Please read this document carefully.
Who We Are and the Responsible Entity
Citra Smart Solutions, a Limited Liability Company (CITRA, we, or us), is an engineering software and business solutions company developing digital products for construction and project businesses, including Tas3era and CITRA ERP, alongside engineering services related to its business. The entity responsible for the data is CITRA’s operating legal entity in the Arab Republic of Egypt. Its principal office and legal domicile are in Nasr City, Cairo, Egypt.
Scope
This policy applies to CITRA’s website, contact forms, accounts, products, and services that link to it, including Tas3era, unless a product- or service-specific notice is provided. It does not govern independent third-party websites or services, even when we link to them.
CITRA’s Data-Processing Role
CITRA acts as the party responsible for processing website visitor, prospect, account, billing, and communication data. Where an organizational customer uploads data relating to its employees, clients, or projects to use a contracted product, CITRA may process that data on the customer’s behalf and instructions. The customer remains responsible for having lawful authority to collect and submit it and for providing any required notices.
Data We May Collect
The data depends on how you use the website or product and may include:
- Identity, contact, and account data, such as name, email address, phone number, company, and job title.
- Project and technical content, such as BOQs, specifications, drawings, DWG files, correspondence, and instructions submitted by a user.
- Usage and support data, such as pages and features used, support requests, and feedback.
- Technical and security data, such as IP address, browser and device type, sign-in records, errors, and security events.
- Billing and transaction information received from the payment provider. CITRA is not intended to retain full card details where payment is handled by an independent payment provider.
Sources of Data
We receive data directly from you when you create an account, upload a file, complete a form, or contact us; from the organization that provides your work account; automatically through our systems when you use the website; and from payment, support, or authentication providers where necessary to deliver the service.
Purposes and Legal Grounds
We process data to provide products and services and perform a request or contract; administer accounts, subscriptions, and billing; analyze files and produce outputs; respond to enquiries; improve performance and quality; protect our platforms and prevent fraud and misuse; comply with legal duties; and document transactions and consents. Depending on the context and applicable law, processing may be based on performance of a contract or steps requested before a contract, consent, compliance with a legal obligation, or a legitimate interest that is not overridden by the individual’s rights.
Tas3era Files — Pay per Project
For pay-per-project services, the original file is used to process the request and is then deleted from the operational storage and processing environment within 24 hours after the result is made available. These file paths are excluded from routine backups under the approved operating design. A technical verification and cleanup cycle, completed within no more than 30 days, removes unintended temporary files or technical remnants.
Product and Subscription Files
For plans or products that include project storage, files are retained for the subscription period and for six months after the most recent subscription ends, then deleted under the technical deletion cycle, unless the customer requests earlier deletion or a different period is stated for the relevant product or contract. Separate administrative records that do not contain the project file itself may be retained for legal, accounting, or security purposes.
Artificial Intelligence and Automated Processing
We may use automated processing and artificial intelligence to assist with translation, classification, analysis, and information extraction. Under Tas3era’s current operating design, the complete original file is not sent to third-party AI model providers; only the parts needed for the requested function may be sent after unnecessary identifying data is minimized where practicable. We do not use project files to build a general CITRA training dataset or make them available to third parties for training general-purpose models without a lawful basis and appropriate notice. Outputs are decision-support tools that require professional human review, and we do not rely on them alone to make decisions producing legal or similarly significant effects on individuals.
Service Providers and Disclosure
We may use hosting, infrastructure, AI, email, communications, support, payment, analytics, and cybersecurity providers only as needed to operate the service. We limit access according to role and use appropriate contractual and organizational measures where required. We may also disclose data where required by law or a valid court order, or to protect CITRA’s or its users’ rights. We do not sell personal data or project files to advertisers.
International Processing and Transfers
Cloudflare and other service providers may process some data relating to the Company website or its services in different countries. Where a data transfer is subject to legal requirements, we apply the safeguards and procedures required by applicable law.
Security
We apply technical and organizational measures proportionate to the nature of the data and the risks, including access controls, infrastructure protection, logging, backups for data within backup scope, deletion procedures, and minimization of data sent to external services. No electronic transmission or storage method can be guaranteed to be completely secure.
Administrative Records and Retention
We may retain account, billing, transaction, consent, support, security, and compliance records for as long as necessary for their purpose or to satisfy legal, accounting, or security requirements. These periods differ from project-file retention and do not mean that the original project file is retained. We review retention periods and delete or anonymize data when there is no longer a legitimate need for it.
Your Data Rights
Depending on applicable law, you may have the right to be informed about processing; access your data and obtain it in a clear format; request correction, completion, deletion, or destruction; withdraw consent; object to or restrict certain processing where provided by law; and lodge a complaint with the competent authority. We may request information to verify identity and authority before acting on a request, and legal exceptions may apply.
Project and Account Deletion
The platform or support channels provide ways to request deletion of a project or account. Completion is subject to reasonable technical periods and any legal requirement to retain specified records. Account deletion does not necessarily remove transaction or security records that law or a documented legal need requires us to retain, but it does not extend project-file retention beyond the stated period.
Communications and Marketing
We may send operational messages required for an account or service. Marketing communications are handled separately where required by law, and you can unsubscribe using the method provided in the message. Opting out of marketing does not prevent necessary operational communications.
Children’s Data
CITRA’s products and services are intended for businesses and professionals and are not designed for direct use by children. Please do not submit a child’s or minor’s personal data unless doing so is lawful, necessary, and duly authorized under applicable law.
Security Incidents
We handle data incidents under internal procedures to identify, contain, remediate, and document them, and notify the competent authority or affected individuals where notification is required by applicable law.
Changes to This Policy
We may update this policy when our products, providers, or legal requirements change. We will publish the latest revision date and provide additional notice where a change is material or requires renewed consent.
Privacy Contact
For data-rights requests and privacy enquiries, contact legal@citrasmartsolutions.com. For legal correspondence, contact legal@citrasmartsolutions.com. CITRA's principal office and legal domicile are in Nasr City, Cairo, Egypt.