Privacy Policy

Acadimiz (accessible at acadimiz.com) is developed and operated by Zeenku (Zeenku Agency), a company established in Casablanca, Kingdom of Morocco ('we', 'us', or 'our'). This Privacy Policy details how we process personal information collected when you interact with our website, use our Software-as-a-Service (SaaS) learning platform, host an online academy as an Academy Owner, or participate in courses as a Learner.

• Moroccan Law N° 09-08 (Dahir N° 1-09-15) regarding the protection of individuals with respect to the processing of personal data (CNDP regulations).
• Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) for users located within the European Economic Area.
• Moroccan Law N° 53-05 on the Electronic Exchange of Legal Data.

We collect information required to provide, secure, and optimize our learning platform. The types of data collected include:

• Account Information: Full name, email address, encrypted password hash, avatar image, phone number, language preference, and account role.
• Educational & Content Data: Course enrollments, lesson progress, quiz answers, exercise recordings (video/audio), certificates earned, and course content uploaded by instructors.
• Financial & Transaction Metadata: Billing addresses, platform subscription tiers, transaction IDs, and payout information. Full credit card numbers are handled exclusively by PCI-DSS certified payment processors (CMI, Stripe) and are never stored on our servers.
• Technical & Usage Information: IP addresses, browser specs, device details, session tokens, error diagnostic logs, and navigation paths.

Personal data is processed strictly under valid legal bases (contractual necessity, legal obligation, and legitimate commercial interest):

• Service Delivery: Authenticating users, delivering video content, managing course enrollments, issuing certificates, and processing student-instructor interactions.
• Payments & Billing: Processing subscription plans, calculating creator payouts, and maintaining financial records required under Moroccan commercial law.
• Platform Reliability & Security: Monitoring server performance, preventing fraudulent activity, isolating bugs via Sentry, and maintaining uptime.
• User Support & Communication: Responding to support tickets, sending operational notifications, password reset links, and platform updates.

Acadimiz operates a multi-tenant platform empowering educators to run branded academies.

• Acadimiz as Data Controller: We act as Data Controller for main platform user accounts, platform billing, global security, and site analytics.
• Acadimiz as Data Processor: For learner data collected within an independent instructor's academy, the Academy Owner acts as the primary Data Controller, and Acadimiz operates as the Data Processor carrying out processing instructions on their behalf.

We work with trusted third-party cloud infrastructure providers who adhere to strict data security standards:

• Supabase Inc.: Database hosting, authentication, row-level security, and serverless infrastructure.
• Amazon Web Services (AWS S3): Encrypted cloud storage for course videos, assets, and document downloads.
• CMI (Centre Monétique Interbancaire) & Stripe: Secure payment processing for local (MAD) and international cards.
• Mailgun (Sinch): Transactional email delivery and account notification services.
• Sentry & OpenPanel: Real-time error monitoring and privacy-focused usage analytics.

We employ industry-standard administrative, physical, and technical safeguards (TLS 1.3 in transit, AES-256 at rest, strict database authorization policies) to safeguard data against unauthorized access, loss, or alteration. We retain personal data only for the duration necessary to satisfy the purposes outlined herein or as mandated by Moroccan tax and accounting regulations.

You possess enforceable privacy rights under Moroccan Law N° 09-08 and applicable international privacy frameworks:

• Right of Access: Request confirmation of data processing and obtain a readable copy of your stored personal records.
• Right of Rectification: Request correction or update of inaccurate or incomplete personal details.
• Right of Erasure ('Right to be Forgotten'): Request account deletion and removal of associated personal data, subject to legal compliance retentions.
• Right to Object & Consent Withdrawal: Object to processing for direct marketing or withdraw consent previously granted.

Acadimiz utilizes essential cookies and local storage items strictly necessary for user authentication, security, language selection, and session persistence. We do not sell user tracking data to third-party ad brokers.

Data processed by our cloud sub-processors may be hosted on secure servers located in Morocco, Europe, or North America. Cross-border transfers are conducted using Standard Contractual Clauses and encryption standards approved by CNDP guidelines.

To exercise your privacy rights or request information regarding your personal data, please contact our team:

• Entity: Zeenku (Acadimiz Platform)
• Address: Casablanca, Kingdom of Morocco
• Email: [email protected]
• WhatsApp: +212 600-592622