Privacy Policy

Gahez (“Gahez”, “we”, “us”, “our”) provides an AI-powered lead qualification service for real estate businesses. This Privacy Policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and the rights and choices you have.

1. Scope of this policy

This policy applies to:

• Our website at gahez.app, including the demo request form;
• Conversations handled by the Gahez assistant on messaging channels, including Facebook Messenger, Instagram and WhatsApp, on behalf of businesses that use Gahez;
• Lead forms and landing pages connected to Gahez;
• The Gahez customer dashboard used by our business customers.

2. Who we are and our role

We act in two distinct roles, and this affects who you should contact about your data:

• As a controller. For visitors to our website, people who submit a demo request, and the staff of our business customers, we decide how and why personal information is processed.
• As a processor (service provider). When we operate a messaging assistant on behalf of a real estate business (a “Client”), that Client decides why and how the information of the people who message them (“End Users”) is processed. The Client is the controller; we process that information on the Client’s documented instructions.

3. Information we collect

3.1 Information you give us on our website

• Demo request form: your name, company name, phone or WhatsApp number, and approximate monthly lead volume.
• Direct contact: any information you choose to include when you message us on WhatsApp or by email.

Our website does not use advertising cookies, cross-site tracking pixels, or third-party analytics profiling. Our hosting and security provider processes standard server logs (including IP address and user agent) to deliver the site and protect it from abuse.

3.2 Information we process from messaging conversations

When you message a business that uses Gahez on Messenger, Instagram or WhatsApp, we process:

• Profile information made available by the platform, such as your display name and a platform-scoped user ID;
• Your phone number, where the channel provides it (for example, WhatsApp);
• The content of the messages you send and the replies sent to you;
• The property requirements you choose to share — for example budget range, preferred location, unit type, payment preference (cash or instalments), and intended purchase timeline;
• Conversation metadata such as timestamps, channel, and message delivery status.

3.3 Information from our business customers

• Business contact details for account administration;
• Configuration information such as project names, locations, price ranges, payment plans and qualification criteria used to set up the assistant.

4. How we use information

We use personal information to:

• Respond to new inquiries promptly on the channel where they arrive;
• Ask qualification questions and organise the answers into a structured lead summary;
• Deliver that summary to the relevant Client’s sales team so they can follow up;
• Operate, secure, monitor, troubleshoot and improve the service;
• Communicate with our business customers about their account, support and service changes;
• Comply with legal obligations and with the policies of the platforms we integrate with.

We do not sell personal information. We do not use the content of End User conversations for advertising or for building marketing profiles.

Where required by applicable law, we rely on the following legal bases: performance of a contract (providing the service to our customers), legitimate interests (responding to inquiries, securing and improving the service), consent (where you voluntarily start a conversation or submit a form), and compliance with legal obligations.

5. Automated and AI processing

Gahez uses automated systems, including large language models, to interpret messages, generate replies, and produce lead summaries. To do this, message content may be transmitted to our AI service providers strictly for the purpose of generating those responses.

• We engage such providers under contractual terms that restrict their use of the data to providing the service to us;
• Where a provider offers the option, we instruct that content is not used to train their models;
• Automated qualification is decision support, not a final decision. A human sales representative at the Client reviews the summary and decides on next steps. No legally significant decision is made solely by automated means.

6. How we share information

We share personal information only as described below:

• With the Client you contacted. The real estate business whose page or number you messaged receives your conversation and the resulting lead summary, so their sales team can follow up.
• With messaging platforms. Messages you send travel over the platform you chose — Facebook Messenger, Instagram or WhatsApp, operated by Meta Platforms — and are also governed by that platform’s own privacy policy.
• With service providers who process data on our behalf under contract, including hosting and content delivery, workflow automation, database hosting, and AI model providers.
• For legal reasons, where we reasonably believe disclosure is required by applicable law, regulation, legal process, or to protect the rights, safety or property of any person.
• In a business transfer, such as a merger, acquisition or sale of assets, in which case we will require the recipient to honour this policy.

7. Messaging platform compliance

Where Gahez operates on Meta’s platforms, we handle platform data in accordance with the Meta Platform Terms, the Meta Developer Policies, and the WhatsApp Business Messaging Policy. In particular:

• We use platform data only to provide and improve the messaging experience you requested, and not for unrelated purposes;
• We do not transfer platform data to data brokers, information resellers, or advertising networks;
• You can stop receiving messages at any time by replying “STOP” (or «إيقاف»), by blocking or reporting the business on the platform, or by asking the business to stop contacting you.

8. International transfers

We and our service providers may process information in countries other than your own. Where information is transferred internationally, we take steps to ensure it remains protected — including contractual commitments with our providers requiring appropriate security and confidentiality safeguards.

9. How long we keep information

• Conversation and lead data: retained for as long as needed for the Client’s follow-up purpose. Unless the Client instructs a shorter or longer period as permitted by law, we delete or anonymise it within 24 months of the last interaction.
• Demo requests submitted on our website: retained for up to 24 months from submission.
• Operational and security logs: retained for a short period consistent with security needs.
• We may retain information for longer where required to comply with a legal obligation or to establish, exercise or defend legal claims.

10. Your rights and choices

Subject to applicable law, you may have the right to:

• Request access to the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your information;
• Object to or request restriction of certain processing;
• Withdraw consent where processing is based on consent, without affecting prior processing;
• Lodge a complaint with your local data protection authority.

To exercise these rights, email [email protected] or message us on WhatsApp at +20 102 527 4006. We respond to verified requests within 30 days. Where we act as a processor for a Client, we will refer your request to that Client and support them in fulfilling it.

11. How to delete your data

You can ask us to delete the personal information associated with you at any time. Full step-by-step instructions are on our Data Deletion Instructions page.

12. Security

We use technical and organisational measures appropriate to the risk, including encryption of data in transit (HTTPS/TLS), access controls and authentication for administrative systems, and limiting access to personal information to staff and providers who need it to operate the service. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Children’s privacy

Gahez is a business service intended for adults. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated to our business customers through the service or by email.

15. Contact us

For any privacy question or request, contact us: