, as with any connection, your internet address.

On your phone: what the app keeps on the phone — your encrypted sign-in session, your settings and a temporary copy of public lists — is detailed on the cookie page.

No ads and no tracking: the app contains no advertising tools and no usage measurement, and does not track you across other apps or websites.

How long we keep it

• Account and profile data: for as long as your account exists.
• Applications, the CVs attached to them, and companies' notes on them: twelve months from the date of application, then deleted automatically.
• A company's verification documents: while the company is verified, then for a year after it stops being verified — or a year from their review if the company was never verified. Never while they are waiting for review.
• The record of directory profiles opened: sixty days, of which only the last thirty are counted.
• The record of requests for contact details: ninety days.
• Notifications: six months once read, a year if unread.
• The log of emails sent: six months, with your address removed from it as soon as you delete your account.
• Delivery reports from our email provider: ninety days.
• The security event log: a year. Request-limiting counters: two days.
• Expired listings: stay in the company's records, and stop being shown publicly when they expire.

Files tied to a deleted record — such as a CV or a photo — are removed from storage within days of the record being deleted.

Deleting your account, and a copy of your data

You can download a copy of your data from your account settings — your account, profile, applications, what you saved, your notifications, what you sent us and your agreements — in a machine-readable file, with links to your CV files that work for an hour. For what the file does not include, such as companies' internal notes on your applications and our security and review records, write to us.

You can delete your account from its settings on the website or in the app, and your personal data and files are deleted. A company's owner asks for deletion from the same screen, because deleting it affects other people's data; we contact them within 7 days and their account is deleted within 30 days. What is kept after deletion and why, and how to ask for deletion if you cannot sign in, are on the account deletion page.

Your rights

The law gives you the following rights, and you can use most of them directly from your account:

• Access to your data, and a copy of it.
• Correction, if your data is inaccurate or incomplete.
• Deletion, by deleting your account.
• Objection to a particular use, and withdrawing your consent to any non-essential email at any time.
• Limiting visibility, by setting how visible your directory profile is, or hiding it completely.

To ask a question or make a request, write to info@topsuite.net. We reply within the time the law sets. If you are not satisfied with our reply, you have the right to complain to the Personal Data Protection Centre.

Cookies

We use only what is needed to keep you signed in and to sign in securely, and what remembers your appearance choice. There are no advertising or tracking cookies, which is why there is no consent banner. The full list is on the cookie page.

Security

Connections to the platform are fully encrypted. Passwords are stored in a form that cannot be reversed. Access to data is controlled in the database itself, by rules that stop any user reading what they are not entitled to — not only in the interface. CVs and verification documents are kept in private storage and can only be reached through temporary links given to those entitled to them.

We remove the location and other hidden information from the profile photos and company logos you upload.

No system is completely secure, and we will notify you and the competent authority if a breach affects your data, as the law requires.

Age

The platform is for people aged 18 or over, and every user confirms this when completing their account. We do not knowingly collect data from anyone younger, and if we learn that we have, we delete the account and its data.

Changes to this policy

We may change this policy when the service changes or the law requires it. The date of the latest update is shown at the top of the page. For any material change we will show you a notice in your account on the website and in the app, and ask you to agree to the new version.

Contact

For any question about this policy or your data: info@topsuite.net — phone +971507071591.

Data controller: Top Suite Digital Marketing, Dubai, United Arab Emirates.