Who we are
Saif Abbas operates e7jz from Amman, Jordan. This policy covers the e7jz app and reservation service. For privacy questions or requests, contact [email protected].
Accounts, bookings and workspaces
You may browse published venues as a guest. Booking, saving places and applying to partner require an account. We process your name, Jordanian mobile number, account identifier and authentication records. Sign in with Apple or Google; phone verification uses an SMS code. Provider sign-in shares a provider identifier and any name or email the provider supplies, including an Apple private relay address. New social accounts also complete phone verification and provide a name. We do not receive your Apple or Google password.
We store reservations and appointments, selected venue and service, date and time, party size, optional notes, waitlist entries, booking status, attendance, ratings and venue reports. We calculate a reliability score from attendance and no-show records, and venue compliance information from booking outcomes and reports. Avoid entering sensitive medical or other unnecessary personal details in booking notes.
Saved places and account preferences support your account experience. Staff use personal accounts with venue invitations and authorized membership. Partner applications, business contact details, public venue content, photos, staff rosters, permissions and operational audit records support business administration. Published venue details and photos are public. Uploaded venue media uses public storage URLs, including while a listing change awaits review; do not upload confidential material. Signed-in venue-page views and interest in unavailable bookings can be recorded with your account identifier and time. Authorized merchants receive aggregate demand and view counts, not a list of individual viewers.
Location is your choice
Near you requests device location only after you choose that feature and allow the system permission. The device may provide a precise position, but nearby sorting and distance calculations run on your device. That position is held in app memory; using Near you alone does not send it to our server.
Nearby offers is a separate opt-in in Account → Notifications and is off by default. When enabled, the available position is rounded to a coarse grid before transmission. The server stores one latest coarse point for nearby venue offers, not a movement history. Turning Nearby offers off deletes that stored point. Location permission and marketing consent are separate controls. You can also revoke device location permission in system settings.
Messages, permissions and diagnostics
Verification SMS is delivered through Supabase, TextBee, our configured Android SMS gateway device and mobile carriers. These services process the destination number, message containing the one-time code and delivery metadata. Codes expire; delivery and security records are also used to prevent abuse and investigate failures.
Service notifications include booking and account updates. A device push token is linked to your account when registered. Push delivery uses Firebase and Apple services and system notification permission. Nearby marketing offers require the separate switch described above. You can control system notifications in device settings; in-app notices may still appear. Sign-out attempts to unregister this device’s token, and account deletion removes linked tokens.
Authorized staff can allow the camera to scan arrival QR codes. The scanner reads codes on the device; camera frames are not saved or uploaded. Managers can choose photos for venue listings. The app does not request your contacts or an advertising identifier.
Some builds enable Sentry error and performance reporting through build configuration. It is not a user-facing opt-in switch. Reports may contain error details, stack traces and technical app/device context. The app does not deliberately attach your profile identity to Sentry. Technical service logs may also contain request and security metadata.
Billing and recipients
For business subscriptions, we process billing contact details, provider customer and subscription identifiers, payment status, amount, currency, dates and any card brand/last four digits supplied by the provider. Full card numbers and security codes are entered with the hosted payment provider, not stored by e7jz.
Authorized venue staff can see the customer name, phone number, booking details and reliability information needed to manage reservations. Platform operators handle partner applications, support, moderation and business administration.
Our service providers include Supabase/AWS for backend, authentication and storage; Apple and Google for chosen sign-in services; TextBee and mobile networks for SMS; Firebase and Apple for push delivery; Resend for service email; Dodo Payments for new merchant billing and Paddle for existing Paddle subscriptions; and Sentry in builds with diagnostics enabled. Our websites use Cloudflare hosting and delivery. The public website also uses Cloudflare Web Analytics to measure page visits and loading performance, including page and referrer information, browser and device categories, and country-level summaries. This analytics service does not use analytics cookies or fingerprint visitors. Providers process information necessary for their service and may have separate legal obligations. We may disclose information where legally required.
We do not sell or rent personal data. The app does not use third-party advertising networks or cross-app advertising tracking. Nearby offers are venue promotions delivered within the e7jz service to users who opt in.
Storage, retention and security
Service data is stored in our Supabase project. Service providers may process data outside Jordan. Device and browser storage keep authentication sessions and preferences so you can stay signed in and retain your settings. Native authentication credentials use secure device storage; the web app relies on browser storage. Protect shared devices and sign out after use.
We keep account and booking history while needed to operate the service, resolve support issues and meet applicable obligations. The latest coarse-location row is replaced on update and removed when nearby-offer consent is withdrawn. Account deletion removes the linked live-service data described below. Provider logs, backups and records required for security, accounting or law can have separate retention. We do not promise a single deletion period for every third-party system or backup. Contact us for information about data relevant to a specific request.
We use encrypted network connections, authentication, role-based access and database access policies. No system guarantees absolute security.
Listing safety and moderation
Do not submit illegal, hateful, sexually explicit, threatening, abusive or misleading listing content. Public venue-content changes are submitted for operator review before publication. We may reject content, hide a listing or restrict access when content or conduct breaks these rules.
Use Report this listing in a venue’s menu to report inappropriate content. Signed-in reports include the venue, selected reason, optional details and reporting account identifier, and are reviewed by the platform operator. Guests can contact [email protected]. Give only information needed to explain the issue; do not include passwords or sensitive personal details.
Block this business hides the business’s listings on your current device for the current account, with a separate guest preference. Manage this under Account → Blocked businesses. Blocking does not cancel existing reservations; they remain available for history and cancellation. Saved places and blocked-business preferences are stored locally and may remain on another installation or browser until its storage is cleared.
Deleting your account
Open Account and use the deletion option shown. Eligible personal accounts can confirm permanent deletion with Delete account; this includes staff using a personal account without business ownership. This removes the authentication account, profile, linked reservations and ratings, waitlist entries, booking reports, venue-view records, notifications, stored location and push tokens. Authored listing reports and submitted content-review records are also removed. Approved published business content remains with the business.
When Account shows Request account deletion for a business owner or certain work accounts, submit that in-app request. Staff awaiting activation can also request deletion from account setup. The request shows its status, expected completion date and any action needed. We process these requests within 7 calendar days, reviewing work access, business ownership, upcoming bookings and subscription obligations. Requesting deletion does not cancel a subscription. When completed, work access and personal roster contact details are removed, along with linked partner applications and their notification snapshots. We send completion confirmation to a real registered email address when available.
Business records, billing records and security audit records that are required for accounting, security or legal obligations may remain for those purposes. Copies held by a venue or payment provider are subject to that recipient’s responsibilities. If you cannot access your account, contact [email protected]; we may need to verify your identity.
Your rights, children and updates
Contact [email protected] to request access or a copy of your data, correction, deletion, withdrawal of consent, restriction of processing or to raise an objection. We assess requests under applicable law and may verify identity before acting. You can also raise a concern with Jordan’s Personal Data Protection Unit at the Ministry of Digital Economy and Entrepreneurship.
The service is not directed to children under 16, and our terms require users creating an account to be at least 16. If you believe a child has provided data, contact us. This is an eligibility rule; the app does not collect a date of birth to verify age.
We update this policy when our practices change and show the revision date. Contact us about any part of the policy you do not understand.