Privacy Policy

Information you provide directly

Name, email address, company or project name, what you need, budget band, timeline, and anything you write in a message. If you email or use WhatsApp, we receive whatever you send on those channels.

Website form data

The start-a-project form sends name, email, company, need, budget, timeline, and locale so we can reply. A hidden honeypot field is used only to reject automated spam; we do not use it as a personal profile.

Contact information

Email addresses, WhatsApp numbers you use to reach us, and any callback details you include. Write privacy requests to info@aglima.co.

Business and client information

Company names, roles, briefs, brand assets, campaign goals, and commercial terms you give us so we can evaluate or deliver work. Some of this is business information rather than consumer personal data; we still treat it as confidential client material.

Social media integration data

If an account is connected so we can publish, schedule, reply, or report, we may receive profile identifiers, handles, page or account names, granted scopes, and metadata the platform exposes for that connection.

OAuth and account-connection data

When you authorize Aglima (or a tool we operate for a client) through a platform OAuth or similar consent screen, we may receive access and refresh tokens, app-scoped user IDs, granted permission names, expiry times, and the email or name the provider includes in the token response. We use that material to maintain the connection you approved—not to scrape unrelated accounts.

Platform and API data

APIs may return posts, drafts, media, comments, insights, audience aggregates, ad-account structure, error logs, and webhook events, limited to the permissions you granted and the endpoints those permissions unlock. We do not claim access beyond those grants.

Technical, device, and browser information

Browser type, device class, language, viewport-related signals our host uses to serve pages, and similar request headers. We do not operate a separate device-fingerprinting product on the public site.

Cookies and similar technologies

The site is hosted on Vercel. Hosting and security may set strictly necessary cookies. Aglima stores a first-party consent record only after you make a choice. Vercel Analytics and Vercel Speed Insights load only if you allow Analytics. We do not currently install Meta Pixel, TikTok Pixel, Google Analytics, Google Ads, LinkedIn Insight, or X advertising tags on these pages. You can change or withdraw optional consent at any time with Cookie Preferences in the footer, or read the Cookie Policy.

Consent categories

• Strictly necessary: always on. Security, routing, language in the URL, form delivery, and storing your consent choice.
• Preferences: off until you allow them. No preference technologies are active today.
• Analytics: off until you allow them. Then Vercel Analytics and Vercel Speed Insights may load.
• Marketing: off until you allow them. No advertising pixels are installed today. Future Meta, TikTok, Google Ads, LinkedIn, or X tags would wait for this category.
• External media: off until you allow them. No third-party embeds are on the public pages today.

Global Privacy Control

If your browser sends a Global Privacy Control signal, optional categories stay off unless you later choose otherwise. We treat that signal as a privacy preference. We do not claim a specific legal effect in every country.

Analytics

If you allow Analytics, we use Vercel Analytics for aggregated page performance and selected events (for example, that an intake form was submitted, with locale and stated need—not a live dump of the whole form). These scripts do not load before that choice. This is traffic measurement, not a dossier.

Log data

Our host and content network record standard request logs: timestamp, path, status code, referrer when sent, and user-agent. Logs exist to operate, debug, and protect the site.

IP address

IP addresses are processed by hosting, security, and analytics infrastructure as part of delivering pages and reducing abuse. We do not publish a visitor IP list.

Usage information

Which pages are requested, approximate geography at a network level if the provider supplies it, and coarse interaction events we choose to measure. We do not sell usage graphs.

Marketing and campaign attribution

If you arrive from a campaign, the URL may carry source information. We may see that in logs or form context. We do not currently run an independent ads-conversion pixel on this site beyond host analytics.

UTM parameters

utm_source, utm_medium, utm_campaign, and similar query parameters are part of the URL you request. Servers and analytics may record them with the visit. They are not a hidden profile by themselves.

Social media account information

Public Aglima profiles (for example @AglimaHQ) are operated on each platform under that platform’s terms. If you interact with those profiles, that platform—not this privacy policy—primarily governs that interaction. If you later connect an account to Aglima tools, the integration sections of this policy apply.

Content submitted for scheduling or publishing

Captions, creative files, targeting instructions, calendars, and approval notes you send so we can publish on a connected account. That content is processed to deliver the work you asked for and may be stored with the processors named below.

