Privacy Policy

TechExpo ("TechExpo", "we", "us") is the Data Controller of your personal data. This policy explains what we collect, why, how long we keep it, and the rights you have. It complies with Law 151/2020 (Egypt's Personal Data Protection Law) and its Executive Regulations. It also works together with our Terms & Conditions and our Cookie Policy.

We collect data you provide, data generated by your use of the Platform, and — when you sign in with a provider — limited data from that provider:

• Identity & account: name, username, birthdate, profile picture, timezone, and the interests you select when completing your profile.
• Contact: email address, phone number, city, country, and country code.
• Payments: payment screenshots you upload, transaction references and amounts, payment method details, payment history, and text extracted from your screenshots by automated tools to help our team review payments faster. Final payment decisions are made by our staff.
• Saved cards: if you choose to save a card for renewals, we store only a secure token issued by our payment partner, the card brand, the last four digits, the expiry date and whether it is your default card. We never receive or store your full card number, CVV or expiry details as you entered them.
• Membership & subscription: the plan you chose, the billing cycle, your period start and end dates, the status of the membership (active, grace, paused, cancelled, expired), pause and cancellation requests, renewal reminders sent to you, renewals confirmed, and which membership courses you started.
• Learning activity: courses and programs you enrol in, lessons completed, quiz and exam results, code-exercise submissions, live-session participation, workshop attendance, and certificate records.
• Gamification: points, streaks, badges, and tier rank. Your display name, points, and tier are visible on the public leaderboard.
• Certificates & public credentials: your name as printed on a certificate, the credential ID, and the related course or event. Credential pages and public profile pages are publicly viewable unless you hide them from Settings → Privacy. Verification pages always remain available for authenticity checks.
• Sessions & collaboration: participation in live classes, webinars, and workshops, including chat messages, whiteboard content, and recordings where a session is recorded.
• Communications: support requests, feedback and review submissions, appeal submissions, and your notification preferences.
• Technical: IP address, browser and device type, session tokens, and access times (retained as technical logs — see 1.7).
• Third-party sign-in: when you register or sign in with Google or GitHub, we receive your name, email address, and profile image from that provider.
• Browser extensions on your device: extensions you install run on your device, not on ours. An extension that has been granted access to a site can read the content of the pages you visit there — including the personal details we render in your dashboard — and it may add its own interface to those pages. Our Content Security Policy blocks scripts and stylesheets that an extension tries to inject into our pages, but it cannot control what an extension reads from a page it has been given access to. We therefore recommend restricting an extension's site access to the sites it actually needs, and using a separate browser profile for TechExpo if you prefer to keep the two apart.

• To provide the service you signed up for: accounts, memberships, courses, enrolments, payments, certificates, and support.
• To run the membership lifecycle — activating a membership after payment, tracking the period you paid for, applying a grace window where a renewal is pending, and honouring pause and cancellation requests.
• To prepare and notify you about renewals, and to confirm a renewal when you approve it. We do not charge a saved card in the background without your confirmation.
• To review payments and prevent fraud (with human review of payment evidence).
• To personalise recommendations (for example, suggesting courses based on your interests and activity) and to operate leaderboards and achievements.
• To send service messages (session links, certificates, payment and membership updates, security alerts) and — only if you opt in — newsletters.
• To meet legal obligations, including retention of technical logs under Law 175/2018 and retention of payment and subscription records for tax and accounting purposes.

We share data only with service providers that help us run the Platform, under agreements that limit their use of your data to providing those services. These include:

• Cloud hosting & databases (application servers and data storage).
• Email delivery (transactional and marketing emails).
• Payment processing — our PCI-DSS compliant payment partner operates the hosted card-entry page, processes the transaction and returns a confirmation and (only if you ask for it) a secure card token. It acts as a separate controller for the payment it processes; your full card number and CVV never reach TechExpo.
• Media storage (images, payment screenshots, certificate files).
• Video & live sessions (live-class, lab and webinar infrastructure).
• Embedded video (YouTube embeds on pages such as podcasts — playing an embed may allow YouTube to set cookies, see our Cookie Policy).

We do not sell your personal data. We do not share it with advertisers. We may disclose data where required by law or to protect the rights, safety, or property of TechExpo or its users.

Our providers may process data outside Egypt (for example, in the European Union or the United States). Where data is transferred internationally, we rely on contractual and organisational safeguards with our providers consistent with Law 151/2020.

• Service messages: session links, certificates, payment updates, membership and renewal notices, and security alerts are sent as part of providing the service and do not require separate opt-in consent.
• Newsletters: optional tech updates are sent only if you opt in (for example, by subscribing on our blog). You can unsubscribe at any time using the link in any newsletter or from your notification settings.
• Engagement notifications: streak, milestone, reminder, digest and rank notifications are optional and can be switched off per topic in your notification settings. Membership renewal and grace notices are part of the service and cannot be switched off.

• Account data: kept while your account is active. After you delete your account, there is a 14-day recovery window; after that, the account is soft-deleted and eventually anonymised or removed, except data we must keep by law.
• Technical logs: IP addresses and access times are retained for 180 consecutive days, as required by Law 175/2018 — including in a secure archive after soft deletion, for the legally mandated period.
• Payment records: kept for as long as required by Egyptian tax and accounting rules and for dispute handling.
• Subscription records: the plan, the periods you paid for, the status history and the events behind them (renewal, pause, cancellation, expiry) are kept alongside the payment records for the same accounting period, so that a past charge can always be explained.
• Saved cards: a saved-card token is deleted as soon as you revoke the card or close your account.
• Certificates: credential records are retained as long as the credential remains valid, because third parties rely on verification.
• Marketing: kept until you unsubscribe; we also keep a minimal suppression record so we respect your opt-out.
• Session recordings & collaboration content:kept only as long as needed for the purpose they were collected (for example, shared replays or support follow-up), then deleted or anonymised.

Subject to Law 151/2020, you have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your personal data;
• withdraw consent for marketing communications at any time;
• object to, or request restriction of, certain processing; and
• receive your data in a portable format where technically feasible.

You can exercise most of these rights yourself — edit your profile and privacy settings, revoke a saved card, and manage your membership in Settings → Subscription. For anything else, email our Data Protection Officer at info@techexpo.site. We aim to respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Center (PDPC) in Egypt.

The Platform is intended for users aged 13 and above. Users between 13 and 17 must have parental or legal-guardian consent, as described in our Terms & Conditions. A parent or guardian may request removal of a minor's account by contacting info@techexpo.site.

We use cookies and similar technologies for essential functions such as keeping you signed in and remembering your preferences. For details and how to control them, see our Cookie Policy.

In the event of a personal-data breach, we will notify the Personal Data Protection Center (PDPC) within 72 hours and affected users within 3 business days, to the extent required by applicable regulations.

This policy is governed by the laws of the Arab Republic of Egypt. Any disputes shall be referred to the Cairo Economic Courts.