Privacy notice

1. Who is responsible

Fekra is an independently operated creative platform based in Egypt.

For service, privacy or refund requests, email info@fekra.design.

This notice covers Fekra's website and creative platform at offbeat-hub.com. Fekra is responsible for the personal information used to administer the service. When an agency supplies personal information in its own briefs or other content, that agency is responsible for ensuring it has permission and a lawful basis to provide it to Fekra.

2. Information we handle

• Account and workspace details: name, email address, password hash, account role, agency membership, invitations and account preferences.
• Creative content: briefs, prompts, chat messages, uploaded logos, key visuals, reference images, documents, brand profiles, generated images and text, presentations, saved revisions and sharing choices. Voice input is processed for transcription when you use that feature.
• Billing and usage records: plan and subscription status, billing periods, credit grants and deductions, generation costs, payment references, transaction amounts, tax amounts, refunds and payment events received from Paddle. Card details entered into Paddle checkout are handled by Paddle and its payment partners; Fekra does not receive your full card number or security code.
• Technical and support information: request and error logs, generation status, timestamps, browser and connection information such as IP addresses, and the information you provide when contacting support.

3. Why we use it

We use information to create and secure accounts, carry out requested AI tasks, save and display work, provide collaboration and sharing, administer payments and usage limits, resolve errors, respond to support requests and prevent misuse. We also retain records needed for legal obligations and to establish or defend legal claims.

Where a law requires us to identify a legal basis, these purposes rely on performing our contract with you, compliance with legal obligations, and legitimate interests in operating and securing the service, balanced against your rights. Where consent is required for an optional activity, we will ask for it separately. You may withdraw that consent without affecting earlier lawful processing.

4. AI providers and other recipients

Generating or editing content requires sending the relevant instructions, conversation context and reference material to the AI provider configured for that task. We use external AI service providers to process these requests. Routing can differ by feature and by Standard or SuperSmart mode, and a task can involve more than one provider. Provider retention and processing practices depend on the service and configuration in use. Contact us if you need details for a particular task before supplying confidential or personal information.

Hosting and infrastructure providers process information needed to run the website. Authorized administrators may access relevant records for operation, support, security and billing. We may disclose information when required by law or necessary to protect legal rights.

When cloud file storage is enabled, Cloudflare R2 stores uploaded and generated files for Fekra. Customer files are kept in private storage and delivered through the platform's access controls. Existing files may remain on the hosting server during migration, and retained copies may remain for recovery.

Paddle separately handles checkout, tax, fraud prevention and transaction support under its Privacy notice. We exchange customer, purchase and subscription identifiers and payment status with Paddle so that purchased access and credits can be applied to the correct account.

When account email is enabled, Resend processes recipient email addresses and message content to deliver email verification, password recovery, welcome messages, purchase confirmations, subscription updates and renewal reminders. We retain delivery records to troubleshoot sending and suppress addresses that bounce or report spam. These account notifications do not enroll you in marketing campaigns.

When you share content with a campaign, workspace or presentation link, the intended recipients can access that content according to the sharing feature. Links can be forwarded by recipients. Do not include sensitive information in material intended for public sharing. Third-party websites and optional integrations have their own privacy practices.

5. Cookies, local storage and external resources

Fekra uses authentication cookies to keep you signed in, anti-forgery protection for forms and session cookies for features such as account connections. Browser storage remembers interface preferences such as your chosen color theme. Blocking necessary cookies may prevent login or other essential functions.

When enabled, Cloudflare Turnstile checks registration, account-email requests and repeated failed logins for automated abuse. Cloudflare processes browser and connection information for these checks; Fekra validates the result on its server. See Cloudflare’s privacy policy.

If you select Remember me, your sign-in cookie can last up to 30 days. Otherwise, sign-in uses a browser-session cookie with an eight-hour server expiry. You can sign out on a shared device.

The website loads typography from Google Fonts, which can receive connection information when the font resources are requested. Paddle checkout loads Paddle's resources when used and may set cookies or use similar technologies under its own notice. The current Fekra pages do not include advertising tracking tags. Any future non-essential tracking requiring consent will need a separate consent mechanism.

6. Storage, retention and international processing

Account, billing and generation records are stored in the service database; uploaded and generated files are stored on the hosting infrastructure. Processing by hosting, AI and payment providers may take place outside Egypt and outside your country of residence. Where applicable law requires safeguards for international transfers, those requirements apply to our use of these services.

We keep account details and saved work for as long as needed to provide your account and the features you use. Billing, usage and security records may need to remain longer for accounting, fraud prevention, disputes or legal obligations. Retention depends on the type of record and its purpose; we do not promise that deleting an item from the interface immediately removes every related log, provider record or backup.

You may request deletion or account closure using the contact below. We will explain any records that must be retained and the reason. Where possible, retained records are limited to what is needed for that purpose.

7. Security and your choices

We use account authentication, access controls and other technical measures to protect the service. No online service can guarantee complete security. Keep passwords private, manage agency memberships carefully, and upload only information that you are authorized to send to the service and its providers.

Depending on the law that applies to you, you may have rights to access, correct, delete or obtain a copy of your personal information, restrict or object to processing, and withdraw consent where processing relies on it. Send requests to info@fekra.design, preferably from your account email. We may verify your identity to protect your information. We will respond within the period required by applicable law and explain any lawful limitations. You may also complain to the relevant data-protection authority.

For information controlled by your agency, we may need to coordinate with the agency owner. For Paddle's own payment records, use the privacy contact and request channels in Paddle's notice. Requesting deletion from Fekra does not itself cancel an active Paddle subscription; cancel renewal in Billing & credits or through Paddle as well.

8. Children and changes to this notice

Fekra is intended for adults and is not offered to children under 18. Contact us if you believe a child has supplied personal information. We may update this notice when our practices change, display the revised date above, and communicate material changes where required.