Privacy Policy

Who we are and what this policy covers

The Logosphere Tutoring service (the “Service”, “Platform”, “we”, “us”) is operated by [PLACEHOLDER: legal entity name] (the “Provider”), a [PLACEHOLDER: entity type] organised under the laws of [PLACEHOLDER: country / state] with registered office at [PLACEHOLDER: registered address]. Contact us about this policy at contact@logospheretutoring.com.

For users in the European Economic Area, the United Kingdom and Switzerland, the Provider is the “controller” of your personal information for the purposes of the EU and UK General Data Protection Regulation, except where this policy says a third party is a separate controller. For users in the United States the Provider is the “business” (in California) or “controller” (in other US states) responsible for the information.

This policy covers our website, our online tutoring platform, our booking and checkout flows, our online classroom, and our customer support. It does not cover external websites we may link to.

The short version

• We collect the information needed to create your Account, schedule and deliver Lessons, take payment, and support you (name, email, timezone, bookings, messages, classroom content).
• We do not sell your personal information. We share it only with the service providers we need to run the platform, and only where a lawful basis applies.
• Payment card details are entered into Stripe's hosted checkout. We never see or store full card numbers.
• You can access, correct, export, or delete your data, opt out of marketing, and change cookie choices at any time. The Rights sections below describe how.
• For children under 18 the Account must be created by a parent or legal guardian. We follow the children's-privacy rules of your jurisdiction (including COPPA in the United States).

Definitions

• Personal information(or “personal data”) — information that identifies you or relates to an identifiable person.
• Processing — any operation on personal information, such as collecting, storing, using, disclosing, or deleting it.
• Processor(or “service provider”) — a third party that processes personal information on our behalf and under our instructions.
• Sub-processor — a third party engaged by a Processor to assist with processing.
• Sensitive personal information — categories like health, race, religion, biometrics, and other categories defined as sensitive under applicable law. We aim not to collect these.

Information we collect

Information you give us

• Account information — your first name, last name, email address, password (which we store only as a salted hash, not in plain text), and the timezone you prefer for display.
• Identity and consent — your acceptance of these Terms and our Privacy Policy, your cookie-consent choices, and any parental-consent acknowledgements for a Minor in your care.
• Booking and Subscription data — the services and durations you choose, the times you select, the tutor preferences and weekly pattern of any Subscription, the prepay term you choose, and any rescheduling, cancellation, or coverage requests.
• Payments — for accounting, we keep a record of the amount, currency, status, taxes, and Stripe identifiers (such as the checkout session, payment intent, customer, subscription and invoice identifiers) for every transaction. We do not store your full payment card number. Card data is entered into Stripe's hosted checkout and handled by Stripe under its PCI-DSS-compliant systems.
• Communications — messages you send through our in-app messaging area to your tutor or to our support team, and emails you send us.
• Classroom content — text, drawings and files you create or upload to the online whiteboard during a Lesson, and any assignments you submit through the Service.
• Support information — anything you send us when asking for help, reporting a problem, or exercising a privacy right.

Information we collect automatically

• Session and security data — a session token stored in a strictly necessary cookie (lt_session, HttpOnly), the IP address used to make a request, the user-agent string of your browser, and timestamps for sign-in, sign-out, booking, payment, and verification events. We use this to keep you signed in, prevent fraud, throttle abuse, and meet our security obligations.
• Device and usage data — basic information about the browser and device you use, the pages you visit on our website, the time spent and the path you take. Where the data is collected for analytics or advertising, we only collect it with your consent.
• Cookies and similar technologies — see the Cookies section below.

Information from third parties

• From Stripe— payment status, refund status, invoice numbers, the last four digits and brand of the card used (where Stripe makes this available to us for displaying receipts), and information about a Subscription's state. We do not receive your full card number.
• From your tutor — notes about you (for example, level or preferences) added to help personalise your Lessons.

Information we do not knowingly collect

We do not knowingly collect government identifiers, payment card numbers (handled by Stripe), or sensitive categories such as health, race, religion, sexual orientation, or biometrics. Please do not share these through messaging or the classroom.

