Privacy Policy

We collect the following categories of personal information:

Information you provide directly

• Full name, email address, phone number
• Postal address and geographic location
• Profile photo and professional biography
• Banking and payment information
• Academic qualifications and certifications
• Background check information (for tutors)

Information collected automatically

• IP address and browser type
• Pages visited and time spent on the platform
• Device and operating system used
• Authentication and connection logs

Your personal information is used for the following purposes:

• Service delivery: managing tutoring sessions, scheduling, and communications between tutors, clients, and administrators
• Account management: creating and maintaining your user account
• Billing: processing invoices, payments, and payroll
• Platform improvement: analyzing usage to enhance features and user experience
• Security: fraud detection and prevention, protecting our systems
• Legal compliance: meeting our regulatory and legal obligations
• Communications: sending notifications related to our services (session reminders, invoices, important updates)

We do not sell your personal information. We may share it with:

• Service providers: hosting (Vercel), database (Supabase), payment processing (Stripe), email delivery (SendGrid)
• Platform participants: necessary information shared between tutors and clients to facilitate tutoring services
• Legal authorities: when required by law or legal process
• Professional advisors: accountants, lawyers, as needed for business operations

All our service providers are bound by contractual obligations to protect your data and use it only for the purposes specified.

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit (TLS/SSL) and at rest
• Row-Level Security (RLS) policies on all database tables
• Multi-factor authentication for administrative accounts
• Regular security audits and access reviews
• Principle of least privilege for all system access
• Automated threat monitoring and alerting

In accordance with Quebec's Law 25 (Act respecting the protection of personal information in the private sector) and the Personal Information Protection and Electronic Documents Act (PIPEDA), you have the following rights:

• Right of access: obtain a copy of the personal information we hold about you
• Right of rectification: request correction of inaccurate or incomplete information
• Right to deletion: request the erasure of your personal data, subject to legal retention requirements
• Right to withdraw consent: withdraw your consent to data processing at any time
• Right to portability: receive your data in a structured, commonly used format
• Right to file a complaint: contact the Commission d'accès à l'information du Québec (CAI)

To exercise any of these rights, please contact us at the address provided in Section 7.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specifically:

• Active account data: retained for the duration of your account
• Billing records: retained for 7 years as required by tax law
• Communication logs: retained for 3 years after last interaction
• Deleted accounts: data anonymized within 90 days of confirmed deletion

International Transfer

Our primary data infrastructure is hosted in Canada (ca-central-1). Some service providers may process data in the United States. In all cases, appropriate safeguards are in place to ensure compliance with Canadian privacy legislation.

For any questions regarding this privacy policy or to exercise your rights, you may contact us:

We will respond to your request within 30 days of receipt, in accordance with applicable legislation.