Privacy Policy

1. Who we are

Toratech AI ("Toratech", "we") provides applied AI training and services from Addis Ababa, Ethiopia. This policy covers toratechai.com, your Toratech account, and the live and self-paced training we deliver. We follow Ethiopia's Personal Data Protection Proclamation No. 1321/2024.

For anything about your personal information, email info@toratechai.com or call +251 919 352 801.

2. What we collect

• Your account: your name, email address, phone number and password. The password is stored only as a one-way hash, so nobody at Toratech can read it.
• Sign in with Google or Telegram, if you use it: from Google, your Google account ID, name and email address; from Telegram, your Telegram account ID, name and, if you agree to share it, your phone number. We never receive your Google or Telegram password.
• Bookings and enquiries: the package, schedule, number of participants and notes you send us, and your name, phone, email and organisation when you write to us without an account.
• Your training: course progress, quiz answers, the lab work you submit, our feedback on it, and the certificates you earn.
• Payments: the payment proof you upload, such as a Telebirr confirmation or a bank receipt, and its reference. The payment itself goes through Telebirr or your bank; we never see your card, PIN or banking login.
• Security records: the time and outcome of sign-ins, password resets and similar account events, kept to protect your account. They never contain your password or any code.

3. How we use it

• to create your account and sign you in;
• to arrange live training: agree dates with you, send the Google Meet link and session recordings, and confirm your payments;
• to give you access to self-paced courses, mark your work and issue your certificates;
• to answer your enquiries and reach you about your bookings;
• to send account emails, such as password-reset codes;
• to keep the service secure and prevent misuse;
• to meet our legal, accounting and tax obligations.

We use your information because we need it to provide the training you asked for, because the law requires it, because we have a legitimate interest in keeping accounts secure, or because you agreed, for example when you let Telegram share your phone number. We do not send marketing emails unless you ask for them.

4. Who we share it with

We do not sell your personal information. We share it only:

• with companies that run parts of the service for us: Hetzner, which hosts our servers in Germany; Resend, which delivers our emails from the European Union; Google, which hosts live sessions on Google Meet and, if you use it, Google sign-in; and Telegram, if you use Telegram sign-in;
• with the other participants of a live session you join, who see your name and anything you choose to share in the session;
• with your organisation, if it arranged your training, limited to your attendance, progress and certificates;
• when the law requires it, or to protect someone's safety.

Some of these companies process information outside Ethiopia. They may use it only to provide their service to us.

5. Cookies and browser storage

We use only what the site needs to work. We do not use advertising or tracking cookies.

• al_access and al_refresh keep you signed in, for up to 30 days.
• al_signup holds an unfinished Google or Telegram sign-up for up to 15 minutes, while you add your phone number.
• Your light or dark theme choice is kept in your browser's own storage and never sent to us.

Google and Telegram set their own cookies when you use their sign-in buttons; their privacy policies apply to those.

6. How long we keep it

We keep your account information while your account is open. When you ask us to delete your account, we close it straight away and delete or anonymise your personal information within 30 days. Two things are kept longer: payment records, for as long as tax law requires, and security records, for up to two years.

7. Your rights

You can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct anything that is wrong;
• delete your account and personal information;
• stop a particular use, or withdraw a consent you gave.

To do any of these, email info@toratechai.com or call +251 919 352 801. We answer within 30 days. If you are not satisfied, you can complain to Ethiopia's data protection authority.

8. Security

Everything between your browser and our servers is encrypted. Passwords are stored as one-way hashes, and only staff who need your information to deliver your training can see it. No system is perfectly secure, so tell us at once if you think your account has been misused.

9. Children

Our training is for adults and students. If you are under 18, a parent or guardian must agree to your use of the service.

10. Changes to this policy

When we change this policy we update the date at the top. If a change affects how we use your information in a significant way, we tell you by email or on the site before it takes effect.