Privacy Policy

1. Information We Collect

We collect information that you directly provide to us, as well as automatic data necessary to deliver online coursework and maintain account security:

• Account Credentials: Full name, email address, password hash, and WhatsApp/phone number provided during account registration.
• Enrollment & Progress Data: Selected courses, batch cohort schedules, lesson completions, quiz results, assignment uploads, and verified certificate records.
• Communications: Inquiries sent via our contact forms, support emails, or WhatsApp admission helpline.
• Technical Logs: IP address, device type, browser user-agent, and timestamps used solely for rate limiting, brute-force security defense, and session management.

2. How We Use Your Information

We use the information we collect strictly to deliver and improve our educational services, including:

• Providing access to student portals, course videos, assignment feedback, and live session links.
• Sending critical notifications such as class schedule reminders, assignment deadlines, and account password reset links.
• Issuing, verifying, and hosting official digital course certificates.
• Preventing fraudulent access, account sharing, and brute-force intrusion attacks.
• Responding to your student support inquiries and admissions questions.

3. Cookies & Session Storage

We use cookies and browser local storage strictly for essential platform functionality:

You can control or delete cookies through your browser settings, though clearing authentication cookies will require you to log in again.

4. Third-Party Sharing & Disclosure

We do not sell student data. We only share information with reputable third-party service providers when strictly necessary to operate the academy:

• Cloud Infrastructure: Secure database storage hosted on MongoDB Atlas with end-to-end transport encryption.
• Email & Notification Services: Automated transactional email providers (e.g. password resets, verification emails).
• Legal Compliance: If required by law, subpoena, or lawful request from government authorities in Pakistan.

5. Data Security Measures

We implement robust technical and organizational security protocols to protect your personal data against unauthorized access, loss, or alteration:

• Encryption in Transit: All web traffic is encrypted via modern Transport Layer Security (HTTPS / SSL).
• Password Hashing: Passwords are never stored in plain text; they are hashed using secure salted bcrypt algorithms.
• Brute Force Protection: Automated account lockouts (15 minutes) and API rate-limiting prevent unauthorized credential testing.
• Role-Based Access: Only authorized administrative and instructional staff have permission to review student submissions.

6. Data Retention

We retain personal data as long as your account remains active or as needed to maintain your verified certificates and educational records. If you wish to delete your account or erase your data, you may request account deletion at any time.

7. Your Rights & Account Control

You have full control over your personal information:

• Access & Edit: Update your profile name, password, or contact information via your student dashboard.
• Account Erasure: Request permanent deletion of your account and associated submission history.
• Communication Preferences: Opt out of promotional newsletters while retaining critical class notifications.

8. Privacy Inquiries & Contact

For any privacy-related questions, data access requests, or policy inquiries, please contact our data team: