Privacy Policy

1. Controller and contact

The controller is Mohamed Sobhy Mahmoud Ibrahim, an individual / sole trader in Egypt trading as MEP Estimate-X. Contact support@mepestimatex.com for privacy requests.

2. Historical records and support

The website early-registration and Special Requests forms have been retired. Previously submitted email, company/country details, preferences, request text and consent records may remain for their original purposes and applicable legal or security needs. Retiring a form does not delete records or broaden consent. Request information or deletion at support@mepestimatex.com.

3. Desktop account, devices and usage

The intended account service processes your verified identity and email, required profile fields, device public identifiers, device approvals, protected sessions, security events, subscription status and usage records. These support sign-in, account recovery, the two-device rule, fraud prevention and accurate trial, monthly and add-on allowances.

Private Windows device keys are held in protected Windows storage; only public identity material and cryptographic proof are used by the authorization service. Remembered sign-in uses protected session material and remains subject to expiry and revocation. Do not send private keys, passwords or recovery codes to support.

4. Projects and online processing

Project files, source references, package scan results, classification evidence, settings and generated outputs are stored on your Windows device. Keep backups and remove local copies using your own file-management controls when appropriate.

When you request an online workflow, selected BOQ descriptions and necessary engineering context are sent over HTTPS to the secured processing service and its processing provider. The product must not be represented as keeping all imported information exclusively offline.

Commercial desktop online processing is not publicly enabled. The planned desktop integration uses OpenAI processing services; the actual enabled provider, data handling and retention details will be disclosed before customer-service activation. Do not submit confidential third-party material unless you have authority and have reviewed that disclosure.

5. Retired website services

The public Ask assistant, tools and market-reference services have been retired. The new public pages do not send questions or files to an AI assistant and no longer load the previous analytics or advertising scripts. Historical analytics and derived visitor identifiers may remain subject to retention rules. Hosting and security services may process request information to prevent abuse; retirement does not mean network logs never exist.

6. Browser preferences and cookies

The website interface stores the animation preference for the browser session. Older preferences or identifiers may remain in your browser until you clear them. Protected record-management pages use session and security cookies. Clearing browser data does not delete server account records. The new public pages do not load Google AdSense advertising.

7. Billing data and service providers

Paddle processes payment details for purchases it sells as Merchant of Record. Our integration uses transaction/customer references, paid status and related entitlement records; payment-card numbers and card security codes are not collected by the desktop application. Paddle has its own Privacy Policy.

Cloudflare hosts the website and backend infrastructure, and Auth0 provides identity authentication. The public website AI assistant has been retired. Enabled desktop processors, provider contracts and required international-transfer safeguards will be confirmed and disclosed before public customer-service activation. No fixed processing country, zero retention or compliance certification is asserted.

Support correspondence is processed to answer your request. Information may also be disclosed where law requires it or to protect service security. We do not authorize sale of project files or their publication through a support request.

8. Purposes and legal grounds

Service delivery and requested support require account, authorization and processing information. Security and fraud prevention serve the protection of users and the service. Billing and legal records are retained where legally required. Optional launch/demo communications use the specific consent collected.

Where the law requires consent for a particular processing activity, that consent must be obtained before the activity begins and can be withdrawn for future processing. Other applicable legal grounds and rights depend on your location; withdrawal does not invalidate prior lawful processing.

9. Retention and deletion

Keep local project copies only as long as you need them. Account, security, usage and billing information is limited to the purposes of service delivery, dispute handling, abuse prevention and applicable legal recordkeeping. Records needed to prevent repeated trial abuse or preserve transaction integrity may remain after a deletion request where lawful.

No universal number of retention days is asserted. Website registration, request and support records are kept according to their stated purposes and applicable legal, security and dispute-handling needs; contact us for information about a particular record. Desktop service-specific schedules, provider retention and backup-deletion handling will be disclosed before desktop customer-service activation.

Request access, correction, deletion or information about retention at the privacy contact. We may need proportionate identity verification, and will explain lawful exceptions. A request does not require you to send a password or private key. Subscription cancellation and data deletion are separate actions.

10. Rights, transfers and security

Depending on applicable law, you may have rights to information, access, correction, deletion, objection, restriction, portability, withdrawal of consent and complaint to the competent supervisory authority. Contact us to exercise applicable rights; no specific regulator registration or local legal credential is asserted.

The publisher is in Egypt and service providers may process data in other countries. Desktop customer-service activation remains subject to verification of required transfer mechanisms and contractual protections. No Egypt-only or EU-only storage promise is made.

Access controls, protected device keys, encrypted transport and revocable sessions are part of the security design. No system is risk-free. Report a suspected account compromise promptly, without sending credentials.

11. Children, updates and contact

The service is intended for estimation and commercial work, not directed to children. If you believe a child's data was submitted without appropriate authority, contact us so it can be investigated.

This Privacy Policy is updated 26 October 2026. Material privacy changes will be disclosed as required. Questions and complaints go to support@mepestimatex.com.