Privacy policy
This policy describes how EXITLY handles information today. Every statement in it describes something the system actually does, checked against the software rather than written as an intention. Where something has not yet been decided, this notice says so plainly instead of promising it.
- 01
Who we are
EXITLY operates a property-exit service in Egypt at exitly.properties and through the EXITLY mobile applications. If you want to ask about anything in this notice, or about the information we hold about you, write to info@exitly.properties.
- 02
What we collect, and when
When you register a unit or ask about one, we collect your name, your mobile number, and — if you give it — your email address. If you create an account we store a cryptographic hash of your password, never the password itself. When you register a unit we collect what you tell us about the property: the project, the developer, the unit, the amounts paid and outstanding, the payment schedule, and anything you write in the notes. If you use the mobile application we record which screens and units you opened, so we can see which parts of the service are used. We do not collect your location, your contacts, your calendar, your messages or your call history, and the applications do not ask for permission to.
- 03
Your unit documents
Registering a unit requires four documents about the property. They are stored in a private area of our object storage that is not reachable from the public internet. They are never published, never attached to a public listing, and never shown to a buyer. When a member of our staff opens one, the service issues a link that expires shortly afterwards and writes a record of who opened which document and when. That access record is kept even if the document is later replaced.
- 04
Why we use it
We use what you give us to run the service you asked for: to review and verify a unit, to price it, to publish it without identifying you, to introduce a buyer, to carry out the transfer, and to contact you about your own request. We use the mobile usage records to understand which parts of the product are used. We do not use any of it to build a profile of you for advertising.
- 05
Who can see it inside EXITLY
Our staff can see the information needed for the work they do, and what they may see is controlled by named permissions rather than by seniority. Material actions taken on a record are written to an append-only audit trail that identifies the staff member. Opening one of your documents is one of those recorded actions.
- 06
Who we share it with outside EXITLY
We use a hosting provider to run the service and store the database and the documents, and an email delivery provider to send you messages such as a password reset. Both act on our instructions. WhatsApp is used to contact you only where you have given us a WhatsApp number and only through a message our staff send. We do not sell your information, we do not rent it, and we do not share it with data brokers.
- 07
Advertising and analytics networks
At the time of writing, no advertising or analytics network receives anything from this website: no Google Analytics tag, no advertising pixel and no third-party tracker is loaded on any public page. The software is capable of reporting anonymous conversion events to advertising networks if we ever switch that on, and it is written so that no name, phone number, email address or unit reference is ever included in such a report. If we switch it on, we will say so here first.
- 08
Automated review, and its limits
We use software to help our staff review a unit. Part of that review runs entirely on our own servers. Part of it may send a copy of the unit's figures and its four documents to an external artificial-intelligence provider so that the provider's system can read them and report what it finds. That is the one circumstance in which your documents leave our own infrastructure, and it happens only for the review of your own unit. The result is advice for a person to read: the automated review cannot approve a unit, reject one, publish one, set a price or complete a transfer. Every one of those decisions is made by a member of our staff. This is enforced in the software itself and not only in our procedures.
- 09
Notifications and your devices
If you allow notifications, the application registers that handset with us so we can send them. You can see your registered handsets and remove any of them from within the application. Signing out removes the handset you signed out from. Deleting your account removes them all.
- 10
What we never publish
A published unit never carries your name, your mobile number, your email address or any of your documents. It does not carry our internal reference for your unit either — publication mints a separate short reference for the public page, so that the number a buyer sees says nothing about how many units we hold or in what order they arrived.
- 11
Deleting your account
You can delete your account yourself at any time, from Account in the mobile application or from My account on the website. It asks for your current password and a typed confirmation. It happens immediately: there is no waiting period and no request for us to review. Full details are on our account deletion page.
- 12
What deleting removes, and what stays
Deleting removes your account and your sign-in. Every session ends at once on every device, and your password no longer opens anything. Every handset registered for notifications is revoked. What stays is the record of the units you registered: a unit registration is a business record about a property, it may already have been reviewed, priced, published or transacted, and other people may be part of that history. Deleting your sign-in does not erase work that has already happened. What is removed is your access.
- 13
How long we keep things
We keep your account for as long as you have one. We keep unit records for as long as we operate this service, because they are the business record of a property transaction. We have not yet fixed a period after which those records are destroyed. We would rather say that plainly than publish a number we do not yet apply; when we set one, this notice will state it.
- 14
Security
The service is served only over an encrypted connection. Passwords are stored as hashes and never in a form we could read back. Documents live in private storage and are reachable only through short-lived links issued to a signed-in member of staff whose access is recorded. Sign-in attempts are rate-limited, and a failed attempt is answered the same way whether or not the account exists, so the form cannot be used to discover who is registered.
- 15
Children
EXITLY is a service for people entering into property transactions and is not directed at children. We do not knowingly collect information from anyone under eighteen.
- 16
What is still being settled
Two things in this notice are deliberately not stated, because stating them would mean inventing them. The first is the fixed period after which we destroy the records described above. The second is the formal legal wording — the statutory basis on which we process information under Egyptian law, the precise rights that law gives you and the procedure for exercising them, and the terms on which information may be handled outside Egypt. Those are being prepared with qualified Egyptian legal counsel. Everything else in this notice is a description of what the service does today, and it applies now.
- 17
Changes, and how to reach us
If we change how the service handles information, we will change this notice. For any question about your information, or to ask us to delete an account you can no longer sign in to, write to info@exitly.properties.