01 Introduction
Welcome to Ebdaha — the e-commerce store-builder platform offered by Sa7 (sa7.net). This policy governs all personal data exchanged between you and the platform, whether you're a merchant running a store, a visitor browsing a store built on Ebdaha, or simply someone opening our main site.
By using the platform, you agree to the practices described here. If you don't agree with any point, you can't use the service.
Quick summary: We collect the minimum data necessary, use it only to run the service, never sell it to anyone, and you can delete your account and data at any time.
02 Data we collect
Data you provide directly
- Account data: name, email, mobile number, password (encrypted).
- Store data: store name, logo, address, commercial registry (optional).
- Payment data: bank/wallet name for payout. We do not store credit-card details — those are handled directly by approved payment gateways.
- Content: products, images, descriptions, and articles you upload to your store.
Data we collect automatically
- Device data: browser type, operating system, screen resolution, language.
- Usage data: pages visited, session duration, clicks, referral sources.
- Approximate location: via IP (city/country only, not precise coordinates).
- Technical logs: system errors, time, and date for debugging purposes.
Your customers' data
When someone places an order from your store, the platform collects their data on your behalf (name, address, products, payment). You are the Controller of that data, and we act as a Processor on your behalf — meaning it's your legal responsibility to inform your customers of your own privacy policy.
03 How we use data
- Operating the service: creating your account, signing in, managing your store, processing orders.
- Technical support: answering your questions and resolving technical issues.
- Platform improvement: analyzing usage patterns to find strengths and weaknesses.
- Security: detecting intrusion attempts, fraud, and abuse.
- Legal compliance: meeting applicable local and international laws.
- Marketing (optional): sending product updates and offers — you can unsubscribe anytime.
We do not use your data for: selling to third parties, targeted advertising outside the platform, or training other AI models without your explicit permission.
06 Security & protection
- Encryption in transit: all communication protected by TLS 1.3.
- Encryption at rest: passwords with Argon2id, sensitive data with AES-256.
- Store data isolation: each store is in an isolated scope (multi-tenant isolation).
- Daily backups: encrypted, geographically distributed, restorable within an hour.
- Regular penetration testing: by accredited external cybersecurity firms.
- Certifications: SOC 2 Type II, ISO 27001, PCI DSS Level 1.
Despite all precautions, know that no system is 100% secure. If you discover a vulnerability, please report it to
07 Your rights as a user
In accordance with applicable laws (GDPR, Egyptian EDPL, UAE DPL), you have the right to:
- Access: request a copy of all your stored data.
- Correction: modify any inaccurate or outdated data.
- Deletion: request full deletion of your account and data ("right to be forgotten").
- Restriction: temporarily halt processing of your data.
- Portability: obtain your data in JSON/CSV format to transfer to another service.
- Objection: refuse the use of your data for marketing or analytics.
- Complaint: file a complaint with your country's data-protection authority.
To exercise any of these rights, email us at
08 Data retention
- Active account data: for the duration of your service use.
- After account deletion: we delete your data within 30 days, except what the law requires us to retain.
- Invoices and accounting records: 5 years (tax obligation).
- Security and fraud logs: 12 months.
- Backups: automatically deleted within 90 days of creation.
09 Children's data
Ebdaha is not designed for people under 18. If we discover an account belonging to a minor without parental consent, we'll delete it immediately. If you're a parent and discover your child registered with us without your permission, contact us at
10 Policy updates
We may amend this policy from time to time to keep pace with service evolution or new laws. For material changes, we'll notify you via email and an in-dashboard notice at least 30 days before the change takes effect.
Continued use of the service after the change means you accept the new policy. If you don't agree, you have the right to delete your account.
11 Contact us
If you have any question or concern about your privacy, we're here: