Privacy Policy

1. Introduction

The Margam (“we,” “us,” or “our”) operates the platform at themargamusa.com (the “Platform”). This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and your rights regarding that information. By using the Platform, you consent to the practices described in this policy.

2. Information We Collect

2a. Information You Provide

• Account information: name, email address, and password when you create an account
• Profile information: university name, program of study, intake term, visa status, and other onboarding details you choose to provide
• Payment information: processed securely by Stripe. We do not store your credit card number, CVV, or full card details on our servers
• Course activity: quiz responses, confidence ratings, chapter feedback, learning notes, action item completions, and exit survey responses
• Communications: any messages you send us via email or through the Platform
• LinkedIn URL: if you choose to share it for alumni network access

2b. Information Collected Automatically

• Usage data: pages visited, time spent on chapters, course completion progress, and feature interactions
• Device information: browser type, operating system, screen resolution, and device type
• Log data: IP address, access timestamps, and referring URLs
• Cookies: we use essential cookies for authentication and session management. See Section 7 for details

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Platform and course experience
• Process your payment and grant course access
• Track your course progress, quiz scores, and generate your certificate of completion
• Personalize your F-1 journey roadmap based on your program dates and visa timeline
• Send you important notifications about deadlines, course updates, and account activity
• Respond to your questions and support requests
• Generate aggregate, anonymized analytics to improve our content and measure learning outcomes
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

• Service providers: we use third-party services including Firebase (authentication and database), Stripe (payment processing), and VdoCipher (video hosting). These providers access only the data necessary to perform their functions and are bound by their own privacy policies.
• Aggregate data: we may share anonymized, aggregate statistics (such as average quiz score improvements or completion rates) with partners, investors, or in public communications. This data cannot be used to identify any individual user.
• Private LinkedIn group: membership includes access to a private LinkedIn group. Any activity within that group takes place on LinkedIn's platform and is governed by LinkedIn's own privacy policy.
• Legal requirements: we may disclose your information if required by law, regulation, legal process, or governmental request.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on the Platform before your information becomes subject to a different privacy policy.

5. Data Storage and Security

Your data is stored using Google Firebase (Firestore) with servers located in the United States. We implement industry-standard security measures including encrypted connections (HTTPS/TLS), Firebase Authentication with secure token management, and Firestore security rules that restrict data access to authenticated users viewing only their own records.

Payment information is handled entirely by Stripe, which is PCI DSS Level 1 certified. We never store, process, or have access to your full payment card details.

While we take reasonable precautions to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your account and course data for as long as your account is active or as needed to provide you with access to your certificate and learning notes. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal, accounting, or legitimate business purposes. Anonymized aggregate data (which cannot identify you) may be retained indefinitely.

7. Cookies

We use cookies and similar technologies for the following purposes:

• Essential cookies: required for authentication, session management, and security. These cannot be disabled.
• Functional cookies: remember your preferences such as sidebar state and notification settings.

We do not use advertising or third-party tracking cookies. We do not participate in ad networks or sell data to advertisers.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal data, subject to legal retention requirements
• Data portability: request your data in a structured, machine-readable format
• Opt-out of communications: unsubscribe from non-essential emails at any time using the link in any email or by visiting the unsubscribe page

To exercise any of these rights, contact us at hello@themargamusa.com. We will respond within 30 days.

9. Children's Privacy

The Platform is not intended for children under 18 years of age. We do not knowingly collect personal information from anyone under 18 without parental consent. If we become aware that we have collected data from a minor without appropriate consent, we will take steps to delete that information promptly.

10. International Users

The Platform is operated from the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Platform, you consent to this transfer.

10a. International Data Storage and Transfer

The Margam stores student data on servers located in the United States, operated by Google Firebase. By creating an account, you consent to the transfer and storage of your personal data in the United States. If you are located outside the United States, including in India or other countries with data protection laws such as the Digital Personal Data Protection Act (India, 2023), you acknowledge that data protection standards may differ from those in your home country. You may request deletion of your data at any time by contacting hello@themargamusa.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. If we make material changes, we will notify you by email or through a prominent notice on the Platform. Your continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.

12. Contact

If you have questions about this Privacy Policy or how we handle your data, please contact us at hello@themargamusa.com.