Privacy Policy

How Good Vibe Homes collects, uses, stores and deletes personal data across our website, our client and agent portals, and the messaging integrations we operate. Last updated 19 September 2026.

Who we are and what this policy covers

Good Vibe Homes ("Good Vibe", "we") is a real-estate brokerage based in Egypt. We operate the public website at goodvibehomes.org, a client portal and an agent portal, and a customer-relationship platform (the "Platform") that our team uses to manage inquiries, listings and conversations.

This policy covers all of them. It also covers the messaging integrations the Platform operates: when a business connects a WhatsApp Business account to the Platform through Meta, and when you write to a number that is connected to it.

Questions about this policy go to info@goodvibehomes.com.

Information we collect

Information you give us. When you send an inquiry about a property, use the contact form, request a viewing, ask us to list your property, or subscribe to updates, we store what you type: your name, phone number, e-mail address, your message, and the property you asked about. If you use the client portal we store a record of the access links we issued to you (not the link itself); if you are a member of a team using the Platform we store your name, e-mail address, role and login credentials. If you use the chat assistant on the website, the conversation is stored and a contact record is created from the details you enter; the assistant is rule-based and sends nothing to an AI provider, and your browser keeps a visitor key so the chat can resume.

Messages you send to a connected number. When you write to a WhatsApp business number that is connected to the Platform, Meta delivers the message to us and we store it so the business can reply: your phone number, the profile name you use on WhatsApp, the content of the message including any media, location or contact card you send, the time it was sent, and the delivery and read status of the replies. If you reached the business by tapping a Click-to-WhatsApp advertisement, Meta also sends a reference to that advertisement, which we store with your record so the business knows where you came from.

Information collected automatically. Team members who sign in to the agent portal receive a session cookie so they stay signed in; the client portal works from your access link and sets no cookie; the public website sets no advertising or analytics cookies and loads no tracking pixels. When you view a listing we record the event — which listing, and whether you tapped call or WhatsApp — with no identifier attached. Our e-mail system can record when an e-mail is opened or a link in it is clicked, together with the IP address and browser type; we do not currently use this. Our servers keep standard technical logs.

Data we receive from Meta when a business connects

A business connects its WhatsApp number to the Platform through Meta's Embedded Signup. When it does, Meta sends us, and we store:

the WhatsApp Business Account ID, the phone number ID, the display number and the verified business name;
the account's status, review status and currency, the number's messaging quality and the status notices Meta sends about it, and the review status of the business's message templates;
an access token that lets the Platform send and receive messages on that number, and a two-step-verification PIN the Platform registers for the number. Both are stored encrypted and are never shown to anyone.

Once connected, Meta sends us the customer messages described above, delivery and read receipts for messages the business sends, and, where the business keeps using the WhatsApp Business app on the same number, copies of the messages it sends from that app so the shared inbox stays complete.

When a business connects a number it also uses in the WhatsApp Business app, the Platform asks Meta to sync that app's contacts, and the business can ask Meta to share its chat history. Today the Platform does not read either into the inbox; the notifications Meta sends in response are kept in our processing queue. If the Platform starts using them, this policy will say so first.

How we use it

To answer your inquiry, arrange viewings, and share listings you asked about.
To run the shared inbox: route a conversation to the right member of the business's team, show its history, and send replies and WhatsApp template messages on the business's behalf.
To send service e-mails such as a portal access link, a viewing confirmation or a document we agreed to share.
To keep the service secure, investigate abuse, and meet legal obligations.
To improve the service, using aggregate counts rather than your identity.

Marketing is never sent to anyone marked "do not contact": if you ask not to be contacted we mark your record and the Platform refuses to send you marketing after that, while messages you request, such as a portal link, still reach you. Obtaining the opt-in Meta requires before a business sends you WhatsApp marketing is that business's responsibility, as our Terms say.

We do not sell personal data.

Storage and security

Data is stored on servers we control and is transferred over encrypted connections (TLS). Access tokens for connected Meta accounts are encrypted at rest with a key held outside the database. Access to the Platform is by role, and a team member sees only the channels and conversations they have been given access to.

Files you send over WhatsApp are stored in our own storage and served through access-controlled links that expire; they are not hot-linked from Meta. Images and documents a business uploads to the Platform are hosted on Cloudinary. Staff sessions expire, and administrative actions are logged.

How long we keep it

We keep your data for as long as it is needed for the purpose it was collected: an inquiry for as long as we are in contact about it, a conversation for as long as the business needs its history, an account for as long as it is active.

Records a team member deletes in the Platform go to a recycle bin and are purged automatically after 30 days. Records that document a transaction, such as a deal or an invoice, are kept for as long as accounting and tax law requires; when you ask for erasure, the personal details and notes in those records are removed and only the transaction remains.

Your rights

Under Egypt's Personal Data Protection Law you can ask us to:

tell you what personal data we hold about you and give you a copy of it;
correct data that is wrong or incomplete;
delete your data, subject to the retention explained above;
stop sending you marketing, or withdraw a consent you gave.

Write to info@goodvibehomes.com with the phone number or e-mail address you used with us. We will confirm it is you before acting, and we will tell you when the request is done.

Deleting your data, including data connected through Meta

You can ask us to delete your personal data, your account, and the data we hold because of a WhatsApp or other Meta connection: your messages and media received through a connected number, or, for a business, the connection records and access token we stored when it connected its WhatsApp Business account.

The full procedure — what to send us, how a request is handled, what is deleted, what must be kept and what happens to the Meta connection — is on our Data deletion page at goodvibehomes.org/data-deletion. No account is needed to read it.

Changes to this policy

When we change this policy we update the date at the top of the page. If a change affects how a connected Meta account or your messages are handled, we will describe it here before it takes effect.

Contact

For any question about your data, write to info@goodvibehomes.com