Privacy Policy
1. Executive Commitment & Regulatory Framework
Sigma Z Line for AI & Software Development ("Sigma Z Line", "we", "our", or "us"), headquartered at 132 El Bahr El Aazam, Giza, Egypt, is committed to safeguarding the confidentiality, integrity, and sovereignty of user and enterprise data.
This Privacy Policy governs our data processing practices across our ecosystem platforms, client web services, mobile applications (including Taalomy, Mazraty, Tareekna, and Rounding Portal), and enterprise client integrations. Our operations strictly comply with:
- Egyptian Data Protection Law No. 151 of 2020
- Saudi Arabian Personal Data Protection Law (PDPL - Royal Decree No. M/19)
- UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection
- Applicable GCC Data Privacy Directives
2. Categories of Information We Collect
2.1 Enterprise & Personal Identifiers
When engaging with our platforms or consulting services, we may collect:
- Full Name, Corporate Email Address, Phone Number, and Physical Office Address
- Government-issued Tax ID or Commercial Registration (for corporate contracts)
- Architectural blueprints, API specs, and project requirements
- Authorized account credentials for client portal access
2.2 Technical & Telemetry Data
When browsing our site or using connected software, our edge nodes automatically record:
- IP address, ISP, and geo-location metadata (country/city level)
- Browser user-agent, operating system, hardware acceleration profile (WebGL capabilities)
- Request headers, referrers, latency analytics, and session interaction metrics
2.3 Specialized Ecosystem Telemetry
- EdTech (Taalomy): Attendance timestamps, assessment scores, live stream diagnostic logs.
- AgriTech (Mazraty): Farm IoT telemetry, sensor coordinates, soil moisture metrics.
- Mobility (Tareekna): High-precision GPS coordinates during active route dispatching.
- Healthcare (Rounding Portal): Encrypted audit trails adhering to HIPAA and regional health data residency rules.
3. Purpose and Legal Basis for Processing
We process your data strictly on the following lawful grounds:
- Contractual Execution: To build, deploy, host, and maintain custom software applications.
- Legitimate Interests: To optimize serverless cloud performance, prevent cyber attacks, and maintain regional high availability.
- Legal & Regulatory Compliance: To satisfy tax, trade, and governmental data archiving mandates in Egypt and the GCC.
- Explicit Consent: For voluntary technical newsletters, beta platform invitations, or customized demos.
4. Data Sovereignty & Regional Hosting
In accordance with Egyptian Law 151/2020 and GCC data sovereignty directives, Sigma Z Line prioritizes local and regional cloud data centers. Data generated by sovereign or governmental clients remains hosted within certified regional cloud infrastructure with zero unauthorized international egress.
Where international cross-border transfer is necessary for global CDN caching or specialized AI computation, transfers occur under strict Standard Contractual Clauses (SCCs) and end-to-end cryptographic encapsulation.
5. Enterprise Security & Encryption Protocols
We apply defense-in-depth security across all software tiers:
- In-Transit Encryption: TLS 1.3 with mandatory Perfect Forward Secrecy (PFS).
- At-Rest Encryption: AES-256 encryption across all databases, volumes, and object stores.
- Access Control: Zero-Trust architecture, multi-factor authentication (MFA), and role-based access control (RBAC).
- Penetration Testing: Routine vulnerability scans and automated code dependency auditing.
6. Your Statutory Data Subject Rights
Under Egyptian Law No. 151/2020 and regional data protection regulations, you are entitled to:
- Right to Access: Request a complete export of personal data held about you.
- Right to Rectification: Require prompt correction of outdated or incomplete records.
- Right to Erasure ("Right to be Forgotten"): Request full deletion of your records where retention is no longer legally mandated.
- Right to Restriction & Objection: Limit or halt specific computational processing routines.
- Right to Data Portability: Receive your data in a structured, machine-readable format (JSON/CSV).
To exercise any statutory right, contact our Data Protection Officer at [email protected]. Requests are fulfilled within 14 business days.
7. Cookie & Tracking Policy
Our website utilizes purely essential session cookies and performance telemetry. We do not engage in third-party behavioral advertising or selling tracker IDs to data brokers.
8. Data Retention Schedule
- Inquiry & Contact Communications: Retained for 24 months after last active correspondence.
- Project & Architectural Artifacts: Retained for the contract lifespan plus 7 statutory years for commercial/tax compliance.
- System & Server Logs: Rotated and purged every 90 days.
9. Direct Contact & Compliance Office
If you have questions regarding this Privacy Policy or regional data handling, contact:
Sigma Z Line
Legal & Compliance Department
132 El Bahr El Aazam, 1st Floor, Office 101, Giza, Egypt
Email: [email protected]
Direct Line: +20 101 079 8703