PRIVACY POLICY

Last Updated: November 13, 2025

1. INTRODUCTION

Epiqon ("we", "us", "our", or "Company") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online learning platform available at epiqon.co (the "Platform" or "Service").

This Privacy Policy applies to all users of our Platform and should be read in conjunction with our Terms of Service and Cookie Policy. By accessing or using our Platform, you acknowledge that you have read and understood this Privacy Policy and consent to our data practices as described herein.

We are committed to compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy regulations in the jurisdictions we serve.

2. DATA CONTROLLER AND CONTACT INFORMATION

For the purposes of applicable data protection laws, Epiqon is the data controller responsible for your personal data. If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Nobaka Tech L.L.C-FZ

Meydan Grandstand, SHARED DESK 6th floor

Nad Al Sheba

Dubai, United Arab Emirates

Email: support@epiqon.co

You can also use the "Contact Us" feature available in your user account dashboard.

3. INFORMATION WE COLLECT

We collect several types of information from and about users of our Platform:

3.1 Information You Provide to Us

Registration and Questionnaire Data:

When you first interact with our Platform through the initial questionnaire after viewing our advertisement, we collect:

  • Your responses to questionnaire questions about your learning preferences and interests

  • Age information

  • Gender

  • Country of origin

Account Information:

When you purchase a subscription and an account is automatically created for you:

  • Email address

  • Name (if provided)

  • Password (encrypted)

  • Account preferences and settings

Course Activity Data:

All user account data and activity within courses is stored on the LearnWorlds platform, which serves as our data processor. This includes:

  • Course enrollment information

  • Progress tracking data

  • Completion status

  • Quiz and assessment results

  • Time spent on courses and learning materials

  • Interaction with course content

Communications:

When you contact us through the "Contact Us" feature in your user account or via email at support@epiqon.co, we collect the content of your communications and any information you choose to provide.

3.2 Information Collected Automatically

Technical and Usage Data:

When you access our Platform, we automatically collect certain technical information through cookies, web beacons, and similar tracking technologies:

  • IP address and approximate geographic location

  • Device information (type, operating system, browser type and version)

  • Unique device identifiers

  • Browser settings and language preferences

  • Pages visited and content accessed

  • Time and date of visits

  • Clickstream data and navigation patterns

  • Referring website addresses

  • Session duration and frequency of visits

3.3 Analytics and Tracking Technologies

We use the following analytics and tracking services to collect information about user behavior and optimize our Platform:

Meta Pixel (Facebook Pixel):

Tracks user interactions on our questionnaire and helps us measure the effectiveness of our advertising campaigns. Meta Pixel may store and access cookies on your device.

Google Analytics:

Provides insights into how users interact with our Platform, including page views, session duration, and user flow. Google Analytics uses cookies to collect anonymized usage data.

Amplitude:

Helps us analyze user behavior patterns, feature usage, and engagement metrics to improve our Platform experience.

Microsoft Clarity:

Records user sessions to help us understand how users interact with our Platform, including heatmaps and session replays.

Local Storage:

We use browser local storage to maintain session information and enhance user experience.

For detailed information about the cookies and tracking technologies we use, please refer to our Cookie Policy.

3.4 Payment Information

Payment information is collected and processed by Stripe, our third-party payment processor. We do not directly collect, store, or have access to your full payment card information. Stripe processes payment data in accordance with Payment Card Industry Data Security Standards (PCI DSS). We receive only limited information from Stripe, such as the last four digits of your card, expiration date, and transaction confirmation.

3.5 Information We Do Not Collect

We do not collect information about users from third parties, open sources, or data brokers. We do not create backup copies of user data. All information we process comes directly from your interactions with our Platform or through our designated service providers (LearnWorlds and Stripe).

4. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

4.1 To Provide and Maintain Our Service

  • Creating and managing your account

  • Processing your subscription and payments

  • Providing access to courses and learning materials

  • Tracking your learning progress and course completion

  • Maintaining the security and functionality of the Platform

  • Authenticating users and preventing unauthorized access

4.2 To Personalize Your Experience

  • Recommending courses and content based on your preferences and activity

  • Customizing the Platform interface to your preferences

  • Adapting content to better match your learning goals and interests

4.3 To Communicate With You

  • Sending system notifications about your account (e.g., account creation, password changes)

  • Responding to your inquiries and support requests

  • Providing customer support services

  • Sending promotional communications about additional products or special offers (where you have consented)

  • Notifying you of important changes to our Platform, Terms of Service, or this Privacy Policy

4.4 To Improve and Optimize Our Platform

  • Analyzing user behavior and preferences to enhance content quality

  • Understanding which features and courses are most popular

  • Identifying and fixing technical issues

  • Testing new features and improvements

  • Conducting research and analysis to improve educational outcomes

4.5 For Marketing and Advertising

  • Measuring the effectiveness of our advertising campaigns

  • Delivering targeted advertisements to potential users

  • Understanding how users discover and engage with our Platform

4.6 For Legal and Security Purposes

  • Complying with legal obligations and responding to lawful requests

  • Protecting our rights, property, and safety, as well as those of our users

  • Detecting, preventing, and addressing fraud, security breaches, and technical issues

  • Enforcing our Terms of Service and other policies

5. LEGAL BASIS FOR PROCESSING (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your personal data based on the following legal grounds:

  • Processing necessary to provide the Service you subscribed to and fulfill our contractual obligations to you.

  • Where you have given explicit consent for specific processing activities, such as marketing communications or non-essential cookies.

  • Processing necessary for our legitimate business interests, such as improving our Platform, preventing fraud, and conducting analytics, provided these interests do not override your rights and freedoms.

  • Processing required to comply with applicable laws and regulations.

6. UAE DATA PROTECTION COMPLIANCE


For users in the United Arab Emirates, we process personal data in compliance with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). We process your personal data based on the following legal grounds:

    •  Processing necessary to provide the Service you subscribed to and fulfill our contractual obligations to you.

    •  Where you have given explicit consent for specific processing activities, such as marketing communications or non-essential cookies.

    •  Processing necessary for our legitimate business interests, such as improving our Platform, preventing fraud, and conducting analytics, provided these interests do not override your rights and freedoms.

    •  Processing required to comply with applicable laws and regulations.

We ensure that all data processing activities meet the requirements of UAE law, including obtaining appropriate consent, implementing security measures, and respecting individuals' rights regarding their personal data.

7. DATA SHARING AND DISCLOSURE

We do not sell, rent, or trade your personal data. We may share your information in the following circumstances:

7.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Platform:

LearnWorlds:

Our learning management system platform that acts as a data processor under GDPR. LearnWorlds stores all user account data and course activity on secure servers located in the European Union (Ireland, Netherlands) and the United States. They process data solely on our behalf and in accordance with our instructions. Data storage complies with GDPR, CCPA, and Standard Contractual Clauses (SCC) for international data transfers.

Stripe:

Our payment processor that handles all payment transactions. Stripe maintains its own secure servers and privacy policies compliant with PCI DSS standards.

Analytics Providers:

Meta Pixel, Google Analytics, Amplitude, and Microsoft Clarity process usage data to help us understand user behavior and improve our Platform. These services have their own privacy policies that govern their data practices.

7.2 Legal Requirements

We may disclose your information when required by law or in response to valid legal requests from governmental authorities, including to meet national security or law enforcement requirements. This includes complying with court orders, subpoenas, or other legal processes.

7.3 Business Transfers

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal data may be transferred to the successor entity. We will notify you of any such change and the choices you may have regarding your personal data.

7.4 Protection of Rights

We may disclose information when we believe it is necessary to protect our rights, property, or safety, or the rights, property, or safety of our users or others. This includes exchanging information with other companies and organizations for fraud protection and security purposes.

8. DATA RETENTION

We retain your personal data for as long as necessary to provide you with our Service and fulfill the purposes described in this Privacy Policy. Specifically:

  • Retained for the duration of your active subscription and for a reasonable period thereafter to accommodate potential reactivation.

  • Retained throughout your subscription to track progress and maintain educational records.

  • Support communications retained for customer service purposes and quality assurance.

  • Anonymized analytics data may be retained indefinitely for statistical and research purposes.

  • Some data may be retained longer if required by law, for tax purposes, or to resolve disputes.

Currently, we do not have an automated data deletion process. When you request deletion of your data, we will process your request manually and confirm completion within a reasonable timeframe, typically within 30 days.

9. YOUR RIGHTS AND CHOICES

Depending on your location, you may have certain rights regarding your personal data:

9.1 Rights Under GDPR (EEA, UK, Switzerland)

  • You can request a copy of the personal data we hold about you.

  • You can request correction of inaccurate or incomplete personal data.

  • You can request deletion of your personal data, subject to certain legal exceptions.

  • You can request limitation of processing of your personal data in certain circumstances.

  • You can request a copy of your data in a structured, commonly used format.

  • You can object to processing based on legitimate interests or for direct marketing purposes.

  • Where processing is based on consent, you can withdraw it at any time.

9.2 Rights Under CCPA (California Residents)

  • You can request disclosure of the categories and specific pieces of personal information we have collected.

  • You can request deletion of personal information, subject to certain exceptions.

  • While we do not sell personal information, you can opt-out of certain data sharing practices.

  • You will not be discriminated against for exercising your privacy rights.

9.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at support@epiqon.co. We will respond to your request within the timeframe required by applicable law (typically 30 days for GDPR requests and 45 days for CCPA requests).

You also have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your concerns.

9.4 Marketing Communications

You will receive system notifications necessary for your use of the Platform (account creation, password changes, etc.). For promotional communications about additional products or special offers, you can opt-out at any time by following the unsubscribe instructions in the email or by contacting us directly.

10. INTERNATIONAL DATA TRANSFERS

Your personal data may be transferred to and processed in countries outside your country of residence, including the European Union (Ireland, Netherlands) and the United States, where our service providers' servers are located.

For data transfers from the EEA, UK, or Switzerland to countries without adequate data protection laws, we rely on Standard Contractual Clauses approved by the European Commission or other appropriate safeguards to ensure your data receives adequate protection.

By using our Platform, you acknowledge and consent to the transfer of your data as described in this Privacy Policy.

11. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security measures include:

  • HTTPS encryption for all data transmission

  • Secure password storage using industry-standard encryption

  • Regular security assessments and updates

  • Access controls limiting data access to authorized personnel only

  • Secure servers maintained by our trusted service providers

  • Compliance with industry standards, including PCI DSS for payment data

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we will notify you of any data breach that may affect your rights, as required by applicable law.

12. CHILDREN'S PRIVACY

Our Platform is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@epiqon.co, and we will take steps to delete such information from our systems.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated Privacy Policy on our Platform and updating the "Last Updated" date at the top of this policy.

For significant changes that materially affect your rights, we may provide additional notice, such as through email or a prominent notice on the Platform. Your continued use of the Platform after such changes constitutes your acceptance of the updated Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. CALIFORNIA PRIVACY RIGHTS

California residents have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

  • Categories of personal information collected: As described in Section 3

  • Business purposes for collection: As described in Section 4

  • Categories of third parties with whom we share: LearnWorlds, Stripe, analytics providers (Meta, Google, Amplitude, Microsoft)

  • Sale of personal information: We do not sell personal information

California residents can exercise their rights by contacting support@epiqon.co. We will not discriminate against you for exercising your CCPA rights.

15. NEVADA PRIVACY RIGHTS

Nevada residents have the right to opt-out of the sale of certain covered information that we have collected or will collect about them. We do not sell your covered information as defined under Nevada law. If you are a Nevada resident and would like to make such a request, please contact us at support@epiqon.co.

16. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: support@epiqon.co 

You can also use the "Contact Us" feature available in your user account dashboard.

We are committed to working with you to obtain a fair resolution of any privacy concern.