Privacy Policy

SamanConnect, operated from Cyprus, is responsible for the personal data it uses for the SamanConnect website, customer accounts, workspace access, platform security, billing administration and customer support.

Privacy contact: saman.abotaleby@gmail.com

This policy covers the main SamanConnect website and customer Portal. Individual SamanConnect systems may process additional information for their specific purpose. Where that happens, the system may provide an additional privacy notice or data-processing agreement.

• Account data: name, email address, verified identity-provider identifiers and account status.
• Workspace data: business/workspace name, country, membership, role and permissions.
• Commercial data: products, entitlements, subscription state, payment references, invoices, credits and usage records where those features are used.
• Security and technical data: authentication events, session information, IP-derived security signals, device/browser information, audit records, errors and service telemetry needed to operate and protect the platform.
• Support data: information you provide when asking for help or reporting a problem.
• System-specific business data: only when you use a connected SamanConnect system that requires it for the service you request.

• create and secure customer accounts;
• verify workspace membership and permissions;
• provide requested SamanConnect services and connected systems;
• process and record billing, subscriptions, entitlements and usage where applicable;
• prevent fraud, abuse, unauthorized access and security incidents;
• maintain audit, reliability, backup and recovery evidence;
• respond to support requests and service notices;
• comply with legal, tax, accounting, security and regulatory obligations.

Depending on the activity, we rely on one or more lawful bases under the GDPR: performing a contract or taking requested pre-contract steps; complying with legal obligations; legitimate interests such as operating, securing and improving the platform where those interests are not overridden by your rights; and consent where the law specifically requires it.

We do not treat acceptance of the Privacy Policy as consent to optional marketing or analytics.

We use specialist service providers to operate SamanConnect. Depending on the feature, these may include hosting and deployment providers, identity/authentication providers, database and storage providers, payment processors, email-delivery providers and operational notification services. They receive only the information needed for their role and are subject to their own contractual and legal obligations.

Current platform infrastructure may include Vercel, Google/Firebase, Neon, Cloudflare, Stripe and Resend. Provider use can change as the platform develops; material privacy changes will be reflected in this policy.

Card payments are handled by Stripe or another disclosed payment provider. SamanConnect is designed not to receive raw card numbers through the customer Portal. We retain the payment, invoice, subscription and transaction references needed for access, accounting, fraud prevention, refunds, disputes and legal records.

Some service providers may process data outside Cyprus or the European Economic Area. Where EU data-protection law requires safeguards for an international transfer, we use an applicable legal transfer mechanism or another lawful basis available for that transfer.

We keep personal data only for as long as reasonably necessary for the purpose it was collected for, including account operation, customer support, security, dispute handling, accounting and legal obligations. Retention can differ by record type. Security and audit records may be kept for a limited period after an account closes where needed to investigate abuse or protect legal claims; financial records may need to be retained for statutory accounting or tax periods.

Subject to applicable law and exceptions, you may have rights to access your personal data, correct inaccurate data, request deletion, restrict processing, object to certain processing, receive portable data, and withdraw consent where processing is based on consent. You may also complain to a supervisory authority.

If Cyprus is your relevant supervisory authority, you can contact the Office of the Commissioner for Personal Data Protection in Cyprus. You may contact us first at saman.abotaleby@gmail.com so we can try to resolve the issue.

SamanConnect may use AI or automated tools in future connected systems to assist with analysis, organization or recommendations. We do not currently state that the main Portal makes decisions producing legal or similarly significant effects solely by automated means. If a future feature does so, the relevant notice will explain the logic, significance, available safeguards and any rights required by law.

We use technical and organizational controls designed to protect personal data, including protected server sessions, workspace authorization checks, scoped internal service access, audit/security logging and restricted handling of secrets. No internet service can guarantee absolute security. Please report suspected unauthorized access to saman.abotaleby@gmail.com.

If a business customer uploads or supplies personal data about employees, customers, suppliers or other people through a connected SamanConnect system, that business remains responsible for having an appropriate legal basis and providing any notices it is required to provide. Where SamanConnect acts as a processor on behalf of a business customer, additional data-processing terms may apply.

SamanConnect is intended for business and professional use and is not directed to children. Do not create an account if you are not legally able to enter into the applicable agreement or use the service on behalf of the relevant organization.

We may update this policy as SamanConnect changes. The current version and update date are published on this page. Where a change materially affects how personal data is used, we will provide additional notice where required.