Privacy Policy

M-Square ("M-Square," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you visit our website, create an account, or otherwise use our enterprise resource planning software and related services (collectively, the "Services"). It also describes the choices available to you regarding our use of your information and how you can access and update it. Please read this Privacy Policy carefully. By accessing or using the Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Services.

Scope of This Policy

This Privacy Policy applies to information collected through our website, our web and mobile applications, customer support interactions, sales inquiries, marketing communications, and any other electronic, written, or verbal interactions between you and M-Square. It does not apply to information collected by any third party, including through any application or content that may link to or be accessible from the Services, or to information collected offline by M-Square. Where our Services contain links to third-party websites and services, those third parties have their own privacy policies, and we encourage you to review them, as we are not responsible for their content or practices.

Information You Provide to Us

We collect information that you voluntarily provide to us when you interact with our Services. This includes, without limitation:

• Contact and inquiry information. When you submit a message through our Contact Us form, request a demo, or otherwise reach out to us, we collect your name, email address, phone number (if provided), company name, and the content of your message.
• Account and registration information. When you register for an account or are provisioned an account by your organization, we collect your name, work email address, username, password (stored using industry-standard hashing algorithms and never in plain text), job title, department, and organization name.
• Profile information. You may choose to add additional details to your account profile, such as a profile photo, phone number, time zone, and language preference.
• Customer and business data. As part of using our ERP Services, your organization may input operational, financial, inventory, and customer-related data into the platform. This data is controlled by your organization, and our handling of it is further described below and, where applicable, in a separate data processing agreement between M-Square and your organization.
• Payment and billing information. If your organization subscribes to a paid plan, billing contact details and transaction records may be collected; payment card data itself is processed by our third-party payment processor and is not stored on our servers.
• Communications. If you contact our support team, participate in surveys, or provide feedback, we retain records of those communications, including any attachments you provide.

Information We Collect Automatically

When you access or use our Services, we automatically collect certain information about your device and usage, including:

• Device and connection information, such as IP address, browser type and version, operating system, device identifiers, and network carrier.
• Usage data, such as pages or features accessed, time spent on pages, click paths, referring and exit pages, and the date and time of your visit.
• Log data, including server logs, error reports, and diagnostic information generated in the course of operating and securing the Services.
• Location information, derived generally from your IP address at a city or regional level; we do not collect precise geolocation unless you separately grant permission through a device feature.

Information We Receive From Third Parties

We may receive information about you from third parties, including business partners, resellers, identity verification providers, and publicly available sources, and combine it with information we collect directly. For example, if your organization uses a single sign-on ("SSO") provider to authenticate access to our Services, we receive basic profile information from that provider necessary to create and manage your account.

Cookies and Similar Tracking Technologies

We and our service providers use cookies, web beacons, pixel tags, local storage, and similar technologies ("Cookies") to operate and improve our Services. Cookies may be "session" cookies, which expire once you close your browser, or "persistent" cookies, which remain on your device until deleted or expired. We use Cookies for purposes that may include:

• Strictly necessary Cookies, required for core functionality such as authentication, session management, and security.
• Preference Cookies, which remember choices you make, such as language or display settings.
• Analytics Cookies, which help us understand how visitors interact with our Services so we can improve them; these may be provided by third-party analytics services.
• Marketing Cookies, which may be used, where applicable, to measure the effectiveness of our marketing communications.

Most web browsers allow you to control Cookies through their settings, including blocking or deleting them. Because Cookies allow you to take advantage of certain features, we recommend leaving them enabled. Disabling Cookies may limit or prevent your use of certain parts of the Services.

Legal Bases for Processing

Where applicable law requires a legal basis for processing personal information, we rely on one or more of the following: your consent; the necessity of processing to perform a contract with you or your organization; our legitimate interests in operating, securing, and improving our Services, provided those interests are not overridden by your data protection interests or fundamental rights; and compliance with a legal obligation to which we are subject.