How we use information

We use personal information for the following purposes:

• Provide the Service — create your Account, authenticate you, show you the calendar, place Holds, book Lessons, assign tutors, deliver the classroom, and support messaging.
• Process payments — take payment through Stripe, issue invoices and receipts, manage Subscription renewals and handle refunds.
• Communicate with you — send transactional emails such as account verification, booking confirmations, lesson reminders, payment receipts, tutor-change notifications, and customer-support replies.
• Provide and improve the classroom — host the online whiteboard, store and serve files you share with your tutor, and keep notes you take in past Lessons.
• Keep the Service safe — detect and prevent abuse, fraud, payment risk, account takeover, denial-of-service attempts, and policy violations; throttle sensitive endpoints; and respond to security incidents.
• Personalise your experience — remember optional interface preferences with your consent.
• Measure and improve — with your consent for analytics cookies, understand how the website is used and improve it.
• Marketing — only where you have given consent or where applicable law permits. You can opt out at any time.
• Comply with law and protect rights — meet our legal obligations (tax, accounting, consumer-protection record-keeping), respond to lawful requests, enforce these Terms, and defend or bring legal claims.

Lawful bases (EU, UK, EEA, Switzerland)

Where the EU or UK GDPR applies, we rely on the following lawful bases:

• Performance of a contract — to create and run your Account and deliver the Lessons and Subscriptions you book.
• Legitimate interests — to keep the Service safe and reliable, to prevent fraud and abuse, to defend legal claims, to maintain operational records, and to improve the Service. Where we rely on legitimate interests we balance them against your rights and freedoms; you can object as described below.
• Consent — for analytics and marketing cookies, optional interface preferences, marketing emails, and any other processing for which we ask. You can withdraw consent at any time.
• Legal obligation — to retain tax and accounting records, to comply with sanctions screening, to respond to lawful requests, and to satisfy other regulatory duties.
• Vital interests— in rare cases, to protect someone's life or physical safety.

Who we share information with

We share personal information only as described below.

Service providers (sub-processors)

We use carefully selected third parties to operate the Service. They act as our processors and may use the data only to provide the contracted service to us. See the next section for the current list.

Your tutor

Your tutor receives the information needed to deliver your Lessons: your name, your timezone, the Lesson times you book, any preferences you share, and the messages and classroom content you send. Tutors are bound by our internal confidentiality and information-handling rules.

Other students

The Service does not show your personal information to other students. Group features, if introduced, will be announced and governed by a specific notice.

Legal, safety and compliance disclosures

We may share information where we believe in good faith that it is necessary to comply with the law, a lawful request, a court order, or a regulatory requirement; to enforce our agreements; to detect, investigate, or prevent fraud or security incidents; or to protect our rights, your safety, or the safety of others.

Business transfers

If we are involved in a merger, acquisition, financing, asset sale, insolvency, or similar transaction, personal information may be transferred as part of that transaction, subject to confidentiality obligations and to this policy.

With your direction

We share information with other parties when you ask us to.

Our service providers (sub-processors)

The current list of service providers is:

• Stripe, Inc.— payment processing and Subscriptions. Card data is entered directly into Stripe's hosted checkout. Stripe is based in the United States with operations in the European Union and the United Kingdom. See Stripe's Privacy Policy.
• Google LLC — Google Meet (where selected as the meeting provider for a Lesson), Google Tag Manager and Google Analytics (loaded only after you grant analytics consent), and Google Fonts (for typography). Google is based in the United States with operations in the European Union. See Google's Privacy Policy.
• Resend (Resend, Inc.) — sending transactional emails such as account verification, booking confirmations, and password reset emails. Resend is based in the United States. See Resend's Privacy Policy.
• [PLACEHOLDER: hosting provider, e.g. Hostinger / DigitalOcean] — the cloud hosting on which our application and database run. Located in [PLACEHOLDER: hosting region, e.g. EU / US].

We may add or replace service providers from time to time and will update this list when we do. We require each service provider to process personal information only on our documented instructions, to keep it confidential and secure, and to assist with rights requests.

International data transfers

Some of our service providers are based outside your country, including in the United States. Where we transfer personal information out of the United Kingdom, the European Economic Area, or Switzerland, we rely on one or more of the following safeguards:

• adequacy decisions, including the EU-US Data Privacy Framework and the UK Extension to the Data Privacy Framework, where the receiving organisation is certified;
• the European Commission's Standard Contractual Clauses together with additional safeguards where appropriate;
• the United Kingdom's International Data Transfer Addendum (or the International Data Transfer Agreement) for transfers from the UK;
• your explicit consent, where applicable and lawful.

You can ask us for a copy of the safeguards in place for a specific transfer by writing to contact@logospheretutoring.com.

