Privacy Policy

# Privacy Policy

**Version 1.0 — Last updated: [DATE TO BE SET AT PUBLICATION]**

*This is a starting draft prepared for MyTuto (EduConnect Suite) and
requires review by a qualified lawyer familiar with applicable data
protection law before being relied upon in production.*

## 1. Who We Are

MyTuto ("we," "us," "our," "the Platform") operates an online tutoring
marketplace connecting students, parents, and teachers.

## 2. Information We Collect

- **Account information**: name, email, mobile number, date of birth, country
- **Identity verification (teachers)**: government ID documents, selfie photographs, used solely to verify teacher identity before allowing them to accept students
- **Payment information**: transaction records processed through our payment gateway partners; we do not store full card numbers ourselves
- **Communications**: messages exchanged through the Platform between students, parents, and teachers
- **Usage data**: pages visited, searches performed, and similar activity, used to improve the Platform and understand how it's used

## 3. How We Use Your Information

We use your information to operate the Platform: matching students with teachers, processing payments, facilitating communication, verifying teacher identity, sending relevant notifications, and improving our services.

## 4. Platform Staff Access to Communications

**Super Admin and other authorized staff members can access all
communications sent through the Platform — including messages between
students, parents, and teachers, and support tickets — for safety
monitoring, dispute resolution, fraud prevention, and legal or
regulatory compliance purposes.** This access is logged and audited.
By using the Platform, you acknowledge and consent to this monitoring.

## 5. Cookies

We use cookies for essential Platform functionality (keeping you
logged in, remembering your preferences) and, where you've consented,
for analytics purposes to understand how the Platform is used. You can
manage your cookie preferences at any time through the cookie banner
shown on your first visit, or by clearing your browser's cookies for
this site.

## 6. Third-Party Service Providers

We share information with third-party providers as necessary to
operate the Platform, including: payment gateways for processing
transactions, video conferencing providers (Zoom, Google Meet) for
delivering sessions, push notification and email delivery providers,
and analytics providers (where you've consented to non-essential
cookies). Each provider only receives the information necessary to
perform its specific function.

## 7. Your Rights

You have the right to request a copy of the personal data we hold
about you, and to request deletion of your account and associated
data, subject to legal retention requirements (for example, financial
transaction records we're required to retain for tax and audit
purposes). You can make either request from your account settings.
Account deletion requests are reviewed by our team before being
completed, since this action is irreversible.

## 8. Children's Privacy (COPPA)

Where a student is a minor, we require verifiable parental consent
before their account becomes active, and parents can review, manage,
or withdraw consent for their child's account at any time. We retain
records of parental consent for compliance and audit purposes.

## 9. Data Retention

We retain personal data for as long as your account is active, and
for a limited period afterward as required for legal, tax, and
dispute-resolution purposes. Specific retention periods by data type
are available on request.

## 10. Contact Us

Questions about this Privacy Policy can be directed to our support team through the Platform's support ticket system.