Privacy Policy

This Privacy Policy ("Policy") explains how BitCourses ("Platform", "we", "us") collects, uses, and protects personal information when you use our website, applications, and digital learning services. We are committed to respecting your privacy and processing your data transparently and responsibly. In the Hashemite Kingdom of Jordan, data protection and privacy are governed by applicable national legislation, including laws relating to electronic transactions, consumer protection, and related regulations. Although Jordan does not currently apply the EU GDPR as domestic law, we adopt principles of accountability, data minimization, purpose limitation, and reasonable security as the foundation for our services. By using the Platform, you acknowledge that you have read and understood this Policy. If you do not agree with any part of it, please discontinue use and contact us before creating an account or making purchases.

The data controller and operator of the Platform is: Mntad Software Solutions Establishment Brand: BitCourses National Establishment No.: 101057860 Tax No.: 15089568 Address: Amman, Jordan Phone: +962 7 8241 8783 Legal email: legal@bitcourses.net Privacy email: privacy@bitcourses.net Website: https://bitcourses.net We determine the purposes and means of processing personal data relating to BitCourses services and appoint service providers (processors) where necessary under contracts that impose confidentiality and security obligations. For questions about how we process your data or to exercise your rights, contact us at privacy@bitcourses.net.

We may collect the following categories of data depending on how you use the Platform: • Account data: name, email, phone number, username, and password (stored as a hashed value, never in plain text). • Google OAuth sign-in: basic profile information provided by Google (such as name, email, and profile photo where available), according to permissions you approve. • Profile completion: Arabic name, learner profiles, learning preferences, and optional information you choose to provide. • Purchase and billing: order details, amounts, currency, payment method metadata (without storing full card details when using an external payment provider), transaction history, invoices, and enrollment or subscription status. • Usage and progress: enrolled courses, completion percentage, quiz attempts, certificates, in-platform activity logs, device type, operating system, browser, IP address, and access timestamps. • Support: ticket content, correspondence, attachments, and chat history with our support team. • Student verification: documents or information you submit to prove student eligibility or program-specific requirements, only where explicitly requested. • Referrals and Bits: referral codes, Bits balance, reward or redemption history, and data needed for fraud prevention. • Cookies: session identifiers, language and appearance preferences, and aggregated usage metrics when analytics tools are enabled. • Instructor roster visibility: for instructors assigned to a course in which you are enrolled, your phone number may be visible to those instructors only for educational and administrative communication—not for general marketing. We do not intentionally collect additional sensitive data unless legally or operationally necessary, and we will request explicit consent or submission where required.

We collect data from the following sources: • Directly from you: when you create an account, complete your profile, make purchases, upload documents, contact support, or change settings. • Automatically: when you browse the Platform or use the app, including server logs, cookies, and session identifiers. • From OAuth providers: when you choose to sign in with Google or another supported third-party provider in the future. • From payment providers: payment confirmations, transaction status, and reference identifiers without retaining full card data when using an external gateway. • From instructors or operational teams: when managing courses, workshops, or verification programs within defined permissions. • From operational partners: email, SMS, hosting, analytics, or anti-fraud services, under our instructions and processing agreements. We request only data necessary to provide the service or comply with law. You may withhold optional data, understanding that some features may be limited.

We use personal data for the following purposes: • Account creation, authentication, and session management. • Delivering purchased courses, workshops, paths, subscriptions, and digital content. • Tracking progress, issuing certificates, and managing learner profiles. • Processing payments, issuing invoices, and handling refunds under our policies. • Providing technical support and responding to inquiries. • Verifying student eligibility or special programs when requested. • Managing referral and Bits programs and preventing abuse. • Securing the Platform, detecting fraud, and monitoring Terms of Use violations. • Improving user experience, fixing errors, and conducting aggregated analytics. • Sending essential service notices (confirmations, course updates, security alerts). • Sending marketing communications with your consent, with opt-out available at any time. • Complying with legal obligations and responding to competent authority requests as required by law. We will not use your data for purposes incompatible with this Policy without notice or consent where required.

Depending on context, we rely on one or more of the following bases: • Contract performance: to deliver services you purchased or enrolled in. • Consent: for marketing communications, certain non-essential cookies, or optional document uploads. • Legitimate interests: to secure the Platform, prevent fraud, improve services, and manage the user relationship, balanced against your rights. • Legal obligation: to retain accounting or tax records or respond to valid legal requests. Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. We may continue processing certain data where necessary to perform an existing contract or comply with law.