Retention

We keep personal information only for as long as we need it for the purposes described in this policy, after which we either delete it or de-identify it. The general retention rules are:

• Account data — for as long as your Account is active, and for a reasonable winding-down period after closure to handle disputes and to satisfy our records of how the Account was closed.
• Booking, payment, and Subscription records — for the period required by tax, accounting, and consumer-protection law (typically [PLACEHOLDER: e.g. six] years from the end of the financial year of the transaction).
• Messages and classroom content — for as long as your Account is active. After deletion of the relevant Booking or Lesson, content is retained for a short period to support refunds and dispute resolution, then deleted or de-identified.
• Email logs and security logs — for a limited period necessary to investigate abuse and meet security obligations (typically [PLACEHOLDER: e.g. 12 to 24] months).
• Cookie consent record — up to 180 days from the time you last expressed a choice. Strictly necessary cookies are kept only for the period needed to perform their function (for example, the session cookie expires when your session ends).
• Marketing data — until you opt out, and then a short period afterwards to confirm we have respected the opt-out.

Where law requires us to keep records (for example tax records) we do so for the statutory period and protect them with appropriate access controls during that time.

How we protect your information

We use industry-standard technical and organisational measures:

• Encryption of personal information in transit using TLS, and at rest using disk-level and database-level protection.
• Passwords stored only as salted hashes; we never store the plaintext password and cannot recover it for you (you can reset it).
• Session cookies marked HttpOnly and Secure; session tokens with limited lifetimes and per-event invalidation.
• Rate-limiting on sensitive endpoints (registration, login, password reset, email verification) to deter brute-force and scripted abuse.
• Card data isolation by design — full card numbers are entered into Stripe's hosted checkout and never touch our servers.
• Role-based access controls, principle of least privilege for staff, and audit logging of administrative actions.
• Confidentiality undertakings for staff with access to personal information.
• Regular software updates, dependency audits, and incident-response procedures.

No system is completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authorities and, where required by law, you, without undue delay.

Your rights (EU, UK, EEA, Switzerland)

Where the EU or UK GDPR applies, you have the following rights:

• Access — confirmation of whether we hold personal information about you and a copy of it.
• Rectification — correction of inaccurate or incomplete information.
• Erasure — deletion in certain circumstances, such as when the information is no longer needed for the purposes for which it was collected.
• Restriction of processing — limiting how we use your information in certain circumstances.
• Objection — to processing based on our legitimate interests, including profiling, and to direct marketing at any time.
• Data portability — receive a copy of the information you provided to us in a structured, commonly used and machine-readable format.
• Withdraw consent — for any processing based on consent, at any time, without affecting prior processing.
• Lodge a complaint— with your local supervisory authority. In the United Kingdom this is the Information Commissioner's Office (ico.org.uk).

To exercise any of these rights, contact contact@logospheretutoring.com. We may need to verify your identity before responding. We will respond within the time limits set by applicable law (generally within one month). There is no fee for a reasonable request; excessive or manifestly unfounded requests may be refused or charged for as permitted by law.

Your rights (California)

If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act, the “CCPA”) gives you the following rights:

• Right to know what categories and specific pieces of personal information we have collected, where we obtained it, why we collected it, and the categories of third parties with which we shared it.
• Right to delete personal information we have collected, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing. We do not sellpersonal information for monetary consideration. We may “share” limited information through analytics and (if enabled) advertising cookies for cross-context behavioural advertising. You can opt out by setting marketing cookies to “off” in our cookie settings or by enabling Global Privacy Control in your browser.
• Right to limit use of sensitive personal information— although we aim not to collect sensitive personal information, where we do, you can ask us to limit its use to what is necessary to provide the Service.
• Right to non-discrimination for exercising any of these rights — we will not deny you the Service, charge a different price, or provide a different level of quality because you exercised a right.

To exercise these rights, write to contact@logospheretutoring.com or use the cookie settings linked in the website footer for opt-outs. Authorised agents may submit a request on your behalf with proof of authority.

Categories of information and sources

In the last 12 months we have collected the following categories of personal information under the CCPA: identifiers (name, email, IP address, account identifier); customer records (booking and payment records); commercial information (purchase history); internet activity (browsing on our website); geolocation (timezone and approximate region inferred from IP); audio/visual (in real time during Lessons, not recorded by us absent explicit consent); and professional or educational information voluntarily shared with your tutor.

Your rights (other US states)

If you are a resident of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, or another US state with a comprehensive privacy law in effect, you have similar rights to access, correct, delete, and obtain a copy of your personal information, and to opt out of targeted advertising, sale, or significant profiling. You can exercise these rights through the contact details above. Where applicable law provides an appeal mechanism, you may appeal a decision by replying to our response.

