Legal · Trust

Your data, handled with respect.

Plain-English answers to "what does NOA Labs know about me?" — no dark patterns, no selling, no surprises.

Effective January 1, 2026 · Last reviewed January 1, 2026

1. Overview

NOA Labs ("we", "us", "our") is a mentor-led tech education platform based in Pakistan. This policy explains what personal data we collect when you use noalabs.org, why we collect it, who can see it, and how you can control it.

We try to keep this short. Where we use a legal term, we explain it. If anything is still unclear, email info@noalabs.org and a human will reply.

2. What we collect

👤
Account basics

Name, email, password (hashed), country, WhatsApp number, designation.

🎓
Learning data

Programs you enrol in, Skill Forge attempts and scores, mock-interview submissions, assignment files.

💳
Payment details

Receipt screenshots, transaction IDs and payment-method choice. We never store full card numbers.

🌐
Public profile

Bio, headline, GitHub/LinkedIn/portfolio links, skills, avatar — only if you opt in to the talent pool.

📊
Usage logs

IP address, browser, pages visited, timing — used to debug issues and prevent abuse.

🔐
Google sign-in

If you sign in with Google, we receive your name, email, profile picture and a Google user ID.

3. How we use it

  • To run your account — sign in, profile, enrolments, mentor messages, certificates.
  • To proctor Skill Forge tests (we record tab-switches during an attempt, nothing more).
  • To verify payments you submit on the fee screen.
  • To improve the platform — bug fixes, abuse prevention, anonymised analytics.
  • To contact you about your account, programs, or replies from mentors.

We do not use your data to train AI models, sell to advertisers, or share with third parties for marketing.

4. Sharing & disclosure

We share data only with a small set of trusted services that help us run the platform:

Hosting

Servers and databases that store your account safely.

Email delivery

For OTPs, mentor replies and assignment notifications.

Payment review

A human admin manually verifies the receipts you upload.

If we're ever required by law to disclose data, we'll try to notify you first unless we're legally barred from doing so.

5. Cookies & analytics

We use a session cookie to keep you logged in and a CSRF token to protect form submissions. That's it for required cookies. If we add analytics in the future, we'll use privacy-respecting tools (no third-party trackers) and update this section.

6. Where your data lives

Your data is stored on servers we control. Backups are encrypted. Passwords are never stored in plain text — they're bcrypt-hashed, so even our database admins can't read them.

We retain account data while your account is active. Skill Forge attempts and certificates are kept as long as the certificate is valid (so it can be publicly verified). Deleted accounts are wiped within 30 days, except where the law requires us to keep records longer (e.g., payment receipts for tax audits).

7. Your rights

Access

Ask for a copy of all data we hold about you.

Correct

Update your profile, designation or contact info any time.

Delete

Request full account deletion — we honour it within 30 days.

Hide

Toggle your talent-pool profile off so it stops appearing publicly.

8. Children & minors

NOA Labs is built for students aged 13 and above. If you're under 13, please don't create an account. If you're under 18, we recommend chatting with a parent or guardian before sharing your WhatsApp number or payment details.

9. Changes to this policy

If we make a meaningful change, we'll update the "Effective" date at the top of this page and — for big changes — email everyone with an active account. By continuing to use the platform after we update this page, you agree to the new version.

10. Contact us

Questions, complaints, or want a copy of your data? A human will reply within two working days.