Privacy Policy

Last updated: July 2026

1. Information We Collect

Ta'leem o Bachat collects information you provide when creating an account, including your name, email address, university email, university name, and password (stored encrypted). We also collect deal browsing and redemption activity to personalize your experience.

2. How We Use Your Information

Your data is used to verify student status, process cashback rewards and withdrawals, communicate important account updates, improve our platform, and comply with legal obligations.

3. Data Sharing

We do not sell your personal data. Aggregated, anonymized analytics may be shared with brand partners. Withdrawal information is shared with payment processors (JazzCash, EasyPaisa, Zindagi) solely to process your transactions.

4. Data Retention

Account data is retained until you request deletion. Transaction records are retained for 7 years for tax and audit compliance.

5. Your Rights

You may request to view, export, or delete your personal data at any time from your account settings or by contacting support. Account deletion will remove personal information within 30 days.

6. Security

We implement encryption, rate limiting, CSRF protection, and security headers to protect your data. Passwords are hashed with bcrypt (12 rounds). All API state-changing operations require CSRF tokens.

7. Contact

For privacy inquiries, contact support@taleemobachat.com.