Privacy

Who is responsible

RECA TECH operates this website from Cairo, Egypt, and is the controller of the personal data described here. Company registration details are pending and will be published here once incorporation completes.

For anything in this policy — including a request to see, correct or delete your data — write to support@reca-tech.com.

What we collect when you send an enquiry

The contact form asks for what is needed to reply to a business enquiry and nothing else:

• Your name, work email address, company and role.
• The capability you are asking about, an indicative budget band, and a timeline.
• Your message.
• Optionally, how you heard about us.
• The language you were reading in, the page that referred you, the number of pages you viewed, and any campaign parameters present in the link you arrived on.

What we collect when you apply for a role

• Your name and email address.
• Optionally a phone number, links you choose to share, and a covering note.
• Your CV, as a PDF or Word document.
• The role you applied for, and your explicit consent to process the application.

What we collect when you simply read the site

Nothing, unless you accept analytics. The notice asks before anything is recorded, declining is a single click, and you can change your answer at any time through "Analytics preferences" in the footer.

If you accept, each page view records the page path, the language, the host that referred you — the host only, never the full address — whether the device is a phone or a desktop, and the time. We also record page-speed measurements.

How the analytics avoid identifying you

No cookie is set, and no IP address is stored. Visitors are counted using a one-way value derived from the connection, mixed with a secret that is rebuilt from scratch every day.

The practical effect is that the same person can be counted once within a day and cannot be recognised across days — there is no key that would link the two, because yesterday’s is not kept. We cannot build a profile of you from this data, and we do not try to.

Nothing is sent to an advertising network, and the analytics run entirely on our own server. There is no third-party tracking script anywhere on this site.

Signing in to the operations dashboard

This section covers the private dashboard at /admin, used only by RECA TECH staff. It does not apply to visitors.

Staff sign in with Google or GitHub. We request only the email address and basic profile information those services provide. That email address is used for exactly one purpose: to check it against a closed list of people who have been granted access, and to record who performed which action in an internal audit log.

Google user data obtained this way is never sold, never shared with third parties, never used for advertising, and never used to train any model. Access can be withdrawn by us at any time, and you can revoke it yourself from your Google or GitHub account settings.

Why we are allowed to hold it

• Enquiries and applications: because you sent them to us, in order to take the steps you asked for.
• Job applications: on the explicit consent the form asks for before it will submit.
• Analytics: on your consent, which you may withdraw at any time.
• Security measures such as spam filtering and rate limiting: our legitimate interest in keeping the site usable.

Who else processes it

We do not sell personal data. We share it only with the services that make the site work:

• Our hosting provider, which runs the server the site and its database sit on.
• An email delivery service, which sends us a notification that your enquiry arrived.
• Cloudflare Turnstile, which distinguishes people from bots on the forms.
• A rate-limiting service, which sees only a short-lived technical value, never your message.
• Google and GitHub, for staff sign-in only, as described above.

Where it is held

The site and its database run on a server in Europe. Some of the services listed above operate internationally, so your data may be processed outside Egypt and outside your own country.

How long it is kept

• CVs and the files attached to an application are deleted automatically twelve months after they arrive. This is enforced by a scheduled job, not by somebody remembering.
• Raw analytics events are deleted after ninety days. What remains is daily counts per page, which identify nobody.
• Enquiry correspondence is kept while there is a live business reason to keep it, and deleted on request.

Your rights

Write to support@reca-tech.com to ask for a copy of what we hold about you, to correct it, to have it deleted, or to object to how it is used. We will not ask you to justify the request.

If you applied for a role and want your application and CV removed before the twelve months are up, say so and it will be deleted.

To withdraw analytics consent, use "Analytics preferences" in the footer of any page. Withdrawing is the same single click as giving it.

How it is protected

• The whole site is served over HTTPS.
• Dashboard access is a closed list. There is no public registration and no password reset, because there are no passwords — sign-in goes through Google or GitHub.
• Every action taken in the dashboard, including every time a CV is downloaded, is written to an audit log recording who did it and when.

Changes

If this policy changes, the date at the top of this page changes with it. Material changes will be announced on the site.