Privacy Policy
Version 2026-11-02 · Terms of Service
This policy explains how IS3A for Business Services & Technology Solutions ("IS3A") collects, uses and protects data when you use its Platforms — Rasheed, Maestro, Jadara and the main IS3A website — in line with Egypt's Personal Data Protection Law No. 151 of 2020. The Arabic text prevails.
1. Data we collect
Account data: name, e-mail, organisation and role.
Assessment data: company details, answers, notes, uploaded documents and financial data entered by the user in Rasheed and Maestro.
Candidate data in Jadara: name, e-mail, phone (optional), assessment answers and results, and the record of consent. We never ask a candidate for payment.
Contact data: what you send us through the website, WhatsApp or e-mail (name, phone, e-mail, message).
Limited technical data: IP address, sign-in time and an activity log for security and record-keeping, including the record of your acceptance of this policy.
2. Purposes
Providing the diagnostic and financial-analysis services and reports, sourcing candidates for requesting companies, managing accounts and permissions, securing the platform and preventing misuse, service communications, and legal obligations.
We do not sell, rent or share data for marketing.
3. Legal basis
Your explicit consent at account creation or when you apply as a candidate, and the necessity of processing to deliver the service you requested.
4. Where data is stored and who processes it
Data is stored with Supabase in Frankfurt (EU); the platform is hosted on Vercel. These providers process data on our behalf under contractual protection obligations.
When you use financial-statement extraction in Rasheed or Maestro, only the document concerned is sent to Anthropic's AI service for that purpose; we do not use it to train any model.
5. Who can see the data
Jadara candidates: the requesting company sees candidates only under code names (Candidate A, B…) with their scores. A candidate's name, e-mail and phone are shown only after the company pays the second instalment. Results are not shared with any company other than the one whose job the candidate applied for, except with the candidate's consent.
Only authorised users of the same organisation see a company's data. Partners never see other partners' data; IS3A staff access partner clients' data only through a time-limited, logged review request.
We may disclose data where required by law or a competent court.
6. Retention and deletion
We keep data for the life of the account and as required by law. A candidate's assessment result stays valid for six months from its date. On a deletion request, data is soft-deleted for thirty days, then permanently deleted.
7. Your rights
You may know what data we hold about you, access and correct it, request its deletion or export, and withdraw consent (which may prevent us from continuing the service). Send requests to rasheedbyis3a@gmail.com.
8. Cookies
We use strictly necessary cookies only (sign-in, language, theme). No advertising or marketing trackers.
9. Security
Database-level isolation, encrypted connections, least-privilege access and an audit log of sensitive actions. No online system can be guaranteed fully secure; in case of a breach we will notify those affected and the authorities as required by law.
10. Changes
We may update this policy; you will be asked to accept the new version before continuing.