Privacy Policy

Last updated: October 4, 2026

This policy explains what data Basyt collects when you use it, how we use it, who can see it, how long we keep it and your rights over it. We built the site to collect as little data as possible.

Contents

In short
Data we collect
How we use your data
What others can see
Artificial intelligence
Who processes your data
Cookies
How long we keep data
How we protect data
Your rights and choices
Children
Data outside your country
Changes to this policy
Contact

1. In short

Your data is the responsibility of Intalex Trading, which runs Basyt and is based in Doha, Qatar.
You log in with your mobile number only and never need a password. An email address is optional and used only for notifications.
Your number is shown to no one unless you choose to show it, and then only to logged-in users who tap the show-number button.
We do not sell your data, use it for advertising, or use third-party tracking or analytics tools.
We remove location and camera data from every photo you upload.
Your messages are private between you and the other person; our team sees them only if one of you reports the conversation.
We use AI to tidy, translate and check services, and explain below exactly what we send to it.

2. Data we collect

Account data:

Your mobile number and your account ID at the verification service.
Your display name if you add one, in Arabic, English or both, and its automatic translation into the other language.
Your settings, such as showing your number, and your account country derived from your number.
Your notification email if you add one, and whether it is confirmed.
When you created your account and last logged in.

What you publish:

Service texts, photos, prices, cities and categories.
How many times each service was viewed and its number was shown.
Your public comments on services, your private messages with the other person, and who you blocked.

Technical data:

Your IP address, source port and browser type when you log in, stored with your session.
Security records of events such as logins, publishing, editing, comments, messages and number views, with the IP address, source port, browser type and time, because the law may require us to provide them to the competent authorities.
Short-lived server logs needed to run the site and fix problems.

Approximate location:

We estimate your country and city from your IP address. We never ask for or access your precise location.
When you publish a service we record the IP's country and whether it goes through a proxy or a hosting server, to detect fake accounts.

3. How we use your data

To log you in and protect your account.
To show your services to customers in Arabic and English.
To show services in your country and city when you visit.
To check content and prevent fraud, abuse and duplicate listings.
To answer your questions and reports.
To comply with laws and lawful requests from competent authorities.

4. What others can see

Everyone: published services with their texts, photos, prices, cities and publish date, comments, your display name, your public ID next to your comments, and the year you joined.
Only the other person in a conversation: your messages and display name.
Logged-in users only, when they tap the show-number button: your mobile number, if you chose to show it.
No user can see your email address, IP address, approximate location or security records.

5. Artificial intelligence

We use the DeepSeek AI service, whose servers are in China. We send it only:

A service's text when you prepare or edit it, with the cities and price if you gave them.
Small copies of the service photos, to check them for contact details or inappropriate content.
Your display name, to translate it into the other language.
Searches the site cannot understand on its own, without any link to your account.
Public comments, to check them against the terms.
A message or comment when you tap translate, and messages that match fraud patterns, to check them.

We never send it your mobile number, email, IP address or any other account data.

7. Cookies

The site uses only three necessary cookies and no tracking or advertising cookies:

Session cookie: keeps you logged in, cannot be read by pages, and lasts 30 days from your last visit.
Country cookie: remembers the last country you browsed, kept for one year.
Theme cookie: remembers your choice of dark or light mode, kept for one year.

Google reCAPTCHA may set its own cookies on the login page only.

8. How long we keep data

Sessions: end after 30 days without use or 90 days at most, and are deleted a week later.
Publishing previews and photos that were never published: deleted after 24 hours.
Searches stored for the AI: deleted after 24 hours.
Email confirmation links: expire after 24 hours and are deleted after 7 days.
A service you delete: disappears from the site immediately and is erased with its photos after 30 days.
An expired service: stays in your account for 90 days so you can renew it; it then leaves your account and the site, and we keep its text and photos until you ask us to delete your account.
Security records: deleted after 12 months.
Comments and messages: kept until you delete the comment or their author deletes their account.
Comments refused by the checks: kept 90 days for the admins to review, then deleted.
Your account: kept until you ask us to delete it.

9. How we protect data

All connections to the site are encrypted.
We do not store session tokens themselves, only a hashed fingerprint, so they are useless even if the database leaks.
We re-process every photo you upload, removing location and camera data and any hidden content.
We remove phone numbers and links from service texts and display names.
We limit attempts to stop guessing and automated number collection, and only team members who need data for their work can access it.

10. Your rights and choices

Change your name, hide your number, and add, change or remove your notification email from the settings page.
Edit, pause or delete your services from My services.
Log out of all devices from the settings page.
Delete your comments, and block anyone from messaging you from the conversation options.
Ask for a copy of your data, a correction, or permanent deletion of your account by contacting us; we reply within 30 days.
The laws of your country may give you further rights, and we respect them.

11. Children

The site is for people aged 18 or over, and we do not knowingly collect data from anyone younger. If you know of an account belonging to a minor, tell us and we will delete it.

12. Data outside your country

The site's data and photos are stored on servers in Germany, and our providers may process your data on other servers outside your country, including DeepSeek's servers in China. Each provider receives only the minimum data it needs.

13. Changes to this policy

We may change this policy, update the date at the top of this page, and notify you on the site about any material change.

14. Contact

For any question about your data, or to ask for a copy of it or its deletion, contact us.

Email: [email protected]