Privacy Policy
Learn what account, booking and space suggestion information Makank collects, why it is used, and how data from Google sign-in is handled.
Draft for review — operator identity and legal review pending: 2026-10-02
1. Who handles your information
Makank determines how personal information is used for platform accounts, booking requests, listings and administration. Our operator identity and privacy contact are on About & Contact. Independent venues are responsible for their own use of information received to fulfil bookings and for their on-site services.
2. Information we handle
When you contact us through the website, we store your messages, account identifier, display name, email and message timestamps to respond to your request. Conversations are available to you and administrators with support access. Do not send passwords, payment card details or sensitive documents. If you contact us on Instagram, Instagram processes that conversation under its own policies.
Account information includes your email, display name, contact or WhatsApp number, profile details and authentication identifiers. Owners also provide venue descriptions, locations, photos, prices, capacity and staff details. Authentication is managed through Supabase; we do not need your Google password.
Booking records include the customer’s contact details, selected venue and table or room, time, price, status and check-in information. Subscription records may include plan selection, payment references or evidence submitted for verification. Suggestions contain the space name, location and optional Instagram account you submit. Do not include private residential addresses or sensitive personal details.
Our infrastructure providers may process IP addresses, browser and device information, request times and security logs. The application also stores sign-in sessions, language and theme preferences, favourites, cached profile and marketplace data and temporary onboarding details in browser storage. When configured for this deployment, PostHog EU service receives anonymous page views and broad action categories for account sign-up, login, booking requests and owner saves. Events omit names, email addresses, phone numbers, passwords, authentication tokens, booking and venue IDs, and private database records; session recordings and automatic click capture are disabled. Analytics identifiers remain in page memory only.
3. Sign in with Google
If you choose Google sign-in, Google and Supabase provide authentication identifiers and the basic profile information authorized in the sign-in screen, such as your name, email and profile image. We use this to authenticate you, associate you with a Makank account and display your profile. The current sign-in integration does not request Gmail messages, Google Drive files, contacts or calendar access.
Google sign-in information is not used for advertising targeting or sold. It is shared with authentication and infrastructure providers as necessary to operate your account; a booking’s contact details are shared with the selected venue as described below. You can revoke Makank’s Google connection in your Google account settings. Revoking it does not automatically delete existing Makank records; use account deletion or contact us as well.
4. Purposes and legal grounds
We use information to create and secure accounts, send and manage booking requests, publish authorized listings and reviews, verify owner subscriptions, resolve support issues and detect misuse. Administrators use suggestion information to review demand and decide which venues to approach. We do not promise to contact or list every suggested venue.
Processing must have a lawful ground under the applicable law, such as consent where required, necessary steps to enter or perform an agreement, or compliance with a legal obligation. Accepting terms is not blanket consent for unrelated processing. Optional marketing or a new sensitive-data use requires a separate assessment and any required permission.
5. Sharing and public information
Your selected venue owner and authorized staff receive the booking details needed to respond and provide the service. Using a WhatsApp link opens an external service and may send the booking message you choose to share. WhatsApp, Google, Instagram and payment services operate under their own policies.
Venue listings, supplied business contact details, photos and published reviews can be visible to visitors and search engines. Suggestions are currently visible to platform administrators rather than published as customer listings. Hosting, authentication, database and storage providers process data to support the platform. We may disclose necessary information when lawfully required or to address fraud, security incidents or legal claims.
6. Providers and international processing
Cloudflare Pages hosts this Makank deployment; the existing Vercel production deployment remains available during migration. Supabase provides authentication, database and file storage. The configured Supabase project is in Ireland; providers and their subprocessors may process information in other countries. Google processes sign-in information under its own arrangements. This disclosure is not a representation that a regulatory transfer permit has been issued. Applicable Egyptian transfer requirements and provider contracts must be satisfied.
7. Browser storage and security
Browser storage helps keep you signed in and remembers choices or caches information. You can clear it through your browser; this can sign you out and remove local preferences. Shared-device users should sign out and clear local data. No optional advertising tracker was identified in the application code reviewed for this version; this does not exclude infrastructure logging or the external services you open.
We use access controls and authentication to restrict access to records. No online service can guarantee absolute security. Report suspected account misuse through our verified contact channel. Security incidents will be assessed and required notifications made under the applicable law.
8. Retention and deletion
We retain information for the purpose for which it is needed and applicable legal requirements, including booking support, payment reconciliation, dispute handling and security. Not every category has the same retention period. Account deletion does not necessarily remove records that must lawfully be retained, backups awaiting rotation or information held independently by a venue or external provider. Retained records must have restricted use.
9. Your choices and rights
Subject to the applicable law, you may request information about processing, access, correction, deletion and withdrawal of consent or objection where available. Edit your profile or use the account-deletion option where shown. For other requests, use the privacy contact on About & Contact. We may need proportionate identity verification to avoid disclosing information to the wrong person. We will respond within the applicable statutory deadlines and explain lawful restrictions.
You may also raise a complaint with the Egyptian Personal Data Protection Center or other competent authority. Withdrawing permission may prevent a feature that depends on it from working, but does not remove your mandatory rights. The service is not directed to children; notify us if a child’s information was submitted.
10. Updates
The version date appears above. We will update this notice when practices change and provide additional notice or request consent where required before a materially different use of personal information.
