Privacy Policy
Last updated: 15 July 2026. This page is maintained by The Setup Agency to answer common privacy questions about our platform.
The Setup Agency ("The Setup", "we", "us") operates thesetupagency.com and its associated learning academy and creator marketplace. We take your privacy seriously and only collect what we need to run the service.
1. Data we collect. (a) Account info you give us: email, name, phone number, Instagram handle, and password (stored hashed). (b) Payment info: for course purchases we collect the sender name and a screenshot/reference of your bank transfer or FIB / Super Qi payment. We do not store card numbers — we do not accept cards directly. (c) Learning activity: courses viewed, lessons completed, quiz answers, certificates issued. (d) Marketplace activity (if you use it): profile content, applications, messages, project deliverables. (e) Technical logs: IP address, browser, device type, and pages visited, retained for up to 90 days for security and abuse prevention.
2. How we use your data. To create and secure your account, deliver courses you paid for, issue certificates, process manual bank payments, respond to support requests, send transactional emails (receipts, password resets, course updates), and improve the product. We do not use your data to train third-party AI models.
3. Legal basis. Contract (delivering the course you paid for), legitimate interest (fraud prevention, service improvement), and consent (marketing emails, which you can opt out of at any time).
4. Who we share data with. We share the minimum necessary with the vendors that run the service on our behalf: our hosting and database provider, our email delivery provider, and — where you use it — our AI study assistant provider. We do not sell your personal data. We do not run advertising trackers, ad pixels, or third-party marketing tags. We may disclose data if legally required by a competent authority.
5. International transfers. The Setup operates from Iraq. Some of our vendors process data outside your country. Where required, transfers rely on the vendor's standard contractual protections.
6. Retention. Account and course records are retained for as long as your account is active. Payment records are kept for up to 7 years to meet accounting and tax obligations. Technical logs are retained for up to 90 days. If you delete your account, we remove your profile and personal identifiers, but keep anonymised transaction records for the retention period above.
7. Your rights. You may access, correct, export, or delete your personal data, or object to processing. To exercise any of these, email lanya.bio@icloud.com from the address on your account. We respond within 30 days.
8. Security. Passwords are hashed, data is transmitted over HTTPS, and access to production data is restricted to a small number of authorised staff. No online service is 100% secure — if we discover a breach affecting your data, we will notify you without undue delay.
9. Children. The Setup is not intended for children under 16. Do not create an account if you are under 16.
10. Changes. If we change this policy materially, we will notify you by email or in-app before the change takes effect.
Contact. Privacy questions: lanya.bio@icloud.com or WhatsApp +964 770 243 1008.