1. Introduction

At HiBayt, we take your privacy seriously. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the HiBayt platform, including the Management Panel, Residents App, and Management App (collectively, the "Service").

HiBayt is registered in Iraq, with its principal office in Baghdad, Iraq. By using the Service, you acknowledge that you have read and understood this Privacy Policy.

2. Who This Policy Applies To

This Privacy Policy applies to all users of the HiBayt platform, including:

• Subscribing Organizations: Community management companies, sales agencies, and real estate developers who subscribe to HiBayt to manage their residential communities.

• Residents: Individuals who use the Residents App to access community services, submit requests, and communicate with management.

• Staff Users: Field staff and operational team members who use the Management App to carry out tasks assigned by their community management.

3. Information We Collect

The type of information we collect depends on how you interact with the Service and which role you hold within the platform.

3.1. Resident Information

When a resident account is created — either by the Subscribing Organization or through an invitation from another resident — the following information may be collected:

• Full name

• Phone number

• Email address (optional)

• Residential unit details (building, unit number, community)

This information is provided and managed by the Subscribing Organization. It is used solely to connect residents with their community and enable access to community services through the app.

3.2. Staff User Information

When a staff account is created by the Subscribing Organization, the following information may be collected:

• Full name

• Phone number

• Email address

• Location data (collected only during attendance check-in)

• Position and HR-related details as entered by the Subscribing Organization

Staff HR details, including position and other employment-related information, belong entirely to the Subscribing Organization. HiBayt does not use this data for any purpose beyond enabling the platform's functionality for community management operations.

3.3. User-Generated Content

When using the Service, residents and staff may submit content such as tickets, comments, posts, and photos. This content is directed to and managed by the Subscribing Organization. HiBayt does not access, review, or use this content.

4. How We Use Your Information

HiBayt uses the collected information strictly to provide and maintain the Service. Specifically, we use your information to:

• Create and manage user accounts within the platform.

• Connect residents and staff to their respective residential communities.

• Enable communication between residents, staff, and community management.

• Facilitate operational features such as attendance tracking, task management, and service requests.

• Send important notifications related to your community and account.

We do not use your personal information for marketing, advertising, profiling, or any purpose unrelated to the core functionality of the Service.

5. Data Ownership and Access

All community data — including resident information, staff details, unit data, and user-generated content — belongs to the Subscribing Organization. HiBayt acts as a service provider and data processor, not a data owner.

HiBayt does not access, review, or use community data for its own purposes. Each Subscribing Organization's data is isolated and private, accessible only to authorized users within that organization.

6. Data Sharing

HiBayt does not sell, rent, trade, or share your personal information with any third party. Your data remains private and is accessible only within the context of your residential community as managed by the Subscribing Organization.

We may only disclose information if required to do so by law or in response to a valid legal request from a governmental authority.

7. Third-Party Services

To provide a reliable and secure Service, HiBayt uses trusted third-party service providers for essential functions such as cloud hosting, push notifications, and infrastructure. These providers are carefully selected and are bound by their own privacy and security standards.

These third-party services only process data as necessary to support the operation of the HiBayt platform. We do not share your personal data with third parties for their own independent use.

8. Data Storage and Security

Your data is stored securely on our cloud infrastructure. We implement industry-standard security measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

While we take every reasonable precaution to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security, but we are committed to safeguarding your information to the best of our ability.

9. Location Data

HiBayt collects location data only from staff users, and only at the time of attendance check-in through the Management App. Location data is not collected continuously or in the background. This data is used solely to verify attendance and is accessible only to the Subscribing Organization.

We do not collect location data from residents at any time.

10. Children's Privacy

HiBayt is designed for use by residents and staff of residential communities. The Service is not intended for use by children under the age of 13 without the supervision and consent of a parent or guardian. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

11. Your Rights

As a user of HiBayt, you have the right to:

• Access your data: You can request information about the personal data we hold about you.

• Correct your data: You can request that we update or correct inaccurate information. For residents and staff, data corrections are typically handled through your community management.

• Request deletion: You can request the deletion of your personal data. Please note that since your account is managed by the Subscribing Organization, deletion requests may need to be coordinated with your community management.

To exercise any of these rights, please contact your community management or reach out to us directly using the contact information provided below.

12. Data Retention

HiBayt retains your personal data for as long as your account is active and as long as the Subscribing Organization maintains an active subscription with HiBayt. Upon termination of a subscription, data retention and deletion will be handled in accordance with the terms of the agreement between HiBayt and the Subscribing Organization.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make changes, we will update the effective date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please contact us at support@hibayt.com