Privacy Notice

1. Who is responsible for your data

TruHaus is operated by Interactive Designers Lab in Cairo, Egypt. For this service, TruHaus is the data user/controller. Our data-protection contact is legal@truhausegypt.com.

2. Data we collect

• Account and authentication data, including email address, account identifier, preferred language, login records, and limited profile data returned by Google or Facebook if you choose social sign-in.
• Buyer data, including saved homes, search preferences, saved searches, inquiries, viewing feedback, messages, name, phone number, and preferred contact time.
• Seller and listing data, including contact details, role, property facts, pricing, photos, listing activity, and—only where a separately approved process requests it—evidence of identity or authority to list.
• Technical and security data, including IP address, user agent, session cookies, request timestamps, hashed anti-abuse fingerprints, and diagnostic or security events.
• Content you submit, including support communications and a search-assistant prompt. When the optional AI assistant is enabled, that prompt is sent to Google Gemini to interpret it; TruHaus does not store the assistant conversation on its servers.
• On-device data. Saved homes, search preferences, and unfinished seller drafts may be stored in your browser using local storage or IndexedDB.

3. Where data comes from

We receive data directly from you; from a social sign-in provider you select; from owners, brokers, operations reviewers, and other users involved in a listing; and from lawful public or licensed property and place sources. If we receive your data indirectly, we will provide notice as required by law.

4. Why we use data and our lawful bases

• To create and maintain accounts, save preferences, provide listings, and deliver requested features: performance of our agreement with you or steps you request before an agreement.
• To route an inquiry or viewing request to operations and the relevant listing party: your requested action and our legitimate interest in providing the service.
• To review listings, prevent misleading content, protect accounts, rate-limit abuse, and maintain audit records: legitimate interests in a safe marketplace and, where applicable, legal obligations.
• To send service messages, password resets, confirmations, and security notices: performance of the service and legitimate interests. Marketing requires separate valid permission where required.
• To comply with orders and record-keeping duties or establish, exercise, or defend legal claims: legal obligation or legal rights.
• Where we rely on consent, the request will be separate, specific, and optional. You may withdraw it without affecting earlier lawful processing.

5. Who receives data

Access is limited to people and providers that need it for the purposes above.

• Interactive Designers Lab personnel and authorised operations reviewers.
• The relevant owner, broker, or brokerage when you ask us to connect you. We share only the details needed to respond.
• Supabase for database, authentication, and accounts; Cloudflare for hosting, security, analytics, and private media storage; Resend and configured mail providers for transactional email; and Google Gemini when the optional assistant is used.
• Google or Facebook when you choose their sign-in; WhatsApp or your telephone provider when you choose an external call or message link; and OpenStreetMap/Overpass services for nearby-place data.
• Professional advisers, regulators, courts, or authorities where disclosure is legally required or necessary to protect legal rights.

6. International processing

Our providers operate infrastructure in multiple countries. Personal data may therefore be processed outside Egypt, including in the European Economic Area or the United States, depending on the provider and configuration. We use contractual, technical, and organisational safeguards and any transfer approval or mechanism required by Egyptian law. Contact us for information about the safeguard relevant to your data.

7. How long we keep data

We keep data only for the period needed for the purpose collected. The criteria include whether your account is open, an inquiry or listing is active, the time needed to resolve disputes or enforce terms, statutory record-keeping periods, fraud and security needs, and provider backup cycles. Anti-abuse attempt records are designed to expire after one day. On-device data remains until you clear it or the application removes it. When data is no longer needed, it is deleted, anonymised, or access-restricted unless a legal hold applies.

8. Your rights

Subject to the Egyptian Personal Data Protection Law and its exceptions, you may ask to know whether we process your data, access it, receive a copy, correct it, delete it, restrict or object to processing, or withdraw consent. You may object to electronic direct marketing. We may verify your identity and will explain if a lawful exception applies.

• Send a request to legal@truhausegypt.com with the subject “Privacy request”.
• You may lodge a complaint with the Egyptian Personal Data Protection Center at pdpc.gov.eg.

9. Cookies and browser storage

We use strictly necessary cookies for authentication, session security, and requested features. We use browser storage for saved homes, preferences, and offline drafts. Cloudflare may process traffic and analytics data under our configuration. We do not currently use advertising cookies. Clearing site data may sign you out or remove local drafts and saved items.

10. Security and public information

We use access controls, encryption in transit, private storage, review workflows, rate limits, and data minimisation. No system is completely secure. Property listings and seller information marked for publication are public; do not upload identity documents, contracts, private contact details, or information about another person into public fields or ordinary listing photos.

11. Children

TruHaus is intended for adults aged 18 or older and is not designed to collect children’s data. Contact us if you believe a child has submitted personal data.

12. Changes and contact

We may update this notice when our practices or the law change. We will post the new date and provide additional notice for material changes where required. Questions, rights requests, and privacy complaints may be sent to legal@truhausegypt.com.