Privacy Policy

Who we are

امتياز للتسويق الالكتروني ("Imtyaaz", "we") is a company registered in Egypt, Helwan, Cairo 11433, Egypt. Contact: info@imtyaaz.com · +20 106 002 7276.

This policy covers three services:

• The imtyaaz.com website.
• The Imtyaaz WhatsApp Business Platform (wa.imtyaaz.com): software that lets businesses connect their own WhatsApp Business Account through Meta's official Embedded Signup and send verification codes, transactional notifications and consent-based marketing messages.
• Imtyaaz LMS: our learning platform for online courses, live classes, quizzes and certificates, on the web and in the Imtyaaz apps for iOS and Android.

Our role

• For people who receive WhatsApp messages from a business that uses Imtyaaz, that business decides why and how their data is used. Imtyaaz processes the data on the business's behalf and on its instructions.
• For Imtyaaz LMS users, people who sign in to the Imtyaaz dashboard, and people who contact us through this website, Imtyaaz decides how the data is used.

Imtyaaz LMS: data we collect

• Account: your name, email address or mobile number with country code, password (stored only as a hash), account type (student, instructor or organization) and any profile details you choose to add.
• Sign in with Facebook or Google: if you choose it, we receive your name, email address and your account ID with that service. We use them only to create and sign in to your account. We never post on your behalf.
• Learning activity: courses you enroll in, your progress, quiz answers and results, assignments, certificates, notes, forum posts, comments and reviews.
• Purchases: orders, prices, discount codes and payment status. Card payments are handled by the payment provider you choose at checkout; we do not receive or store full card numbers.
• Live classes: the name you show and the audio, video and chat you share during a live class, carried by the live-class provider.
• Device and security data: device type, operating system, app version, IP address, sign-in history, the devices signed in to your account, and a push notification token.
• Meta SDK App Events (mobile apps): the apps use Meta's SDK to measure installs, app launches and in-app purchases. Meta receives these events with app and device information, including the device advertising ID where your device settings allow it.

Imtyaaz LMS: why we use it

• To create your account, give you access to the courses you enrolled in or bought, run live classes, grade quizzes and issue certificates.
• To process payments, refunds, installments, rewards and instructor payouts.
• To send you service messages, such as course updates, class reminders and verification codes, by push notification, email, SMS or WhatsApp. You can turn off push notifications in your device settings.
• To keep accounts secure, enforce device limits and prevent fraud.
• To measure how the apps are installed and used and how well our advertising works (Meta App Events).

WhatsApp Business Platform: data we process

• Message recipients: phone number, WhatsApp profile name, messages sent and received through the business's account, and delivery status. Source: the business and WhatsApp (Meta). Purpose: deliver the business's messages, show delivery history, honor opt-outs.
• Consent records: whether a person opted in or out, for which kind of message, when, where (for example a web form), the consent wording shown, and the IP address if the business provides it. Purpose: prove consent and block marketing to people who opted out.
• Verification codes (OTP): phone number, purpose, timestamps and outcome. The codes themselves are stored only as one-way hashes.
• Business connection data: WhatsApp Business Account and phone number identifiers, and the access token Meta issues when a business connects its account, which is stored encrypted.
• Dashboard users: name, work email, role, sign-in times and IP address.
• Usage and billing: message counts by category and country, used to invoice Imtyaaz fees.

This website

• Enquiries: the name, company, email, phone and message you send through the contact form, used to answer you.
• Analytics: when enabled, Google Analytics and Microsoft Clarity record pages visited, device and browser information and how the page is used, using cookies.

What we do not do

• We do not sell personal data.
• We do not use WhatsApp message recipients' data for our own marketing or to build advertising profiles.
• On the WhatsApp Business Platform, Facebook Login for Business is used only to let a business connect its WhatsApp Business Account. We do not store Facebook profile information from it.

Who we share data with

• Meta Platforms: to deliver WhatsApp messages; for Facebook Login and App Events in Imtyaaz LMS. Meta's own terms and privacy policy apply to its processing.
• Google: Google sign-in, Firebase Cloud Messaging for push notifications, and Google Analytics.
• Payment providers, live-class providers (such as Agora, BigBlueButton or Jitsi), and file storage and video delivery providers that run Imtyaaz LMS.
• Infrastructure and email providers under contract: Contabo (servers), Brevo (platform email), Resend (website contact form email), Microsoft (Clarity analytics).
• Instructors and organizations: in Imtyaaz LMS, the instructor or organization running a course sees the names, progress, quiz results and assignments of the learners in that course.
• Authorities, when the law requires it.

International transfers

Data may be processed outside Egypt, for example by Meta and Google and on our hosting provider's servers. We use contractual and technical safeguards for these transfers.

How long we keep data

• Imtyaaz LMS accounts: while your account is open. After you delete your account we delete your data within 30 days, except purchase and invoice records we must keep by law.
• WhatsApp message records: 180 days by default. Businesses can choose a shorter period.
• Verification code records: 30 days by default.
• Technical webhook records: 30 days.
• Consent evidence: kept in pseudonymized form for as long as it is needed to show that consent was given or withdrawn.
• Business customer data: for the length of the customer contract and afterwards only as long as the law requires (for example for invoices).

Security

Passwords, API keys and verification codes are stored only as hashes. Access tokens and secrets are encrypted at rest (AES-256-GCM). Access is role-based, actions are logged, each business's data on the WhatsApp platform is isolated, and all traffic uses TLS.

Children

Imtyaaz LMS is not intended for children under 13. Learners under 18 should use it with the consent of a parent or guardian. If you believe a child under 13 has given us personal data, contact us and we will delete it.

Your rights and choices

• Imtyaaz LMS users can see and correct their profile in the app or on the website, delete their account from their account settings, and ask us for a copy of their data or for its deletion at any time.
• You can turn off push notifications in your device settings, and reset or limit your advertising ID in your device's privacy settings.
• To stop marketing messages from a business on WhatsApp, reply STOP (or توقف), or use WhatsApp's own settings for that business.
• If you received WhatsApp messages from a business that uses Imtyaaz, contact that business to see, correct or delete your data. The business can export or erase it through Imtyaaz. If you cannot reach the business, write to us and we will forward your request.
• Anyone can write to us to access, correct or delete their data: info@imtyaaz.com.
• You can complain to Egypt's Personal Data Protection Center.

Facebook and Meta data deletion

If you signed in to Imtyaaz LMS with Facebook, or connected a business using Facebook Login for Business, see our Data Deletion page for how to remove that connection and delete the data we hold.

Changes

We will publish changes on this page with a new version and date, and tell users and customers about material changes in advance.