We do not sell your personal data and do not rent it to third parties for their independent marketing purposes. We may share data with: • Service providers (processors): hosting, CDN, email, SMS, payment gateways, analytics, support, and security tools—under contracts that limit use and impose confidentiality and security obligations. • Assigned instructors: limited data (such as name, email, and phone for students enrolled in their courses) for educational and administrative communication only. • Legal authorities: where required by law, valid court order, or to protect our rights or user safety. • Corporate transactions: in merger, acquisition, or restructuring, with continued data protection under this Policy or advance notice where required. We require processors to handle data only on our instructions and not for their own purposes.

Your data may be stored or processed on servers or with service providers outside Jordan (such as cloud hosting, CDN, OAuth, or payment providers). For international transfers, we take reasonable steps to ensure an appropriate level of protection, including: • Selecting providers with recognized security standards. • Using data processing agreements and contractual restrictions. • Encrypting data in transit (TLS) where applicable. • Minimizing transferred data to what is necessary for operations. By using the Platform, you acknowledge that some processing may occur outside your country of residence. For questions about transfer safeguards, contact privacy@bitcourses.net.

We retain data only as long as necessary for the purposes described in this Policy or as required by law: • Active account data: for the life of the account, then for a limited period after closure to handle disputes or legal obligations. • Transaction and billing records: per applicable accounting and tax requirements (typically several years). • Support records: for a reasonable period to ensure service quality and resolve disputes. • Student verification documents: until verification purpose ends or per program requirements, then deleted or anonymized where possible. • Security and fraud logs: as long as needed for investigation and prevention. • Cookies: according to each cookie's duration as described in the Cookies section. When no longer needed, we securely delete or anonymize data unless law prevents us from doing so.

We implement reasonable technical and organizational measures to protect data, including but not limited to: • Password hashing using secure algorithms. • Data transmission over HTTPS/TLS. • Internal access controls based on least privilege. • Monitoring of core systems and security logs. • Periodic review of sensitive vendors. • Incident response procedures and user or authority notification where legally required. Absolute security cannot be guaranteed online; please use a strong password, do not share login credentials, and enable any additional security measures we provide. Notify us immediately if you suspect unauthorized account access.

Under applicable law, you may have the right to: • Access: request a copy of personal data we hold about you. • Correction: update inaccurate or incomplete data via account settings or support@bitcourses.net. • Deletion: request deletion of certain data, subject to legal obligations or need to retain transaction records. • Withdraw consent: for processing based on consent (such as marketing or non-essential cookies). • Object or restrict: where applicable under law. • Marketing opt-out: via unsubscribe links in messages or by contacting us. To submit a request, email privacy@bitcourses.net with a description and reasonable identity verification. We will respond within a reasonable period per local requirements. We may refuse unfounded, repetitive, or rights-infringing requests.

We use cookies and similar technologies to operate the Platform and remember your preferences. Examples: • bc-ui-locale: stores language/UI preference (Arabic/English). • Theme cookies: store light/dark mode or display preferences. We may also use cookies essential for session, authentication, and security. Analytics or marketing cookies (if any) are enabled according to consent where required. You can manage cookies in browser settings; disabling essential cookies may break some features. For language and appearance, you may also change preferences in the Platform UI.

The Platform is primarily intended for users aged 18 or older, or minors using the service with parental or legal guardian consent and supervision where permitted by law. We do not knowingly collect personal data from children below the age requiring parental consent without an appropriate legal basis. If we learn we collected such data without required consent, we will take steps to delete it promptly. Guardians should contact privacy@bitcourses.net if they believe a child submitted data without permission.

We may send you: • Essential service communications: enrollment confirmations, payment receipts, course updates, security alerts, and material policy changes—generally cannot be opted out of without affecting the service. • Marketing communications: offers, new courses, or newsletters—only with your consent or where permitted by law, with unsubscribe available at any time. Messages may be sent by email, in-platform notifications, or SMS when needed. Please keep your email and phone accurate. To opt out of marketing, use unsubscribe links or contact support@bitcourses.net.

We may update this Policy periodically to reflect changes in our services, legal requirements, or security practices. For material updates, we will publish the new version on https://bitcourses.net with a "Last updated" date and may notify you by email or in-platform notice. Continued use after the update takes effect constitutes acceptance of the revised Policy where permitted by law. If you do not agree, please stop using the service, delete your account, or contact us.

For privacy inquiries or requests regarding your personal data: Email: privacy@bitcourses.net Legal email: legal@bitcourses.net General support: support@bitcourses.net Phone: +962 7 8241 8783 Address: Amman, Jordan Mntad Software Solutions Establishment — BitCourses https://bitcourses.net We aim to respond to reasonable requests as promptly as practicable and in accordance with applicable law.