Privacy notice

Who is responsible?

AlForsan is responsible for application and contact data in this service. For privacy questions or requests, use the contact page or email info@alforsan.tv.

What we collect

• Identity and contact data: name, email, phone/WhatsApp country and number, governorate, age, gender, and a parent or legal guardian's name when supplied.
• Personal profile data: background, experience, goals, former occupation, education, motivation, challenges, and any personal turning point you choose to share.
• Business data: project identity and description, type, years operating, website, registration, category, stage, founder position, premises, product or service readiness, competitors, partners, and planned use of funds.
• Financial data: revenue, costs, profit, sales, forecasts, unit pricing, starting capital, funding history, assets, marketing spend, market size, funding type, requested amount, and indicative equity calculation.
• Declaration data: acceptance of the terms, confirmation that information is accurate, how you heard about AlForsan, and optional notes for the committee.
• Enquiry data: name, contact details, topic, and message.
• Committee applications: name, organisation or company, position, sector, email, phone, optional years of experience and profile link, selected participation capacities, motivation, and the time of consent to review and contact.
• Operational records: reference, separately customizable statuses and tags for applications and contact messages, private notes, review decisions, communications, security events, and abuse-prevention fingerprints.

Why we use it

By submitting, you ask us to carry out these purposes and agree that the AlForsan team may contact you. You may request correction or withdrawal, although a limited record may remain where needed for security, proof of request handling, or a legal obligation.

• Receive, assess, administer, and communicate about an application.
• Respond to enquiries and manage follow-up.
• Review AlForsan Committee applications and contact applicants about possible participation. Submission does not cause automatic selection or an automatic email.
• Operate the service, secure administrator accounts, prevent abuse, and investigate failures or incidents.
• Meet legal or regulatory obligations that apply to the program.

Who may access it

Authorized administrators access only the records and actions granted to their role, such as reviewing applications, following up enquiries, or managing email. User and role management, recovery, and global session security remain restricted to full Admins. We do not sell your data.

Data may be processed by the hosting provider selected by the deployment operator, PostgreSQL, ZeptoMail for email delivery, and monitoring/log services configured by the operator. The production operator must document the actual providers, locations, and agreements before launch.

Retention

• All applications are manually reviewed after 24 months without an update; applications are not automatically deleted based on their status or review tags.
• Committee applications are manually reviewed after 24 months of inactivity; reaching that period does not automatically delete them.
• Resolved contact messages: 12 months after the last update, then deletion. Messages marked as spam: 30 days.
• Email content linked to a deleted record is deleted with it. Security events are kept for 24 months, and non-content governance proof is kept for 7 years.
• Production policy limits encrypted backups to 35 days. The deployment operator must prove that lifecycle before launch; deletions propagate when a backup expires rather than by modifying historical backups.

Drafts on your device

An application draft is stored in this browser only if you explicitly choose it. It relies on your device/browser protection and is not independently encrypted, expires automatically after 24 hours, and is removed after submission. Do not enable saving on a shared device; you can clear the draft from the form at any time.

Your requests and choices

You may ask what data is held, request a readable copy, correct it, withdraw an application, or request deletion. Send the request through the contact page and include the reference if available. We verify identity before disclosure or deletion and may limit a request where necessary to protect another person or meet a legal duty, explaining the reason.

Security and changes

We use restricted administrator access, multi-factor authentication, encrypted transport in production, monitoring, and protected backups. No service can promise absolute security; a material incident is handled under the approved response and notification process.

We may update this notice when the form, processors, or policy changes. The revision date appears at the top of the page.