Privacy policy

RS Financial Services is an accounting and training institution based in Cairo, Egypt. For enquiries about personal data:

• Email: support@rspaac.com
• Website: rspaac.com
• Applicable law: Egyptian law, especially the Personal Data Protection Law No. 151 of 2020.

We collect this data so we can provide the service to you:

• Account data: full name, email address, password (encrypted; we never see it), mobile number (optional at registration, required at your first booking).
• Professional data (optional): job title, company name, years of experience, professional level, a short bio. You set these on your "My data" page (بياناتي).
• Booking and payment data: the workshops you booked, the booking date, the amount paid, the payment method. Your credit card details are processed directly with the payment company (Paymob); we never see or store them.
• Usage data: the workshops you watched, your progress in each lesson, the certificates you earned, the posts you wrote in the community.
• Technical data: IP address, browser type, device type. These are recorded in system logs for security and fault analysis only.
• Marketing email tracking: if you subscribe to the weekly newsletter, we use Resend pixels to know whether you opened the email and clicked its links, so we can improve what we send. You can unsubscribe at any time from the "Unsubscribe" link in the footer of every email.

• Creating and managing your account on the platform.
• Carrying out workshop bookings and issuing invoices and certificates.
• Sending booking confirmations, reminders before a session, and certificate issue emails.
• Providing technical support and answering enquiries.
• Improving the platform and analysing usage (without sharing personal data with an external party).
• Sending a weekly marketing newsletter, only if you explicitly chose to subscribe. There is no default marketing email.
• Complying with Egyptian laws (invoices, taxes, record keeping).

Under Law 151 of 2020, Article 4 (prior explicit consent):

• Performing the contract: we process most data because you booked a workshop with us, and there is no workshop without data.
• Explicit consent: the marketing newsletter and email tracking rely on your explicit consent (choosing to subscribe).
• Legal obligation: we keep invoice and payment records for 5 years under the Egyptian tax law.
• Legitimate interest: security logs (IP, logs) to prevent fraud and detect malicious attempts.

• Account data: as long as your account is active. If you ask to delete your account, we delete it within 30 days (except what the law requires us to keep: the items below).
• Invoice and payment records: a full 5 years after the transaction (Egyptian tax law).
• Issued certificates: permanent, so a certificate's authenticity can be verified when an employer asks later. The name remains; the rest of the data is encrypted.
• Email logs (notification_deliveries): 90 days, then deleted automatically.
• Security logs: 24 hours at most on Vercel, then deleted.

We do not sell or rent your data to any third party. We use trusted technology service companies (sub-processors) to run the platform:

• Supabase (United States): database + auth. It stores all your core data.
• Vercel (United States): platform hosting + CDN.
• Resend (United States): sending operational and marketing emails.
• Cloudflare (global): video hosting (Stream) and site protection.
• Paymob (Egypt): processing payments in Egyptian pounds. Your card details are processed directly with them.
• Egyptian government authorities: on a formal legal request (the tax authority, the prosecution), and we notify you if the law allows.

We have signed Data Processing Agreements with all these companies, to commit them to appropriate protection.

Most of our servers run in the United States (Supabase, Vercel, Resend). This means your data may be transferred outside Egypt. We apply appropriate contractual safeguards (Standard Contractual Clauses) with these service providers, to comply with Egyptian law and the GDPR if you are a European citizen.

Under Law 151 of 2020, Articles 16-20, you have these rights:

• Right of access: ask for a copy of all your data that we hold.
• Right to correction: amend any wrong data (directly from "My data" (بياناتي), or by email).
• Right to deletion (the right to be forgotten): ask us to delete your account and all your data. We delete it within 30 days, except what the law requires us to keep (payment records for 5 years, certificates for verification).
• Right to data portability: ask for a copy of your data in JSON or CSV format so you can move it elsewhere.
• Right to object: stop the processing of your data for marketing purposes (from the notification settings or the "Unsubscribe" link).
• Right to complain: complain to the Egyptian Personal Data Protection Center if you believe your rights have been violated.

To exercise any of these rights, send an email to support@rspaac.com from the same email address registered with us, and state the request. We reply within 14 business days at most.

We use only two types of cookies:

• Necessary cookies: needed for you to sign in and keep your session. There is no way for them to work without them, and we do not ask for your consent because they are an essential part of the service.
• Analytics cookies (Vercel Analytics): collected anonymously, and they do not identify you personally. Their purpose is to understand how the site is used so we can improve it.

We do not use advertising cookies or cross-site tracking cookies. For the full details, see the cookie policy.

• All data travels over encrypted HTTPS (TLS 1.3).
• Passwords are stored with a bcrypt hash, so no one can read them even if they get into the database.
• Mobile numbers are encrypted in the database (pgcrypto + Supabase Vault).
• Access to the database is limited to Omar alone.
• We also keep daily backups + Point-in-Time Recovery.

The service is aimed at adult accountants (18 years and over). If you are under 18, please do not create an account on the platform. If we discover an account belonging to a minor, we delete it immediately.

We may update this policy from time to time. If there is a material change affecting your rights, we email you at least two weeks before the change takes effect. The date at the top of the page always shows the latest update.

Any question, complaint or request about your privacy: contact us right away:

• Email: support@rspaac.com
• Website: rspaac.com
• Expected reply time: one business day for general enquiries, 14 days for legal rights.