Privacy Policy

1. Who we are

ATMA - Apparel and Textile Merchandising Academy - Egypt ("ATMA") runs the website atma.courses. For any question about your data, write to support@atma.courses.

2. What we collect

• Account: your name, email address and preferred language. Your password is stored only as a one-way hash; we cannot read it.
• Google sign-in (optional): if you sign in with Google, Google gives us your name and email address. We never see your Google password.
• Early-access request: your phone number, country, whether you are a factory or a brand company, and your company name.
• Payment submission: the payment method you used, the payment reference you type in, an optional payer name and note, the amount and the dates. We never receive card numbers or bank passwords: you pay through InstaPay, a mobile wallet or PayPal, outside our website.
• Learning progress: which lessons you completed and your quiz scores, kept in our database when you are signed in and in your browser on your device.
• Security records: your IP address and the time of important events (for example signing in or resetting a password), and counters that limit repeated attempts.
• Email records: which service emails we sent you, when, and whether they were delivered.

3. Why we use it

We do not sell your data and we do not use it for advertising.

• To create and secure your account and to check your email address.
• To manage early access: to review your request, check your payment by hand and open or close your access.
• To send you service emails about your account (verification, password reset, payment and access updates). We send updates about ATMA (new lessons and offers) only if you tick the optional box when you create your account; you can stop at any time by writing to support@atma.courses.
• To keep the service safe, prevent abuse, and answer your questions.

4. Cookies and browser storage

We do not use advertising or analytics cookies.

• atma_session: keeps you signed in. Page scripts cannot read it. It expires after 30 days without use and in any case after 90 days.
• atma_lang: remembers your language for one year.
• google_oauth_state: a short-lived security value used only while you sign in with Google.
• Browser storage on your device: your quiz answers and lesson progress.

5. Who we share it with

Service providers process data on our behalf:

• Vercel hosts the website.
• Turso hosts our database.
• Resend delivers our emails.
• Google, only if you choose to sign in with Google.

6. Payments

When you pay through InstaPay, a mobile wallet or PayPal, that provider handles the payment under its own terms and privacy policy. We only receive the reference and details you give us. We may disclose data if the law requires it.

7. How long we keep it

We keep your account data while your account exists. Payment and access records may be kept for as long as needed for accounting and to settle disputes. Security records are kept only as long as needed to protect the service.

8. Your rights

You can ask us to show you the data we hold about you, correct it, or delete your account and data, and you can object to how we use it. Write to support@atma.courses from the address you registered with. There is no self-service deletion yet, so we handle these requests by email.

9. Security

We use encrypted connections (HTTPS), store passwords only as hashes, limit repeated sign-in attempts and restrict who can access payment records. No system is perfectly secure, so please use a strong password you do not use elsewhere.

10. Children and other countries

ATMA is written for working professionals and students of the apparel and textile trade, not for children. Our providers may process data in countries other than yours.

11. Changes

If we change this policy we will update the date above and, for important changes, tell you by email.

12. Contact

support@atma.courses