TrioShot ("we", "us") operates the TrioShot platform — including the Academy, Library, Wallet, Blog, and project services — from the State of Qatar. This policy explains what personal data we collect, why, and the rights you hold over it, in line with Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016, "PDPPL") and, where applicable to visitors from other jurisdictions, comparable data-protection principles.
1. Data we collect
Account data: email address, display name, profile details you choose to add (headline, avatar). Transaction data: credit purchases, subscriptions, course enrollments, and asset downloads. Card details are processed by Stripe and never touch our servers. Learning data: course progress, quiz results, and certificates. Technical data: IP address, browser type, and request logs kept for security and reliability. Communications: messages you send via contact, support, or project brief forms.
2. Why we process it
To provide the services you request (accounts, purchases, learning records, certificates); to process payments through our payment providers; to secure the platform (fraud prevention, rate limiting, audit trails); to send transactional messages (receipts, enrollment confirmations, project updates); and — only with your consent — optional notification channels you enable in your profile settings.
3. Who we share it with
Payment processing: Stripe. Email delivery: our SMTP provider. AI assistant: if you use the chat assistant, your messages are processed by Anthropic to generate responses. Hosting and infrastructure providers under contractual confidentiality. We do not sell personal data, and we do not share it with advertisers.
4. Retention
Account data is kept while your account is active. Transaction and credit-ledger records are retained as required for financial audit purposes. Request logs are retained for a limited security window. You may request deletion of your account; records we are legally required to keep (e.g., payment records) are retained for the mandated period only.
5. Your rights
You may request access to, correction of, or deletion of your personal data, and withdraw consent for optional channels at any time from your profile settings. To exercise any right, contact us at privacy@trioshot.net. We will respond within a reasonable period consistent with applicable law.
6. Security
We apply industry-standard controls: encrypted transport (HTTPS), hashed credentials, role-based access, audit logging of credit movements, and content-security policies. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the competent authority as required by the PDPPL.
7. Cookies
We group cookies into categories. Necessary cookies are always active; the others require your consent, which you give (or withdraw) via the cookie banner or the “Cookie Preferences” link in the footer.
| Category | Purpose | Consent |
|---|---|---|
| Necessary | Keeps you signed in, protects forms (anti-forgery), and remembers your consent choice. | Always on |
| Preferences | Remembers your language and display currency. | Opt-in |
| Analytics | Anonymous usage statistics to help us improve the product. | Opt-in |
| Marketing | Measures campaign performance and relevance. | Opt-in |
You can change your choices any time via Cookie Preferences. Under GDPR you may accept, reject, or granularly select non-essential categories; rejecting them does not affect access to the service.
8. Changes
We will post any changes to this policy on this page with an updated date. Material changes will be announced on the platform.
Questions? Contact privacy@trioshot.net.