Privacy policy
How Point Agency in Egypt handles website, app and company workspace data.
Who we are
Point Agency, Egypt, operates pointagency.online and the Point Agency apps. Contact abdelrahman@pointagency.online for privacy enquiries or requests to access, correct or delete your data and account.
Data we process
Data may include your name, phone, email, company details, property enquiries, responses, messages and attachments you choose to provide. We also process login and session records, IP addresses, enquiry sources, invitation link activity and device or push notification identifiers when enabled. Operational, wallet and payment records support the service; payments are processed through the configured payment provider.
How we use data
We use data to create and verify accounts, review companies and enquiries, provide customer management and enquiry distribution, communicate about the service, protect accounts, prevent abuse and record operations. Opening an invitation link alone does not provide WhatsApp consent. Marketing communications follow consent settings and requests to stop contact.
Access and sharing
Authorised Point Agency personnel and the relevant company access data according to workspace permissions. Enquiry distribution or marketplace services may disclose contact details to the receiving company through the approved delivery or acceptance process, with previews masked beforehand. Hosting, messaging, verification, notification, payment and integration providers may process data needed for an enabled service. When AI qualification is enabled, necessary conversation content may be sent to the configured provider, with human escalation available. Some providers may operate outside Egypt; contact our official email for details of providers used.
Retention and protection
We retain data needed to provide the service, protect accounts, settle obligations and maintain operational records, with access limited by permissions. Financial or security records and isolated backups may need to remain; there is currently no single automatic deletion period for every data category. When reviewing deletion requests, we explain what will be deleted and what must be retained and why. The service uses HTTPS, and private media requires authorised access.
ChatGPT connection and recipients
Connecting is optional: sign in on Point Agency and select the company and permissions. OpenAI, the operator of ChatGPT, receives inputs and results needed for the tools you request, which may include CRM records, tasks, messages, forms, account reports and files you select. Do not enter passwords, API keys or verification codes in chat. Company permissions, marketing consent and opt-outs apply to each action. Revoke access from your account ChatGPT connections page to stop access through that connection; revocation does not delete company data or the conversation held by OpenAI. Copies held in ChatGPT follow your OpenAI account settings and policies and may be processed outside Egypt. The plugin does not initiate payment, subscription purchases or offers to buy new digital services.
Connection file and token lifetimes
Private download links are valid for five minutes and check connection access when downloaded. Temporary ChatGPT upload and export copies become eligible for deletion after two hours; cleanup runs hourly in batches, so backlogs or a stopped scheduler can delay removal. A copy retained for a CRM import is durable and follows import-record retention. OAuth authorisation codes are single-use and valid for five minutes; access tokens last 60 minutes and rotating refresh tokens last 30 days. Action approval requests last 15 minutes. Expiry prevents use; it does not imply deletion of the database record.
Uploaded file receipt lifetime
An uploaded file receipt remains usable for one hour by the connection that uploaded it, for an import or QR logo. This access lifetime is separate from physical storage cleanup after two hours by the periodic job. A copy committed to a CRM import remains part of company records.
Company records and deletion requests
Customer, conversation, task, import, consent and audit records remain available while the company workspace is used, until an authorised record-deletion action or a verified deletion request is processed after ownership checks. Token expiry or disconnecting ChatGPT does not automatically erase these records. On account closure we review shared data, obligations and financial or security records requiring continued retention, and tell the requester which categories remain, why and the criterion ending retention before acting. Encrypted backups have a separate retention review and are not automatically deleted by the current system; they remain isolated from ordinary use and a deletion request must address their scope. We do not promise a uniform numeric deletion deadline that the system does not enforce.
Pixels and advertising consent
A company may configure Meta, Google Ads, TikTok, Snapchat, LinkedIn, Pinterest, X and Microsoft Advertising pixels when the service and identifiers are enabled. Optional pixel scripts do not load before advertising consent. Enabled platforms may receive IP addresses, browser details, their identifiers, page visits and events, with their own retention policies applying to received data. Refuse or withdraw consent on the form; the browser choice remains locally stored until changed or site data is cleared. Contact-matching consent is separate from tracking, SMS and WhatsApp consent. A SHA-256 audience file is not anonymous: it is private and the plugin does not automatically upload it to an advertising network. Ad execution and external audience synchronisation are not implemented; external pixel operation is disabled by default.
Your requests and account deletion
Email abdelrahman@pointagency.online to request access, correction, withdrawal of consent or deletion of your account and associated data. Include your account identifier or registered phone and company name if relevant. Never send a password or OTP. We verify your identity and authority before acting and explain effects on the account, subscriptions, shared records and necessary retention. Uninstalling the app or signing out does not delete your account. See /en/account-deletion for request details.
Policy updates
Last updated: 17 October 2026. This policy covers Point Agency websites, apps and services; external services have their own policies. Contact our official email with questions about changes.