Legal

Privacy Policy

Last updated: 26 October 2026

This policy explains what personal data Estatia collects, why, who it is shared with, how long it is kept, and the rights you have over it. It covers the Estatia website (estatia-ai.com) and the Estatia platform: the subscriber dashboard and the WhatsApp sales agent that answers buyers on a subscriber's behalf.

1. Who we are

Estatia is a product of convX, based in New Cairo, Egypt ("convX", "we", "us"). For the personal data described in this policy as ours, convX is the data controller under Egypt's Personal Data Protection Law No. 151 of 2020.

For any question about how we handle personal data, contact us as described in section 15.

2. Who this policy covers

Website visitors, including people who request a demo through the form on estatia-ai.com.
Subscribers: the brokerages and developers that use Estatia, and the team members they invite to the dashboard.
Buyers: people who send a WhatsApp message to a subscriber's business number that Estatia answers.

For buyers, the subscriber decides why and how their data is used: the subscriber is the data controller and convX processes the data on the subscriber's behalf and under its instructions. Buyers can contact the business they messaged, or us, to exercise their rights (see section 9).

3. What we collect

When you request a demo

Your name, company, WhatsApp number, and, if you choose to give them, your work email, whether you are a brokerage or developer, and your monthly lead volume. The form sends these details to our team by email.

When you visit the website

Our hosting provider processes technical data needed to deliver the pages, such as your IP address and browser type. We do not use advertising or analytics cookies.

When you subscribe

Account details: the names, work emails and phone numbers of the owner and the team members they invite, the company name, and roles.
Sign-in data, handled by Google Firebase Authentication.
Billing records: plan, amounts, invoices and payment status. Card details are entered with our payment provider, Paymob; we do not store card numbers.
The inventory you upload or select, your bot settings and your WhatsApp Business number.

When a buyer messages a subscriber on WhatsApp

The buyer's phone number and WhatsApp profile name, and the messages exchanged.
Details the buyer shares in the conversation, such as preferred area, budget, unit type, payment plan and delivery date, and the lead profile and stage the platform builds from them.
Which agent the conversation was handed to, and any notes or status the subscriber's team adds.

4. How we use it

To answer demo requests and arrange a demo.
To provide the service: reply to buyers from the subscriber's own inventory, qualify the lead, and hand it to the subscriber's agent with the conversation.
To run subscriber accounts: sign-in, team management, billing, support and service emails.
To keep the platform safe: preventing fraud, spam and misuse, for example by allowing one free trial per WhatsApp number.
To improve Estatia using anonymised statistics that do not identify any person.
To meet legal, tax and accounting obligations.

We do not sell personal data. One subscriber's buyers, conversations and lead profiles are never shown to another subscriber.

5. Legal basis

We process personal data only where the law allows it: with your consent (for example when you send the demo form), where it is necessary to provide a service you asked for or to perform a contract with you, or where we must do so to comply with the law. You can withdraw consent at any time; this does not affect processing that already took place.

We share personal data only with service providers that help us run Estatia, under contracts that limit their use of it, and with authorities where the law requires it:

Meta (WhatsApp Business Platform) — carries the WhatsApp messages between buyers and subscribers.
Microsoft Azure — hosts the platform, and delivers account and service emails.
MongoDB Atlas — the platform's database.
Google Firebase — sign-in to the dashboard.
Paymob — card and payment processing.
Cloudflare — hosts the website.
Resend — delivers demo requests from the website form to our team.
Our AI processing service — reads conversation messages to write Estatia's replies and extract the lead profile.

7. Where it is stored

The platform runs on Microsoft Azure, with its database on MongoDB Atlas. These services, and some of the other providers above, store or process data outside Egypt. We transfer personal data outside Egypt only as the Personal Data Protection Law allows, and only to providers bound to protect it.

8. How long we keep it

Demo requests: up to 12 months, or longer if you become a customer. You can ask us to delete yours at any time.
Free trials that do not become a paid subscription: the inventory, conversations, customer profiles and bots are deleted 90 days after the trial ends. The account record is kept so the same WhatsApp number cannot start another free trial.
Cancelled or lapsed subscriptions: conversations, messages and customer profiles are deleted 90 days after the paid period ends. Billing records are kept for as long as tax and accounting law requires.
A single buyer's data is deleted as soon as the subscriber erases that customer in the dashboard, including the copy held by our AI processing service.

9. Your rights

Under Egypt's Personal Data Protection Law you can:

know what personal data we hold about you and get a copy of it;
have it corrected, updated or completed;
have it deleted;
withdraw your consent;
object to or restrict its processing;
be told if a breach affects your personal data.

To use these rights, contact us (see section 15). We may ask you to confirm your identity first. If you are a buyer, you can also ask the business you messaged, which controls your data. If you are not satisfied with our answer, you can complain to Egypt's Personal Data Protection Center.

10. How to delete your data

Buyers: ask the business you messaged on WhatsApp to delete your data, or contact us with your phone number and we will arrange it with that business.
Subscribers: the account owner can delete any customer in the dashboard, or close the whole account; account data is then deleted as described in section 8. You can also ask us to delete your account.
Demo requests: contact us and we will delete your request.

11. Security

Data travels over encrypted connections (HTTPS) and is stored with our providers' encryption. Each subscriber's data is kept separate from every other subscriber's, access inside a subscriber's team follows roles (agents see only the leads assigned to them), and statistics used to improve Estatia are anonymised. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.

12. Cookies and browser storage

The website sets no cookies of its own and uses no advertising or analytics tracking. It loads fonts from Google Fonts, which receives your IP address to deliver them, and our hosting provider may set strictly necessary security cookies. The subscriber dashboard uses your browser's storage to keep you signed in and to remember your language.

13. Children

Estatia is a service for businesses and is not directed at anyone under 18. We do not knowingly collect children's personal data.

14. Changes to this policy

We may update this policy. The date at the top shows the latest version; if a change is significant, we will tell subscribers before it applies.

15. Contact us

WhatsApp: +20 150 319 9497
Address: New Cairo, Egypt