Privacy Policy

Welcome to Questo Hub ("we," "our," "platform," or "us"), accessible via https://questocomm.com/. We are dedicated to respecting and protecting the privacy of our users, students, instructors, and visitors. This Privacy Policy governs our data collection, processing, disclosure, and security practices across all our educational services, clinical simulators, job marketplaces, and community forums.

By accessing or using Questo Hub, you consent to the data collection and processing practices described in this Privacy Policy. If you do not agree with this policy, please discontinue the use of our services.

1. Information We Collect

We collect information to provide better educational tools, secure transactions, and personalized academic experiences. The types of data we collect include:

A. Voluntarily Provided Personal Data:

• Account & Profile Information: Full name, username, email address, password hash, role (student, pharmacist, instructor), bio, and profile avatar URL.
• Social Login Information: When registering or logging in via Google OAuth 2.0, we collect your verified name, primary email address, and profile picture as authorized by your Google account settings.
• Instructor Profile & Payout Data: Display name, professional headline, credentials, biography, and payment payout details (bank account or digital wallet details) required to disburse instructor earnings.
• Financial & Payment Transaction Data: When purchasing course subscriptions, clearings, or making donations, payment transactions are processed securely through our authorized payment gateway, Kashier. We collect transaction records, invoice amounts, payment status, and order identifiers. Note: Sensitive cardholder details (such as full 16-digit card numbers, CVV codes, or PINs) are never stored on or transmitted through Questo Hub's servers. All payment entries are handled directly by Kashier's PCI-DSS compliant infrastructure.
• Academic & Submission Data: Performance data in practice quizzes, clinical case simulator decisions, OSCE patient simulator interactions, English assessment scores, scholarship applications, CV uploads, and job application submissions.
• Pharmacy Clearance & Job Postings: Company details, pharmacy contact information, clearance deal descriptions, and job board listings posted by authorized employers.
• Community & Support Data: Public forum posts, comments, likes, reputation metrics, feedback messages, and support inquiries sent through our Contact forms.

B. Automatically Collected Technical Data:

• Device & Network Identifiers: IP address, browser type and version, operating system, language preferences, referring URLs, and timestamps.
• Usage & Performance Metrics: Pages visited, time spent on interactive simulators, click activity, and feature utilization.
• Cookies & Local Storage: Session cookies, security tokens, and local browser state used for authentication, CSRF protection, and analytical performance tracking.

2. How We Use Your Information

We use the collected information for legitimate educational, operational, and commercial purposes, including:

• To operate, maintain, and enhance our website, educational academies, and interactive clinical simulators.
• To process enrollment subscriptions and disburse instructor revenue shares (80% instructor / 20% platform fee) via Kashier.
• To track student academic progress, level progression, XP calculations, and badge achievements.
• To facilitate community discussions, job application submissions, and pharmacy clearance transactions.
• To deliver system notifications, security alerts, order confirmations, and transactional emails.
• To display contextual and personalized advertisements through Google AdSense.
• To detect, prevent, and address fraudulent activities, security breaches, and terms of service violations.

3. Google AdSense & Third-Party Advertising Disclosures

4. Payment Processing & Third-Party Data Sharing

We respect your data and do not sell, rent, or trade your personal information to third parties. We share data only in the following limited circumstances:

• Payment Gateway (Kashier): We share required order details (amount, currency, email, name, user ID) with Kashier Payment Gateway to process billing for paid subscriptions and services. Kashier operates under strict PCI-DSS security standards and Egyptian Banking regulations.
• Cloud Services & Hosting: We utilize trusted infrastructure providers (Cloudflare, secure cloud hosting) for data storage, global CDN distribution, web security, and DDOS mitigation.
• Legal Compliance & Protection: We may disclose personal information if required to do so by applicable law, court order, or governmental authority, or to protect the rights, property, and safety of Questo Hub, our users, or the public.

5. Data Security & SSL Encryption

We implement robust administrative, technical, and physical security measures to safeguard your personal data. All network communication between your browser and Questo Hub is protected using 256-bit SSL/TLS (Secure Sockets Layer) encryption. Password credentials are hashed using industry-standard Bcrypt algorithms. Access to administrative tools is restricted to authorized personnel only.

6. Data Retention & User Rights (GDPR / CCPA)

We retain your personal data for as long as your account remains active or as needed to provide you with our services. Depending on your jurisdiction, you possess the following rights regarding your personal information:

• Access & Portability: You have the right to request a copy of the personal data we hold about you.
• Correction & Rectification: You can update your profile information at any time via your account settings.
• Erasure & Account Deletion: You have the right to request the permanent deletion of your account and associated personal data.
• Withdrawal of Consent: You may withdraw your consent for non-essential processing, such as promotional emails or personalized cookies.

To exercise any of these rights, please contact our support team at support@questocomm.com or via our Contact Support Page.

7. Children's Privacy Notice

Questo Hub is an educational and professional platform intended for students, pharmacists, healthcare practitioners, and adults aged 18 and older (or minors acting with parental/guardian consent). We do not knowingly collect personal data from children under 13. If we become aware that a child under 13 has provided personal data, we will take immediate steps to delete such information.

8. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, platform features, or operational practices. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us at: