Privacy Policy

01Who Is Responsible

Yousef Wally, an individual based in Giza, Arab Republic of Egypt, trading as Manufacto ("Manufacto", "we", "us"), is responsible for the personal data described in this policy (in legal terms, its controller). For any privacy question or request, email support@manufacto.co.

02Information You Give Us

Your account

• Your name, email address and company name.
• Your password, which we store only as a one-way hash, never in readable form.
• Whether you are a brand or a factory.
• If you sign in with Apple or Google, the name and email address they share with us. Apple may give us a private relay address instead of your real one.

Factory profile and verification

• Company name, logo, country and region.
• Sector, product categories, minimum order quantities, capacity and lead times.
• Facility and production photos, and any certifications you add.
• A contact phone number, such as WhatsApp.
• Anything else you submit for review.

Brand profile

• Company name, logo and country.
• The country you prefer to source from.

Requests, quotes and orders

• Product details, quantities, budgets, delivery locations and dates.
• Design references and tech packs you upload.
• Quotes, offers, order prices and currencies, and production updates.
• Reviews.

Messages and support

• Messages and files you send to other users.
• What you send us when you contact support or report a problem.

03Information Collected Automatically

• Sign-in and security: your IP address and device or browser type for each sign-in session, and records of sign-in attempts and of how often certain actions are taken. We use these to protect accounts and stop abuse.
• Notifications: a push notification token for your device, and your notification sound setting.
• Crash and performance reports: when the app crashes or an error occurs, technical details such as device model, operating system, app version, the screen involved, the error and how long operations took. We remove email addresses and sign-in tokens from these reports before they are sent.

We do not use advertising trackers or third-party analytics, and we do not sell personal data.

04How We Use Information

• To create and run your account, and to sign you in.
• To show your profile, requests and offers to the users who are allowed to see them.
• To match brands' requests with suitable factories.
• To deliver messages, quotes, offers and order updates, and to notify you about them.
• To review and verify factories.
• To send you codes and notices about your account and its security.
• To review conversations for quality assurance and safety, as described in our Terms of Service.
• To prevent fraud, spam and abuse, and to enforce our Terms of Service.
• To find and fix problems and improve the Platform.
• To invoice fees, keep business records and meet our legal obligations.

05Legal Basis

We process personal data in line with Egypt's Personal Data Protection Law (Law No. 151 of 2020) and, where it applies to you, the EU and UK General Data Protection Regulation. We rely on:

• Contract: what we need in order to provide the Platform you signed up for.
• Legitimate interests: keeping the Platform secure, preventing fraud, verifying factories, reviewing conversations for quality assurance, and improving reliability. We weigh these interests against your rights.
• Legal obligation: what the law requires us to keep or disclose.
• Consent: push notifications, which you allow in your device settings, and anything else we ask your permission for. You can withdraw consent at any time.

06What Other Users Can See

• Brands can see a factory's profile: name, logo, country and region, sector and categories, minimum order quantities, lead time, photos and ratings. Brands do not see a factory's phone number or email address.
• Factories can see the company name, logo and country of a brand that contacts them or sends them a request, together with the request itself.
• A brand's design references are visible only to the factories that received that request.
• Both parties to a conversation can see its messages and files, and both parties to an order can see the order.

07Who We Share Information With

We use the following service providers, which process data on our behalf and only for the purposes below:

• Supabase: database and file storage, hosted in the European Union (Frankfurt, Germany).
• Vercel: hosting for the website and our sign-in service, in the European Union (Frankfurt, Germany), with a global network that delivers pages.
• Sentry: crash and error reports, stored in the European Union.
• Resend: sending emails such as verification codes and password resets.
• Expo: app updates and the delivery of push notifications, through Apple Push Notification service and Google Firebase Cloud Messaging.
• Apple and Google: if you choose to sign in with them, and for app distribution.

Authorised Manufacto staff can see account and business information, and can open conversations between users, when they review factories, check quality, handle support requests and reports, or enforce our Terms. Their access is limited to what that work needs. Every time a staff member opens a conversation, it is logged.

We may also disclose information when the law requires it, to protect the rights or safety of our users or others, to investigate fraud, or as part of a merger, sale or reorganisation of our business, in which case this policy continues to apply.

08International Transfers

Our main servers are in Germany, so your data is processed outside Egypt. Some of our service providers also process data in the United States and other countries. When data is transferred abroad, we rely on the protections required by applicable law. These may include contractual safeguards, the permissions of the competent authority and, where the law requires it, your consent.

09How Long We Keep Information

• Account and profile information: while your account exists.
• Sign-in sessions: until they expire or you sign out.
• Abuse-prevention records: only as long as the limit they enforce, from minutes to a few weeks.
• Crash and performance reports: around 90 days.

When an account is deleted, we remove the personal profile, files and contact details. Orders, quotes and conversations stay available to the other party, because they form part of that party's business records, with the deleted account's name replaced by "Deleted brand" or "Deleted factory".

We may keep limited information for longer where we need it for legal, tax or accounting reasons, to resolve disputes, or to prevent fraud and repeat abuse. This includes the reason for and evidence behind an account removal. Backups are overwritten on a rolling basis.

10Security

We protect your data with:

• Encryption in transit.
• Passwords stored only as one-way hashes, with a strong-password rule and a temporary lock after repeated wrong attempts.
• Database rules that let each user reach only the data they are allowed to see.
• Private files served only through short-lived links.

No online service can be completely secure. If a breach affects your personal data, we will notify you and the competent authorities as the law requires.

11Your Rights

Depending on the law that applies to you, you have the right to:

• Know what personal data we hold about you, and get a copy of it.
• Correct data that is inaccurate. You can edit most of your profile in the app.
• Have your data deleted.
• Object to processing based on our legitimate interests, or ask us to restrict it.
• Withdraw your consent at any time.
• Receive your data in a portable format.
• Complain to a data protection authority. In Egypt this is the Personal Data Protection Center; in the EU or UK, the authority where you live or work.

You can delete your account yourself in the app: open Profile, then Delete account. If you have an order in progress, the deletion takes effect once that order is delivered or cancelled. To use any of the other rights, or to ask us to delete your account for you, email us from the address on your account. We may need to confirm your identity first, and we will respond within the time the law requires.

12Emails and Notifications

We send emails that are needed to run your account, such as verification codes, password resets and important notices. Push notifications tell you about new requests, quotes, messages and order updates. You can turn them off in your device settings, and you can turn notification sounds off in the app. We will not send you marketing emails unless you agree to receive them.

13Children

The Platform is for businesses and is not intended for anyone under 16. If we learn that we hold data about a child, we will delete it.

14Changes to This Policy

We may update this policy. If a change is material, we will tell you in the app or by email before it takes effect. The date at the top shows when it was last updated.

15Contact

For privacy questions, or to use your rights:

support@manufacto.co

+20 129 003 4114