Privacy Policy
Contents
We built FORGA360 to showcase spaces beautifully — not to exploit your data. We collect only what we need to operate the platform, we don't sell your personal information, and we give you meaningful control over it.
Overview
This Privacy Policy describes how FORGA360 ("we," "us," "our") collects, uses, and protects personal information when you visit forga360.com or use any of our services.
We are the data controller for personal information collected through our Platform. By using the Platform, you consent to the practices described in this Policy.
This Policy does not apply to third-party websites linked from our Platform. We encourage you to review the privacy policies of those sites independently.
Data We Collect
| Category | Examples | How Collected |
|---|---|---|
| Account Information | Full name, email address, hashed password, account role, registration date | Provided by you when registering |
| Profile & Tour Data | Tour titles, descriptions, URLs, thumbnail images, category, attributes | Provided by Tour Owners when uploading |
| Usage & Analytics | Pages visited, tour views, clicks, shares, favorites, session duration, IP address | Automatically collected during use |
| Device & Browser | Device type (desktop/mobile/tablet), browser name and version, operating system | Automatically via User-Agent parsing |
| Location (Approximate) | Country, city (derived from IP address only — not GPS) | Automatically via IP geolocation |
| Live Tour Data | Client name, session timestamps, Jitsi room identifier, IP address | Collected when a Live Guided Tour is requested |
| Communications | Messages sent via contact forms, email correspondence | Provided by you when contacting us |
| Payment Information | Bank transfer references, payment confirmations | Provided when completing a purchase; we do not store card numbers |
We do not collect sensitive personal data such as biometric data, health information, or financial account credentials.
How We Use Data
We use your personal information for the following purposes:
- Account management: Creating and maintaining your account, verifying your email, and authenticating logins.
- Service delivery: Hosting and displaying virtual tours, facilitating Live Guided Tour sessions, and providing embed codes.
- Analytics: Providing Tour Owners with aggregated performance data (views, clicks, shares, device breakdowns) to help them understand their audience.
- Security: Detecting and preventing fraudulent activity, abuse, and unauthorised access.
- Communications: Sending transactional emails (account verification, password resets, booking confirmations). We do not send marketing emails without your explicit consent.
- Legal compliance: Meeting our obligations under applicable Egyptian and international law.
- Platform improvement: Understanding how users interact with the Platform to fix bugs and develop new features.
Data Sharing
We do not sell your personal information to any third party.
We may share data in the following limited circumstances:
- Service Providers: We use Google Cloud Platform for hosting and storage. These providers process data on our behalf under strict confidentiality obligations and are not permitted to use it for their own purposes.
- Live Tours: When you request a Live Guided Tour, your name and a Jitsi room link are shared with the relevant Tour Owner so they can join the session. The video session itself is conducted on Jitsi (meet.jit.si) and is subject to their privacy policy.
- Legal Requirements: We may disclose personal information if required by law, court order, or government authority, or to protect the rights, property, or safety of FORGA360, its users, or the public.
- Business Transfer: If FORGA360 is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.
Cookies & Tracking
We use cookies and similar technologies to operate and improve the Platform:
- Session cookies: Required for authentication and maintaining your logged-in state. These are deleted when you close your browser.
- Remember-me cookies: If you check "Remember me" at login, a persistent cookie keeps you logged in for up to 14 days.
- Analytics session cookies: An anonymised identifier used to track unique visitor counts across tour pages without storing personal information.
We do not use advertising cookies or share cookie data with advertising networks. You can control cookies through your browser settings, though disabling certain cookies may affect Platform functionality.
Data Retention
We retain your personal information for as long as your account is active or as needed to provide services. Specific retention periods:
- Account data: Retained for the lifetime of your account, plus 30 days after deletion to allow for recovery requests.
- Analytics events: Retained for 24 months, then aggregated or deleted.
- Live Tour session records: Retained for 90 days, then permanently deleted.
- Email correspondence: Retained for 3 years for customer service purposes.
- Payment records: Retained for 7 years as required by Egyptian financial regulations.
Security
We take the security of your data seriously and implement industry-standard measures including:
- All data transmitted between your browser and our servers is encrypted via TLS (HTTPS).
- Passwords are hashed using bcrypt — we never store plaintext passwords.
- Session cookies are set with HttpOnly and Secure flags to prevent JavaScript access and transmission over unencrypted connections.
- CSRF tokens protect all form submissions against cross-site request forgery.
- Our infrastructure runs on Google Cloud Platform, which maintains SOC 2 and ISO 27001 certifications.
No method of data transmission or storage is 100% secure. If you become aware of any security vulnerability in our Platform, please disclose it responsibly to info@forga360.com.
Your Rights
You have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you.
Rectification
Correct inaccurate or incomplete data about you.
Erasure
Request deletion of your personal data ("right to be forgotten").
Restriction
Request that we restrict processing of your data in certain circumstances.
Portability
Receive your data in a structured, machine-readable format.
Objection
Object to processing of your data where we rely on legitimate interests.
To exercise any of these rights, email us at info@forga360.com with the subject line "Data Rights Request." We will respond within 30 days. Some requests may be subject to identity verification.
You may also update your account information directly from your dashboard at any time.
Children's Privacy
The Platform is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately and we will delete it promptly.
Users aged 13–17 may use the Platform in a visitor capacity only, and solely with parental or guardian consent.
Policy Changes
We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
- Update the "Last updated" date at the top of this page.
- Send a notification email to registered users where required.
- Display a prominent notice on the Platform for at least 14 days.
Your continued use of the Platform after changes take effect constitutes your acceptance of the updated Policy.
Contact Us
For any privacy-related questions, requests, or concerns, please contact our team:
- Email: info@forga360.com
- WhatsApp: +20 110 101 7212
- Subject line: "Privacy Enquiry" or "Data Rights Request"
We aim to respond to all privacy enquiries within 5 business days.