1. Information We Collect

Personal Information You Provide

• Account Information: Name, email address, username, password
• Contact Information: Phone number, mailing address (if provided)
• Payment Information: Billing address and payment method details (processed securely through PayPal — we do not store full payment card details)
• Order Applications: Project requirements, specifications, and related communications
• Communication Data: Messages sent through our chat system, emails, and correspondence
• Assessment Information: Data from certificate assessment meetings and evaluations

Information Automatically Collected

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, time spent on site, click patterns, navigation paths
• Cookies and Tracking: Session cookies, preference cookies, and analytics data
• Server Logs: Access times, requested pages, error logs

Images and Files

• User Uploads: Images and files you upload to your account are stored on our local servers
• Project Files: Development work, assets, and deliverables related to your orders

2. How We Use Your Information

Service Delivery

• Create and manage your user account
• Process payments and manage billing
• Deliver game development services and project files
• Conduct certificate assessment meetings via Zoom
• Provide customer support and respond to inquiries

Communication

• Send order updates and project communications
• Provide technical support and assistance
• Send important service announcements and policy updates
• Respond to your questions and requests

Business Operations

• Improve our website and services
• Analyze usage patterns and user behavior
• Prevent fraud and ensure security
• Comply with legal obligations
• Resolve disputes and enforce our Terms of Service

Marketing (With Consent)

• Send promotional emails about new services or courses
• Share updates about KodeFlow Studios developments
• Provide information about relevant educational opportunities

3. Information Sharing and Disclosure

Third-Party Service Providers

We share information with trusted partners who help us operate our business:

• Payment Processor: PayPal processes payments on our behalf. PayPal may collect and process your payment information, billing address, and transaction data in accordance with their own privacy policy
• Video Conferencing: Zoom for certificate assessment meetings
• Analytics: Website analytics providers to improve our services
• Communication: Email service providers for notifications and support

Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Protect our rights, property, or safety, or that of our users
• Investigate potential violations of our Terms of Service
• Prevent fraud or security threats

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

With Your Consent

We may share information for other purposes with your explicit consent.

4. Data Security

Security Measures

• Encryption: Sensitive data is encrypted during transmission and storage
• Access Controls: Limited access to personal information on a need-to-know basis
• Server Security: Local servers are protected with industry-standard security measures
• Regular Updates: Security protocols are regularly reviewed and updated

Data Breach Response

• We will notify affected users within 72 hours of discovering a data breach
• Appropriate authorities will be notified as required by law
• We will take immediate steps to contain and remediate any security incidents

5. Data Retention

Retention Periods

• Account Data: Retained while your account is active and for 2 years after closure
• Payment Information: Retained for 7 years for tax and legal compliance
• Project Files: Retained for 1 year after project completion unless otherwise requested
• Communication Records: Retained for 3 years for support and legal purposes
• Assessment Records: Retained for 5 years for certificate validation

Data Deletion

• You may request deletion of your personal data at any time
• Some information may be retained longer due to legal or legitimate business requirements
• Anonymized data may be retained for analytics and improvement purposes

6. Your Privacy Rights

Access and Control

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate personal information
• Deletion: Request deletion of your personal information (subject to legal requirements)
• Portability: Request your data in a portable format
• Objection: Object to certain uses of your personal information

Communication Preferences

• Marketing Emails: Unsubscribe from promotional communications at any time
• Account Notifications: Opt out of non-essential account notifications
• Chat Features: Control your chat privacy settings

How to Exercise Your Rights

Contact us at [email protected] to exercise any of these rights. We will respond within 30 days of receiving your request.

7. Cookies and Tracking

Types of Cookies We Use

• Essential Cookies: Required for website functionality and security
• Preference Cookies: Remember your settings and preferences
• Analytics Cookies: Help us understand how you use our website
• Session Cookies: Maintain your login session

Cookie Management

• You can control cookies through your browser settings
• Disabling certain cookies may limit website functionality
• We do not use cookies for advertising or cross-site tracking

8. Third-Party Links and Services

External Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Third-Party Courses

When you access courses through platforms like Udemy, their privacy policies apply to that interaction. We do not control how these platforms handle your data.

9. Children's Privacy

Our services are not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. If we discover we have collected such information, we will delete it immediately.

10. International Data Transfers

If you are located outside of Egypt, please note that your information may be transferred to and processed in Egypt. We ensure appropriate safeguards are in place for any international transfers.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

• Legal basis for processing is typically contract performance or legitimate interests
• Right to withdraw consent where processing is based on consent
• Right to lodge a complaint with your local data protection authority

13. Changes to This Privacy Policy

Policy Updates

• We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements
• Material changes will be communicated via email or prominent website notice
• The "Last Updated" date at the top indicates when changes were made
• Continued use of our services after changes constitutes acceptance of the updated policy

14. Contact Information

Privacy Questions

For questions about this Privacy Policy or our privacy practices, contact us at:

15. Compliance and Certifications

We are committed to maintaining compliance with applicable privacy laws and regulations, including but not limited to:

• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Egyptian Data Protection Law
• Other applicable international privacy regulations