Privacy Policy

2. Information we collect

We collect information you provide and data generated when you use the Platform:

• Account data: name, email address, and a hashed password. We also store whether your email has been verified.
• Learning data: courses in your cart, purchase orders, enrollments, and lesson progress (including completion status).
• Course content metadata: titles, descriptions, and media associated with courses you access (hosted on our servers or via Bunny.net Storage and Bunny Stream when configured).
• Payment-related data: when you pay through Stripe Checkout, Stripe processes your payment. We receive confirmation, amounts, and course identifiers linked to your order. We do not store full credit or debit card numbers on our servers.
• Communications: if you contact us via WhatsApp, phone, Instagram, or email, we keep the information you send to respond to you.
• Technical data: our hosting providers may log IP address, browser type, device information, and request timestamps for security and reliability.

3. How we use your information

• Create and manage your account and authenticate sign-in.
• Verify your email before granting access to the cart, dashboard, and paid lessons.
• Process purchases, grant course access, and maintain your learning progress.
• Deliver course videos and downloadable materials you are entitled to view.
• Send transactional emails (for example email verification and password reset) via Resend when configured.
• Provide customer support and respond to refund or access requests.
• Protect the Platform against fraud, abuse, and unauthorized access.
• Improve our courses, catalog, and user experience.

4. Legal bases for processing

Depending on your location, we rely on one or more of the following: performance of a contract (providing the courses you purchase), legitimate interests (security, analytics, service improvement), compliance with legal obligations, and your consent where required (for example optional marketing, if we offer it in the future).

5. How we share information

We do not sell your personal information. We share data only with service providers that help us run the Platform, under contracts that require them to protect your data:

• Stripe — payment processing and checkout.
• Bunny.net — media storage and video streaming for course content when enabled.
• Resend — transactional email delivery.
• Hosting providers (such as Vercel and Render) — application hosting, databases, and infrastructure logs.
• Authorities — when required by applicable law or to protect our rights, users, or the public.

6. Data retention

We keep account, order, and enrollment records for as long as your account is active and for a reasonable period afterward to comply with law, resolve disputes, and enforce our agreements. You may request deletion of your account subject to legal and operational limits (for example we may retain order records for accounting).

7. Security

We use industry-standard measures such as hashed passwords, HTTPS, and access controls for admin functions. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict processing of your personal data, and to object to certain processing or request portability. To exercise these rights, contact us using the details in Section 13. We will respond within a reasonable time.

9. Cookies and similar technologies

• Authentication cookies — to keep you signed in and secure your session (NextAuth / Auth.js).
• Locale preference — a cookie stores your language choice (English or Arabic) when you switch languages.
• We do not use third-party advertising cookies on the learning Platform.

10. Children

The Platform is not directed at children under 16. You must not register or purchase if you are under the minimum age required in your country to enter into a binding agreement. If you believe a child has provided us data, contact us and we will take appropriate steps.

11. International transfers

Your data may be processed in countries where we or our providers operate (including the United States and the European Union, depending on provider regions). We take steps to ensure appropriate safeguards where required by law.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated date. Continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact us

For privacy questions or requests, reach us through:

• WhatsApp: +20 10 55050411
• Phone: +90 551 163 4863 or +20 10 55050411
• Instagram: @gadaou.ai