Privacy Policy

EAMS is a unified, Arabic-first operating platform designed for businesses, schools, and accounting offices across the Middle East and North Africa.

Unless stated otherwise, the entity responsible for personal data processing is:

• [EAMS Legal Entity Name]
• Address: [Company Address]
• Privacy email: privacy@eams.io

In some cases, EAMS acts as a “data processor” on behalf of a customer, such as a business, school, or accounting office. In those cases, the customer may be the “data controller” responsible for determining how the personal data of its employees, students, parents, customers, or end users is processed.

The data we collect depends on how you use EAMS. It may include:

A. Website visitor data

• IP address, device, and browser information.
• Pages visited and visit time.
• Preferred language and approximate region.
• Cookie and analytics data.

B. Contact and trial request data

When you contact us, request a free trial, or speak with sales, we may collect:

• Name.
• Email address.
• Phone number.
• Company, school, or office name.
• Country and city.
• Job role.
• Message or request details.

C. Account and user data

When an account is created or the EAMS platform is used, we may process:

• Login and verification data.
• User roles and permissions.
• Organization, school, or branch settings.
• Activity logs inside the platform.
• Support tickets and technical support data.

D. Business and operational data

Depending on the modules used by the customer, data may include:

• Customer and vendor records.
• Invoices, sales, purchases, and inventory data.
• HR, payroll, attendance, and leave data.
• School data such as students, parents, teachers, fees, attendance, grades, and transport.
• Documents and files uploaded to the platform.
• Compliance records and audit logs.

E. Billing and payment data

We may process subscription and billing data such as:

• Selected plan.
• Invoices.
• Payment status.
• Transaction identifiers.
• Payment gateway data. Sensitive card data is usually processed by payment providers and is not directly stored by EAMS except where permitted by the provider and protected through appropriate safeguards.

F. AI and EVA interaction data

When you use EVA or AI-powered features inside EAMS, we may process:

• Your question, prompt, or command.
• Page or workflow context related to the request.
• AI-generated suggestions or outputs.
• Usage, cost, and approval logs.
• Voice or text data where voice features are enabled.

EAMS AI features are designed to operate inside governed workflows, with controls such as data minimization, sensitive-data redaction where possible, usage limits, audit logs, and human approval for sensitive actions.

We use personal data to:

• Create accounts and operate the platform.
• Provide free trials and paid services.
• Manage subscriptions, billing, and payments.
• Enable EAMS modules such as finance, HR, sales, POS, school management, and mobile apps.
• Provide technical support and respond to inquiries.
• Send operational notifications such as account alerts, invoices, updates, important messages, and service-related notices.
• Improve platform quality, performance, and security.
• Detect errors, prevent abuse, and protect against unauthorized access.
• Enable audit logs and permission controls.
• Support privacy requests such as access, correction, or deletion where applicable.
• Operate EVA and AI features in a governed workflow.
• Comply with applicable legal and regulatory requirements.

We do not sell personal data to advertisers.

Depending on your country and relationship with EAMS, we may rely on one or more of the following legal bases:

• Performance of a contract or provision of a requested service.
• Our legitimate interest in operating, improving, and protecting the platform.
• Your consent, where required.
• Compliance with legal or regulatory obligations.
• Protection of legal rights and prevention of fraud or abuse.

When we process data on behalf of a business, school, or accounting office customer, that customer is usually responsible for determining the purpose and legal basis of processing, and EAMS acts as a service provider or processor under the relevant contract.

EAMS may be used in educational environments that include student, parent, teacher, and school staff data.

When a school uses EAMS, the school is usually responsible for determining what data is required, how it is used, and whether parent or guardian consent is required under applicable law or school policy.

EAMS is designed to support controls such as:

• Role-based access.
• Audit logs for changes to grades, attendance, and sensitive records.
• Consent workflows related to minors where applicable.
• Human-reviewed AI use in education where needed.
• Communication channels limited to authorized parties.

The EAMS website may use cookies and similar technologies to:

• Operate the website and improve performance.
• Remember language and region preferences.
• Understand how visitors use the website.
• Improve user experience and measure page effectiveness.

You can manage cookies through your browser settings. Disabling certain cookies may affect some functionality or user experience.

If third-party analytics or measurement tools are used, they are used to understand performance and improve the website, not to sell your personal data.

We may share personal data only when needed and with appropriate safeguards, including with:

• Hosting and infrastructure providers.
• Email, messaging, and notification providers.
• Payment and billing providers.
• Analytics and performance-monitoring providers.
• Support and customer-management tools.
• AI, voice, or translation providers when the related feature is enabled and required.
• Legal or regulatory authorities where required by law.
• Professional advisers such as lawyers, accountants, or auditors when needed.

We require service providers to process data under our instructions or under an appropriate contractual relationship and to use suitable safeguards.

Data may be processed or stored in different countries depending on customer settings, region, and service providers used.

EAMS is designed to support regional data-residency considerations where applicable, especially for customers with specific regulatory or regional requirements. Where needed, hosting region settings can be addressed in the service agreement or data processing agreement.

We use technical and organizational measures designed to protect personal data, including:

• Role-based access controls.
• Multi-factor authentication where enabled.
• Encryption or protection of data in transit and at rest where applicable.
• Audit logs for sensitive activities.
• Monitoring for unusual access attempts.
• Tenant-level customer data isolation.
• Controls for attachments and uploaded files.
• Ongoing security reviews and improvements.

No electronic transmission or storage method is absolutely secure, but we work to apply appropriate controls to reduce risk and protect data.

We retain personal data for as long as necessary to provide the service, comply with legal, accounting, or tax obligations, resolve disputes, enforce agreements, or support audit records.

Retention periods may vary depending on:

• The type of data.
• The service used.
• Customer settings.
• Legal and regulatory requirements.
• Financial, contractual, or audit obligations.

When the relationship ends, data may be deleted, anonymized, or archived according to the applicable contract, policies, and legal requirements.

Depending on applicable law and your relationship with EAMS, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate data.
• Request deletion where applicable.
• Request restriction or suspension of certain processing.
• Object to certain processing.
• Withdraw consent where processing is based on consent.
• Request a copy of your data in a suitable format where applicable.
• Submit a complaint to the relevant authority if you believe your rights have not been respected.

If you are a user within an organization or school that uses EAMS, we may need to direct your request to that organization or school, as it may be the primary controller of your data.

You can contact us about privacy requests at: privacy@eams.io

Please include:

• Your name.
• The email address linked to your account.
• The organization or school name, if applicable.
• The type of request.
• Any details that help us verify your identity and process the request.

We may need to verify your identity before fulfilling certain requests, especially when the request relates to sensitive data or an organization or school account.

We may send you marketing or product communications if you contact us, request a trial, or consent to receive such messages. You can unsubscribe from marketing communications at any time through the unsubscribe link or by contacting us.

Even after you unsubscribe from marketing, we may still send important operational messages related to your account or service.

Our website or platform may contain links to third-party websites or services. This Privacy Policy does not apply to those websites or services, and we recommend reviewing their privacy policies.

We may update this policy from time to time to reflect changes in our services, legal requirements, or operational practices. When we make material changes, we will update the “Last updated” date and may use appropriate methods to notify customers or users.

For questions about this policy or EAMS privacy practices, you can contact us at:

• Email: privacy@eams.io
• Company: EAMS
• Address: 40 Gamal El Din, Al-Mokattam St, Cairo Governorate