Privacy Policy

Data Controller and Contact

Data controller: TopSystems (legal name: حسن مصطفي معوض حسن, Cairo, Egypt)

Contact email: support@merpa.me

If you have questions about this policy or wish to exercise your privacy rights, contact us at the address above.

Scope

This policy applies to personal data collected through our website and related online services. It does not apply to information collected offline or by third parties not controlled by us.

Information We Collect

We collect the following categories of information:

• Account and profile data: name, email address, username, profile details you provide when registering or updating your account.
• Contact data: messages you send via contact forms, support requests, and related correspondence.
• Payment and billing data: payment method identifiers and billing details when you purchase paid services. We do not store full card numbers; payment processing is handled by third-party payment processors.
• Technical data: IP address, browser type and version, device model, operating system, screen resolution, and other device identifiers.
• Usage data: pages visited, features used, timestamps, click and navigation data, error logs, and performance metrics.
• Cookies and tracking data: cookies, local storage, and similar technologies used to recognize your device and preferences.
• Third-party data: information you choose to provide via third-party integrations (for example, OAuth identity providers) and public profile information when you link accounts.

How We Use Your Information

We use personal data for the following purposes and legal bases:

Where required by law, we will obtain your consent before processing personal data for a specific purpose.

Cookies and Similar Technologies

We use cookies and similar technologies to operate the Service, remember preferences, analyze usage, and deliver relevant content. Cookies fall into these categories:

• Essential cookies: required for core functionality and security.
• Performance and analytics cookies: collect anonymous usage statistics to help us improve the Service.
• Functional cookies: remember preferences and settings.
• Advertising and targeting cookies: used by third parties to deliver relevant ads when permitted.

You can manage or disable cookies through your browser settings. Disabling certain cookies may affect site functionality.

Third-Party Services and Processors

We use third-party service providers to host the Service, process payments, analyze usage, send email, and provide other infrastructure and business services. These providers may process personal data on our behalf as data processors.

Examples of processor categories: hosting and infrastructure providers, analytics providers, email delivery services, payment processors, and customer support platforms.

We require processors to implement appropriate security measures and process data only as instructed by us.

Data Sharing and Disclosure

We do not sell personal data. We may disclose personal data in the following circumstances:

• To service providers and processors who perform services on our behalf.
• To comply with legal obligations, court orders, or government requests.
• To protect the rights, property, or safety of merpa.me, our users, or the public.
• In connection with a merger, acquisition, or sale of assets — users will be notified if their personal data is transferred as part of such a transaction.

International Data Transfers

Our servers and service providers may be located in multiple countries. When we transfer personal data across borders, we take steps to ensure appropriate safeguards are in place, such as standard contractual clauses or other lawful transfer mechanisms.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and purpose; for example:

• Account data: retained while account is active and for a reasonable period after account deletion for backup and legal compliance.
• Support and correspondence: retained for the period necessary to resolve issues and for recordkeeping.
• Analytics data: retained in aggregated or anonymized form; raw logs retained for a limited period for troubleshooting and security.

Security

We implement reasonable technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, and destruction. Measures include encryption in transit (HTTPS), access controls, and regular security reviews.

No method of transmission or storage is completely secure. If a data breach occurs that creates a risk to your rights and freedoms, we will notify affected users and regulators as required by law.

Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of personal data we hold about you.
• Correction: request correction of inaccurate or incomplete data.
• Deletion: request deletion of your personal data where permitted by law.
• Portability: request a machine-readable copy of certain data you provided.
• Restriction: request restriction of processing in certain circumstances.
• Objection: object to processing based on legitimate interests or direct marketing.
• Withdraw consent: where processing is based on consent, you may withdraw consent at any time without affecting processing prior to withdrawal.

To exercise these rights, contact us at support@merpa.me. We may ask for information to verify your identity before fulfilling requests. We will respond within the timeframes required by applicable law.

Children

Our Service is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected such data, contact us and we will take steps to delete it.

California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and related regulations, including the right to request disclosure of categories of personal data collected, sold, or disclosed for a business purpose, and the right to opt out of the sale of personal data. We do not sell personal data as defined under the CCPA.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy with a new effective date and, where appropriate, provide additional notice (for example, by email or prominent notice on the Service).

How to Contact Us

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact us:

• Email: support@merpa.me
• Website: https://merpa.me/