Privacy

This policy says what we collect, why, who sees it and for how long. It is written to be read, and the Arabic text is the binding version.

1. Who is responsible

e3mel is operated by Usef Elshazly, trading as e3mel, in Egypt, who is the controller of the personal data described here. A company being formed will take over that role when it is registered, and this section will be updated with its details. Requests, questions and complaints go through the contact page at e3mel.com/contact.

2. What we collect

Account: your name, email address, phone number, password (stored hashed, never in readable form) and the language you use the site in.

Orders: the brief you write, the files you upload, the messages you send us or your maker, your billing name, an optional company name and tax ID for invoices, and the payment reference returned by our payment provider. We never see or store your full card number.

AI logos: the description you write for a logo (the name, your line of work, what makes you different, the look and colours you pick), the logos drawn from it, and your answers to the questions about them.

Makers: everything above, plus your portfolio, the skills and categories you declare, your date of birth, your national ID and a selfie for identity verification, your payout details (bank account, InstaPay address or mobile wallet number), your tax ID where we need it, your performance record on the platform, the links to videos you send us about e3mel, your bounty entries, and the reward points they earn.

Automatically: your IP address, the pages you open, and the device and browser you use, to keep the service secure and working. We also count visits to our pages with Vercel Web Analytics, which sets no cookies and keeps no personal data, to see which pages help people order.

3. Why we use it

To run the orders you place, to match a brief with a maker, to check quality, to take payment and pay makers, to issue invoices, to email you about your orders, to prevent fraud and abuse, to meet our tax and accounting obligations, to improve the service, and to measure our ads. We do not sell personal data, and we do not use your brief or your files to train anyone's models.

4. The legal basis

Performing the contract you entered when you placed an order or applied as a maker; complying with our legal obligations, including tax and identity checks; and our legitimate interest in keeping the platform safe and free of fraud. Where we rely on consent, for example marketing email, you can withdraw it at any time from your account page or from the email itself.

5. Who sees what

Makers see the brief needed to do the work, with your name, email and phone number removed; while an order is being made, a small number of other approved makers may see the same redacted brief to take a shot at it, under the maker agreement's confidentiality terms. You never see a maker's contact details or identity documents. Our operations team sees both sides, because it manages the order. Identity documents are kept in restricted storage seen only by operations staff; payout details and identity data are encrypted at the field level.

If you are on a team account, the owner and the other people on the team see your name and email, and everything you write and send on the team's orders, including your messages to us about them.

If you tick the box under an AI logo, e3mel may show that logo as an example of the tool's work, never with your name or contact details.

If you are a maker and approved showing your work (maker agreement, section 9), images from your portfolio links may appear on e3mel's pages and later in e3mel's own marketing, never with your name or contact details; you can stop it from your profile.

We use these processors to run the service:

Supabase, database and file storage.

Vercel, application hosting.

Resend, transactional email.

Google Drive, working files for an order.

Anthropic, an automated check of briefs and deliveries for completeness, contact details and policy compliance, the review of the chat between a client and a maker when their order ends, with the original of anything the contact filter removed, and reading back the words in a drawn AI logo to check the name is spelled right. Content sent for these checks is not used to train models.

OpenAI, drawing an AI logo from the description you write on the logo page. It receives that description, never your name, email or phone number, and content sent through its API is not used to train its models.

EasyKash, our payment provider, to take payments. Refunds to a card go back through the same provider.

Upstash, rate limiting.

TikTok, measuring our ads through the TikTok Pixel on our public pages and in the client area.

Meta, measuring our ads on Facebook and Instagram through the Meta Pixel on our public pages and in the client area.

Google, measuring our ads on Google through the Google tag (Google Ads) on our public pages and in the client area.

Calendly, booking a call with our team from the Help page. You type your own name and email there when you book, and Calendly's privacy policy covers what it keeps.

Some of these operate outside Egypt. Where data leaves the country we rely on the provider's contractual safeguards, and we do not send identity documents or payout details to any of them beyond storage and hosting.

6. Automated decisions

Three things happen automatically and can affect you: a brief may be sent back for completion by an automated check; jobs are offered to makers by a matching score built from their record, where reward points can add a small, capped push between makers of similar quality; and when an order ends, an automated review of the chat between the client and the maker gives a strike to a person who tried to take the order, the conversation or the payment off e3mel. The first two are reviewed by a person where they affect an order or a payout; a strike can be contested, and closing an account is always a person's decision. You can ask us to look again at any automated decision.

7. How long we keep it

AI logos you receive stay in your account while it exists, and the drawings you did not choose are deleted when you choose. Order files are kept for 30 days after an order completes, then deleted; we remind you 7 days before, so download what you need. Financial records, including invoices and payout records, are kept for the period Egyptian tax law requires. Account data is kept while your account exists and for a reasonable period afterwards for accounting and dispute purposes. Identity documents are kept while you are an active maker and deleted after the legal retention period once you leave. Rejected maker applications are deleted after 12 months. Backups are kept for 30 days.

8. Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to a particular use. Deleting your account removes or anonymises your personal data while the financial records the law requires us to keep are kept. Make a request from your account page or through the contact page, and we will respond within 30 days. If you are not satisfied, you may complain to the Personal Data Protection Centre.

9. Security

Passwords are hashed. File links are short-lived and signed. Administrative access requires two-factor authentication, and every administrative action is recorded in an audit log. Payout details, identity data and the originals of moderated messages are encrypted. If a breach affects your data we will tell you and the authority as the law requires.

10. Cookies

We set a session cookie so you stay signed in, and a preference cookie for your language. On our public pages and in the client area we also use the TikTok Pixel and the Meta Pixel. They set cookies and tell TikTok and Meta which of these pages were visited, when an account is created, the steps of an order (starting it, reaching checkout, going to pay and paying, with the service and its price), the words you search our services for, and that you sent us a request, tapped to reach us on WhatsApp or booked a call (never what you wrote), with technical details from your browser, so we can measure our ads on TikTok, Facebook and Instagram. Google's tag (Google Ads) does the same for our ads on Google: it sets cookies and tells Google which of these pages were visited, when an account is created, and when an order reaches checkout and is paid, with its price, along with technical details from your browser. Google may also use it to show you our ads again on its services; you can turn that off in Google's ad settings (adssettings.google.com). We never send them your name, email, phone number, briefs or files, and the pixels and the tag do not run on maker or admin pages. The booking calendar on the Help page is Calendly's own page and may set Calendly's cookies. You can block these cookies in your browser settings.

11. Age

e3mel is not for anyone under 18, whether as a client or as a maker. If we learn that someone under 18 has an account, we close it and delete the data.

12. Changes

Material changes are published here with a new version number.