Last updated: 22 September 2026 — This is an initial draft pending legal review.
1. Who we are
AI Arab Academy (aiarabacademy.com) is a training academy specialising in applied artificial intelligence, operated by AR TMC. This policy explains what data we collect about you, why, and what rights you have over it.
2. What we collect
- Course registration data: full name, email address, phone number (optional), and the currency you choose to pay in.
- Account data: username and password. Passwords are stored hashed and cannot be read by anyone, including us.
- Payment proof: the image or file of your bank transfer or InstaPay receipt that you upload to confirm a booking.
- Public testimonials (Sanad): text, audio or video you submit voluntarily, together with your name, title and photo if you add them. Published publicly only with your explicit consent, and withdrawable at any time.
- Course evaluation (Meqyas): fully anonymous. In an anonymous session, your name and email are never stored alongside your answers — anonymity is enforced server-side, not merely hidden in the interface.
- Technical data: IP address — stored hashed and used only to prevent abuse — plus browser type and visit time.
- Cookies: session, login and language-preference cookies. We do not use third-party advertising trackers.
3. Why we collect it
- Performing the contract: enrolling you, sending session links, tracking attendance, and issuing your certificate.
- Your consent: publishing your public testimonial, and emailing you about new courses (every message carries an unsubscribe link).
- Legitimate interest: protecting the site from abuse and automated sign-ups, and improving programme quality.
- Legal obligation: retaining financial records for the period the law requires.
4. Who we share it with
We share only the minimum necessary with: our hosting provider, our email delivery provider, and the live-streaming platform used for sessions. We do not sell, rent, or share your data with any third party for marketing purposes.
5. Retention
- Account and registration data: for as long as your account is active, then two years after last activity.
- Payment proofs and financial records: five years, to meet accounting requirements.
- Issued certificates: indefinitely, since they are a record you are entitled to prove at any time.
- Anonymous evaluation results: indefinitely, since they do not identify anyone.
6. Your rights
You have the right to access your data, correct it, request its deletion, withdraw consent at any time, object to marketing messages, and obtain a portable copy of your data.
Important note: when you request deletion, your identity is erased from evaluation results while the score remains anonymous, so that reports issued before your request stay accurate.
7. Security
We use encrypted connections (HTTPS) across the site, store passwords hashed, rate-limit repeated login attempts, and review access permissions periodically. No system is 100% secure, and we commit to notifying you without undue delay of any breach affecting your data.
8. Children
Our services are not directed at anyone under 16, and we do not knowingly collect their data. If you believe a child has provided us with data, contact us and we will delete it promptly.
9. Changes to this policy
We may update this policy. Any material change will be notified to your registered email before it takes effect.
10. Contact us
For any request concerning your data: admin@aiarabacademy.com or via our contact page.