Privacy Policy

AEQAN operates an online store, a merchant marketplace and a beauty school offering recorded and live training courses through aeqan.com and our mobile apps (customer app and merchant/instructor app). This policy explains what data we collect, why, how we use, protect and share it, and your choices. By using the platform you agree to this policy.

Last updated: October 12, 2026.

1) Who we are

The data controller is the AEQAN platform. Privacy contact: info@aeqan.com or the contact page.

2) Data we collect

Account data: name, email, phone number, password (stored as a one-way hash), addresses, and a profile picture if you add one.
Order and payment data: products and courses ordered, amounts, payment status, wallet balance. We do not store your card numbers; they are processed by payment providers.
Merchant and instructor data: business name, country and city, description, social links, commercial registration, documents and bank details when needed to pay out earnings.
Usage and device data: IP address, browser and device type, pages and screens viewed, and usage events (such as viewing a product or adding to cart) to improve the service.
Content you provide: reviews, course questions and answers, quiz results, lesson progress.
Notifications: a device token to send app notifications if you allow them.

3) How we use your data

Fulfilling orders, delivery, payments, refunds and the wallet.
Enrolling you in courses, tracking progress and sending live-session reminders.
Contacting you about orders, your account and offers (you can opt out of marketing).
Preventing fraud, protecting the platform and complying with law.
Analytics, improving the website and apps, and measuring advertising performance.

4) Google services and live courses (Google Meet / Google Calendar)

We use the Google Calendar API to create Google Meet meeting links for live course sessions:

Account used: meetings are created from a Google account owned by the platform, connected once by our administration. The system may also let an instructor optionally connect their own Google account so meetings are created in their calendar.
Permission requested: the ability to create, edit and delete calendar events (calendar.events), plus the connected account's email (openid, email). We use it only to create one event per live session, update or cancel it, and obtain the meeting link.
What we do not do: we do not read users' other personal calendars or events, we do not use Google data for advertising, and we do not sell or share it with anyone.
Storage and protection: the authorization (refresh) token is stored encrypted (AES-256-GCM) in our database and is never shown in any interface. We keep the event ID and meeting link to manage the session. The link is shown only to enrolled students shortly before the session.
Revocation and deletion: a connected account can be disconnected at any time from the instructor or admin panel, which revokes the authorization and deletes the token from our database. You can also remove access from your Google Account settings.
Google API Services User Data Policy: AEQAN's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5) Who we share data with

We do not sell your data. We share it only as needed to provide the service:

Merchants and instructors: what is needed to fulfil your order (name, address, contact number); instructors see the names of enrolled students and their course Q&A posts.
Shipping and delivery companies: to deliver orders.
Payment and installment providers (such as MyFatoorah, Tabby, Tamara): to process payments.
Messaging, email and notification providers: to send verification codes and notifications.
Analytics and advertising tools (such as Google Analytics, Firebase, Meta, Snapchat, TikTok): to measure usage and campaigns, subject to your settings and consent where applicable.
AI services: product images or inquiry text may be sent for processing and enhancement, without identifying data about you.
Authorities: when legally required.

6) Retention and deletion

We keep your data while your account is active and for the period required by law for invoices and accounting records. You can request deletion from the account deletion page or the app; your personal data is deleted or anonymized unless the law requires retention.

7) Data protection

We use encrypted connections (HTTPS), one-way password hashing, access controls inside the platform and periodic backups. No method of transmission or storage is 100% secure, but we work to minimize risk.

8) Cookies

We use essential cookies for the cart and sign-in, and others for analytics and advertising. You can disable them in your browser settings, though some features may be affected.

9) Your rights

Access and correct your data from your account.
Request deletion of your account and data.
Opt out of marketing messages and app notifications.
Withdraw any permission you granted (such as a connected Google account) at any time.

10) Children

Our services are not directed to children under 13 and we do not knowingly collect their data. If you believe a child has provided data, contact us and we will delete it.

11) Changes

We may update this policy. The latest version is published on this page with its update date, and we will notify you of material changes.

12) Contact us

For any question or request about your data: info@aeqan.com or the contact page.