Children's privacy

Lessons are open to students of all ages, but the Account holder must be at least 18. Where the Student is under 18, the Account must be created and maintained by a parent or legal guardian (the “Parent”), who accepts our Terms and this policy on the Minor's behalf and supervises the Minor's use of the Service.

For users in the United States, where the Minor is under 13 we process the Minor's personal information only with the verifiable consent of the Parent and only to the extent necessary to provide the Service to the Minor, in line with the Children's Online Privacy Protection Act (COPPA). We do not use a Minor's personal information for behavioural advertising or marketing. A Parent may at any time review the personal information we hold about a Minor, ask us to delete it, and refuse further collection.

For users in the United Kingdom and the European Economic Area, processing of a Minor's personal information takes place on the basis of parental responsibility, contract, and (where applicable) parental consent under Article 8 of the GDPR.

Cookies and similar technologies

We use cookies and similar technologies to operate the Service and, where you consent, to measure use and (in future) to support marketing. You can review and change your choices at any time from the “Cookie Settings” link in the website footer.

Categories

• Strictly necessary — required for login, account security, booking checkout, payment processing, cookie choices, and core platform functions. These are set without consent because you have asked for the service that uses them. Examples include our session cookie lt_session and our cookie consent record logosphere_cookie_consent_v1.
• Preferences — remember optional interface preferences that improve your experience but are not required. Set only with your consent.
• Analytics — help us understand page usage and improve the website. Google Analytics is only loaded after you grant analytics consent.
• Marketing and ad personalisation — allow advertising measurement, remarketing and personalised advertising features, if and when those tools are enabled. Turning this off is treated as an opt-out of sale or sharing for targeted advertising.

We respect a recognised Global Privacy Control signal sent by your browser as an opt-out of sale and sharing for targeted advertising.

Consent record

When you express a cookie choice, we store the choice in a first-party cookie and retain it for up to 180 days so that we do not have to ask you on every visit. You can clear the choice from the cookie settings link in the footer.

Emails and other notifications

We send transactional emails — verification, booking confirmations, reminders, payment receipts, tutor-change notifications, password-reset emails, and replies from support — to operate the Service. You cannot opt out of these while your Account is active.

Marketing emails are only sent where you have given consent or where applicable law allows them. Each marketing email contains a one-click unsubscribe link. You can also opt out at any time by writing to contact@logospheretutoring.com.

Classroom, video, and messaging

Lessons are delivered through a third-party video provider (such as Google Meet) and an interactive online whiteboard hosted by us. By joining a Lesson you consent to use of your camera and microphone during the Lesson and to processing the audio and video stream as needed to deliver the Lesson. We do not record Lessons by default; any recording requires our prior consent and the explicit consent of every participant.

Whiteboard content, file uploads, and messages remain associated with the Lesson and may be made available to you afterwards in your dashboard, until you delete them or until the retention period above expires.

Our in-app messaging is private to you, your tutor, and (where applicable) our support team. It is not encrypted end-to-end and may be reviewed by us where necessary for safety, quality assurance, dispute resolution, or compliance with law.

Automated decision-making and profiling

We do not make decisions that produce legal or similarly significant effects about you solely by automated means. Routine automated processing in the Service — such as matching available time slots to your preferences, suggesting tutor-friendly slot adjustments, or throttling abusive traffic — does not produce such effects and is always subject to human review when you ask for one.

Account closure and deletion

You can close your Account from your profile screen or by writing to us. On closure we will delete or de-identify personal information that we no longer have a lawful basis to keep, within a reasonable winding-down period. We will retain information for as long as a legal obligation requires (for example, tax records), to handle disputes that are open, and to defend legal claims, after which we will delete or de-identify it.

Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date at the top and, where the change is material, notify you in advance through your Account or by email at least 14 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

Contact us

For any privacy question or to exercise a right under this policy:

• By email: contact@logospheretutoring.com
• By post: [PLACEHOLDER: legal entity name], [PLACEHOLDER: registered address]
• Data Protection Officer / Privacy contact: [PLACEHOLDER: name or role of privacy contact, where appointed]
• EU representative (Article 27 GDPR): [PLACEHOLDER: EU representative, if appointed]
• UK representative (Article 27 UK GDPR): [PLACEHOLDER: UK representative, if appointed]

You can also review and change your cookie choices at any time from the Cookie Settings link in the website footer.