1. Who we are
UltraInsight (supplychain.ultrateb.com) is operated by UltraTeb Tegara (الترا طب) (“UltraTeb”, “we”, “us”). We decide how and why the personal data described here is processed, and we are responsible for it.
This policy follows the principles of Egypt’s Personal Data Protection Law No. 151 of 2020: we collect personal data for specific, stated purposes, use only what those purposes need, keep it accurate and secure, keep it no longer than necessary, and respect your rights.
2. The data we collect
- Your account: name, work e-mail, mobile number, language, and when you accepted our Terms. Your password is held only as a secure hash by our sign-in service.
- Your organisation: its name in Arabic and English, type, governorate, city, size and tax registration number.
- E-invoice access: the Client ID and secrets of the UltraInsight ERP registration you create — stored encrypted.
- The e-invoices your organisation received: supplier names and tax numbers, items, quantities, prices and dates. These are business records, but they can occasionally contain personal data, such as a supplier trading under a person’s name or a patient’s name written on an invoice line.
- What you upload or write: stock count files, quote requests, sourcing requests and messages to suppliers, flags on invoice lines, and your conversations with the AI assistant.
- Your team: the e-mail addresses of colleagues you invite and, if you choose, your accountant’s e-mail address.
- How you found us: the advert or link that brought you (its campaign parameters, any Facebook or Google click identifier it carried, the referring website and the page you landed on).
- Technical data: your IP address and browser details in our security and server logs. To count visits to the landing page we keep a random visitor number in your browser, and store your IP address only as a one-way salted hash.
3. Why we use it
- To create and run your account and your organisation’s workspace — this is how we perform our agreement with you.
- To read your received e-invoices and produce your procurement view, AI analysis, savings estimates, stock insights and alerts — performing our agreement, with the consent you give when you connect.
- To help you finish signing up: when you sign up, our team receives your name, e-mail and phone number and may call you or message you on WhatsApp if you get stuck. You consent to this at sign-up and can ask us to stop at any time.
- To send the e-mails the Service needs (verification codes, password resets, invitations) and — unless you turn them off in Settings → Notifications — reminders, market alerts and the weekly stock e-mail.
- To measure our advertising and improve the Service, using aggregated sign-up statistics.
- To keep the Service secure, prevent abuse and meet our legal obligations.
We do not use your data for purposes incompatible with these, and we never sell it.
4. Your e-invoices: read-only
We connect to the Egyptian Tax Authority’s e-invoicing system with the credentials you give us only to search for and read the documents your organisation received. We never submit, reject or cancel any document. You can end our access at any time from Settings, or by regenerating the secrets of the UltraInsight ERP registration in the e-invoicing portal; we then delete the stored credentials.
5. AI processing
Invoice lines, stock files and assistant questions are processed by AI models through Amazon Bedrock, in the same AWS region as the rest of the Service. Under AWS’s terms for Amazon Bedrock, the content we send is not used to train the AI models and is not shared with the model providers.
AI results about your organisation are shown only to your organisation and to authorised UltraTeb staff running the Service. The product catalogue the AI builds — product names and categories, so that the same medicine is recognised everywhere — is shared across organisations, but it never reveals to another organisation what you bought, from whom or at what price.
7. UltraTeb is a supplier — conflict of interest
UltraTeb Tegara sells medical and laboratory supplies, so through UltraInsight it can see what your organisation pays its other suppliers. We use that information only to provide the Service to you and, when you ask for one or when we offer one, to prepare a quote. We never pass your prices, suppliers or quantities to anyone else. Access by UltraTeb staff to an organisation’s data is limited to the people who need it to run and support the Service, and every such access is recorded in a staff-access log.
8. Where your data is stored — transfer outside Egypt
The Service runs on Amazon Web Services in the United States, in the US-East (Northern Virginia) region, us-east-1. AI processing uses Amazon Bedrock in the same region. Your data is therefore transferred to, stored and processed outside Egypt.
We make this transfer with the consent you give when you sign up and when you connect your e-invoices, and we protect the data with encryption in transit (HTTPS), encryption of your e-invoicing credentials, strict separation between organisations, access controls and the contractual safeguards AWS provides. Egypt’s Personal Data Protection Law sets conditions for transfers outside Egypt; we apply its principles and will follow the requirements of the Personal Data Protection Center.
10. How long we keep it
- Account and organisation data: for as long as your account is active.
- E-invoicing credentials: until you disconnect or your organisation’s data is deleted.
- Sign-ups that were never completed: only as long as needed to help you finish and to measure our advertising — and you can ask us to delete them at any time.
- Security and server logs: for a limited period, to protect the Service.
When you ask us to delete your organisation’s data, we disconnect your e-invoices, delete your credentials and delete your organisation’s data from the Service within 30 days of confirming the request. Copies in backups are removed as those backups expire. Anonymous, aggregated statistics that cannot identify you or your organisation may be kept.
11. Your rights
Under Egypt’s Personal Data Protection Law you have the right to:
- know what personal data we hold about you and receive a copy of it;
- have it corrected or completed;
- have it deleted;
- restrict or object to its processing — including turning off non-essential e-mails at any time in Settings → Notifications;
- withdraw your consent at any time (this does not affect processing already done, and some features may stop working);
- be told about a breach of your personal data that affects you.
To use these rights, write to us from your account’s e-mail address or message us on WhatsApp (details below). We confirm every request with you before acting on it and answer without undue delay. If you are not satisfied with our answer, you can complain to Egypt’s Personal Data Protection Center.
12. Security
- All traffic to the Service uses HTTPS.
- Your e-invoicing credentials are encrypted and are never shown back on screen.
- Every request is checked against your organisation, so one organisation can never see another’s data.
- Staff access is restricted to the people who need it and is logged.
- Our access to your e-invoices is read-only.
No system is perfectly secure. If a breach affects your personal data, we will notify you and the competent authority as the law requires.
13. Patient data and children
The Service is built for procurement, not for patient records. Please do not upload files that identify patients. Where an invoice line itself contains a patient’s name, we use it only inside your organisation’s workspace and never share it; comparisons between organisations are always aggregated.
The Service is for organisations and their staff and is not intended for anyone under 18.
14. Changes to this policy
We may update this policy. The date at the top shows the current version, and we will tell you about important changes by e-mail or in the app before they take effect.
Contact us
UltraTeb Tegara (الترا طب) — UltraInsight
- support@supplychain.ultrateb.com
- +20 121 154 1707
- Address
- 19 Sayed Zakaria St., Sheraton, Cairo 11799, Egypt
This document is published in Arabic and English. If the two versions differ, the Arabic version prevails.