How We Use Your Information

We use the information we collect for purposes that include:

• Providing, operating, maintaining, and improving the Services;
• Creating and managing accounts, authenticating logins, and enforcing account-level permissions;
• Processing transactions and sending related information, including confirmations and invoices;
• Responding to inquiries, comments, and customer support requests;
• Sending administrative information, such as changes to our terms, conditions, and policies;
• Sending marketing and promotional communications, where permitted, and in accordance with your communication preferences;
• Monitoring and analyzing usage trends to improve the functionality and user experience of the Services;
• Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other illegal or malicious activity;
• Protecting the rights, property, and safety of M-Square, our users, and third parties;
• Complying with applicable legal obligations, resolving disputes, and enforcing our agreements.

How We Share Your Information

We do not sell your personal information to third parties. We may share information in the following circumstances:

• Service providers. We share information with vendors, consultants, and other service providers who need access to such information to carry out work on our behalf, such as hosting providers, email delivery services, customer support platforms, and analytics providers. These providers are contractually obligated to safeguard your information and to use it only for the purposes for which it was disclosed.
• Business transfers. If M-Square is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of company assets, your information may be transferred as part of that transaction, subject to standard confidentiality arrangements.
• Legal obligations. We may disclose information where required to do so by law or in response to valid requests by public authorities, including to meet national security or law enforcement requirements.
• Protection of rights. We may disclose information where we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
• With your consent. We may share information with third parties when you have given us consent to do so.

International Data Transfers

M-Square is based in Egypt, and our servers and service providers may be located in Egypt or in other countries. If you access the Services from outside Egypt, your information may be transferred to, stored, and processed in a country different from your own, which may have data protection laws that differ from those of your jurisdiction. Where required, we take steps intended to ensure that your information receives an adequate level of protection wherever it is processed.

Data Retention

We retain personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, and applicable legal requirements. When your account is closed, we will delete or anonymize your personal information within a commercially reasonable period, except where retention is required for legal, tax, or accounting purposes, or to resolve disputes.

Data Security

We implement administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of personal information, including encryption of data in transit and at rest where appropriate, access controls limiting data access to authorized personnel on a need-to-know basis, and regular review of our information collection, storage, and processing practices. However, no method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

Your Rights and Choices

As a company operating in and subject to Egypt's Personal Data Protection Law (Law No. 151 of 2020), and depending on the law applicable to you, you may have some or all of the following rights with respect to your personal information:

• The right to be informed about how your personal information is collected and used;
• The right to access the personal information we hold about you;
• The right to request correction of inaccurate or incomplete personal information;
• The right to request deletion of your personal information, subject to certain exceptions;
• The right to object to or restrict certain processing of your personal information;
• The right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
• The right to data portability, where technically feasible;
• The right to lodge a complaint with the competent supervisory authority.

To exercise any of these rights, please contact us using the information provided below. We may need to verify your identity before responding to your request, and we will respond within the timeframe required by applicable law.

Do Not Track Signals

Some browsers transmit "Do Not Track" signals. Because there is no accepted standard for how to respond to such signals, our Services do not currently respond differently based on the presence of a Do Not Track signal.

Third-Party Links

Our Services may contain links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We encourage you to read the privacy policy of every website you visit.

Children's Privacy

Our Services are intended for business use and are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected personal information from a child without appropriate consent, we will take steps to delete that information as soon as reasonably possible. If you believe we may have collected information from a child, please contact us using the details below.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technologies, legal requirements, or other factors. If we make material changes, we will notify you by updating the "Last updated" date at the top of this page and, where appropriate, by additional means such as email or a notice within the Services. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Services after any changes to this Privacy Policy constitutes your acceptance of those changes.

How to Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise any of your rights described above, please contact us at:

M-Square
Email: privacy@m-square.com
Address: 8 Mustafa Kamel ST, El-Maamoura bldg, Smouha, Alexandria, Egypt
Attn: Data Protection Inquiries