Information received from third-party platforms

TikTok, Meta (including Facebook, Instagram, and WhatsApp Business where connected), X, LinkedIn, Google, Apple, and similar providers may send us data their APIs expose after consent. The exact fields follow that provider’s current API and your grants. We process that data to operate the connection, publish or schedule what you asked, measure delivery, and troubleshoot failures—not to resell audience lists.

Operational and legal purposes for processing

We process information to respond to inquiries, take steps toward a contract, perform a signed engagement, operate hosting and security, keep records we are required to keep under Egypt law, and handle rights requests. Where a platform requires consent for an OAuth grant, that consent is the basis for that connection.

Service delivery

Strategy, creative, media, measurement, and related client work, including drafting and publishing content you supplied.

Account and integration operation

Maintaining OAuth connections, refreshing tokens when the provider allows, routing posts, and recording delivery status.

Communications

Replies to intake, project email, and WhatsApp threads you start or join.

Marketing

We may follow up on a conversation you started. We do not currently operate a bulk email newsletter from this website. You can ask us to stop outreach by writing to the contact below.

Analytics and performance

Understanding which public pages load, whether intake arrives, and how to keep the site reliable.

Security and abuse prevention

Rate limits, honeypots, firewalls, and log review to reduce spam, fraud, and attacks. This is operational security, not a claimed audit certification.

Compliance

Meeting Egypt legal obligations, responding to lawful requests, and following platform developer rules that apply to data those platforms issued to us.

Service providers and processors

Vendors process information on our instructions to host pages, deliver email, accept forms, measure traffic, and—when you use them—publish to social platforms. They may only use that information to provide their service to us.

Hosting and infrastructure

The public website is served by Vercel. Cloudflare sits in front as DNS and content network. Those providers necessarily see request data required to deliver HTTPS pages.

Customer relationship tools

Inquiry and client records may be stored in a customer-relationship system so we can reply and manage work. We describe that category here rather than publishing internal administration hostnames.

Automation and integration tools

Routing a lead or a publish job may pass through automation software. We do not document internal workflow URLs on this public page.

Social media platforms

Content and tokens go to the platform you authorized (TikTok, Meta products, X, LinkedIn, Google, Apple, YouTube, and others as connected). Those companies process data under their own terms and privacy policies.

Analytics providers

Vercel Analytics, operated with our Vercel hosting, and only after Analytics consent. We do not currently embed Google Analytics or Meta Pixel on the public marketing pages.

Professional advisers

Lawyers, accountants, or similar advisers may see information if needed to advise Aglima, under confidentiality duties that apply to them.

Legal disclosure

We may disclose information if required by law, regulation, legal process, or to protect the rights, safety, or property of Aglima, our clients, or others.

Business transfers

If Aglima LLC is involved in a merger, acquisition, or asset sale, information may transfer as part of that transaction, still subject to this policy or a successor notice.

Access

You may ask whether we hold personal data about you and for a copy of what we can reasonably locate.

Correction

You may ask us to correct inaccurate contact or account details we keep.

Deletion

You may ask us to delete personal data we hold, subject to legal retention. Deleting a social post that already went live on a platform must also be done with that platform’s tools.

Restriction and objection

Where applicable law provides, you may object to certain processing or ask us to restrict it while a dispute is reviewed.

Withdrawal of consent

Where processing is based on consent (including an OAuth grant), you may withdraw it. Withdrawal does not undo publishing that already occurred. Revoke the app in the platform settings and tell us if you also want Aglima copies removed.

Marketing opt-out

Ask info@aglima.co to stop follow-up that is not required to deliver work you still want.

Cookie controls

Use Cookie Preferences in the footer to accept, reject, or change optional categories. The Cookie Policy at /cookies describes what is actually in use. You can also block or clear site data in your browser. Withdrawing optional consent stops future optional scripts from Aglima-controlled pages; we cannot remotely erase cookies already set by unrelated third-party domains when the browser prevents it.

Disconnecting and revoking platform access

• TikTok: TikTok app settings → authorized apps → revoke Aglima (or the named app), then email us to delete residual copies.
• Meta (Facebook, Instagram, WhatsApp Business): Facebook Settings & privacy → Settings → Apps and websites → remove the app, optionally send a data-deletion request, then email us.
• X: X Settings → Security and account access → Apps and sessions → revoke access, then email us.
• LinkedIn: LinkedIn Settings → Data privacy → Permitted services → remove the app, then email us.
• Google: Google Account → Security → Third-party access → remove access, then email us.
• Apple: Apple ID settings → Sign in with Apple → stop using the app, then email us.