Privacy Policy
1. Who we are
ComplyNex (complynex.online) is a governance, risk and compliance platform owned and operated by Mohamed Emam, Cairo, Egypt. Contact: admin@complynex.online.
2. Our role
Companies that subscribe to ComplyNex ("clients") use it to run their own compliance work. For the personal data a client enters or uploads (for example its customers, employees, board members or reporters), the client is the data controller and ComplyNex processes that data only on the client's instructions and only to provide the service. For the account data of people who sign in to ComplyNex, ComplyNex is the controller.
3. What we process
- Account data: name, work email, job title, department, role, sign-in history and security settings (including two-factor authentication).
- Client compliance data: the records a client manages in the platform, such as customer due-diligence files, sanctions and PEP screening results, transaction-monitoring alerts, whistleblowing and complaint cases, governance and training records.
- Identity verification (eKYC) data when a client uses it: identity-card images, a selfie and the data read from them. These images are stored encrypted.
- Technical data: IP address, browser type and security logs, used to protect the service.
4. Why we process it
- To provide the service the client subscribed to, and to keep audit trails the client is required to keep.
- To secure the platform, prevent misuse and investigate incidents.
- To meet legal obligations.
We do not sell personal data, do not use it for advertising, and do not use client data to train any external artificial-intelligence model. Screening, document reading and face matching run on ComplyNex's own servers; no external AI service receives client data.
5. Where data is stored
The platform runs on servers controlled by ComplyNex. Encrypted transport (HTTPS) is used for all connections. Backups of the platform are stored in a Google Drive account owned by ComplyNex's operator, accessible only to the operator.
6. How long we keep it
Client data is kept for the period agreed with the client and the retention periods the client configures in the platform (for example, identity-verification images are deleted automatically when their retention period ends). Security logs are kept for as long as needed to protect the service. When a subscription ends, client data is returned or deleted as agreed with the client.
7. Sharing
Data is shared only with the client that owns it, with service providers needed to run the platform (hosting, email delivery, backup storage) under confidentiality obligations, or when required by law or a competent authority.
8. Your rights
Under Egyptian law you may ask to access, correct or delete your personal data, or object to its processing. If your data was entered by a client company (for example as its customer or employee), please contact that company first; we will support it in answering your request. For your own ComplyNex account, write to admin@complynex.online.
9. Cookies
We use only the cookies needed to sign you in and keep your session secure. We do not use advertising or tracking cookies.
10. Google user data
ComplyNex accesses Google Drive only through its operator's own Google account, to store and restore backups of the platform. It does not access the Google accounts of clients or users. ComplyNex's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
11. Changes
We may update this policy; the date at the top shows the latest version.