Privacy Policy

1. Introduction

TutorBoost, LLC ("TutorBoost," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website at tutorboost.org and our services (collectively, the "Service"). Please read this policy carefully. By using the Service, you consent to the data practices described herein.

2. Information We Collect

2.1 Personal Information You Provide

We collect information you voluntarily provide when using our Service:

• Account Information: Name, email address, password, and phone number
• Profile Information: Professional details including subject expertise, years of experience, certifications, biography, teaching style, and hourly rates
• Media Content: Profile photographs, video introductions, and certificate images
• Payment Information: Billing address and payment details (processed securely through Stripe; we do not store full credit card numbers)
• Contact Information: Booking links, WhatsApp numbers, and contact emails you choose to display publicly
• Communications: Messages you send to us for support or inquiries

2.2 Information Collected Automatically

When you access our Service, we automatically collect:

• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, pages viewed, referring URL
• Usage Data: Features used, actions taken, campaign performance metrics
• Cookies and Tracking: Session cookies, authentication tokens, and analytics data

2.3 Information from Third Parties

• Authentication Providers: Profile information from Clerk (Google, email sign-in)
• Advertising Platforms: Campaign performance data from Meta (Facebook/Instagram)
• Payment Processors: Transaction confirmations from Stripe

3. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: Create and manage your tutor profile, run advertising campaigns on Meta platforms
• Payment Processing: Process subscription fees and ad budget transactions
• Communications: Send transactional emails (welcome, ad status updates, weekly performance reports)
• Customer Support: Respond to inquiries and provide technical assistance
• Analytics: Monitor and analyze usage patterns to improve our Service
• Security: Detect and prevent fraud, abuse, and security incidents
• Legal Compliance: Comply with applicable laws, regulations, and legal processes
• Marketing: With your consent, send promotional communications about new features

4. Information Sharing and Disclosure

We share your information in the following circumstances:

4.1 Service Providers

• Meta Platforms, Inc.: To create and manage advertising campaigns on Facebook and Instagram on your behalf
• Stripe, Inc.: To process payments securely
• Clerk, Inc.: For user authentication and account management
• Supabase, Inc.: For database hosting and file storage
• Resend: To send transactional emails
• Vercel, Inc.: For website hosting and deployment

4.2 Public Information

Your public tutor profile (name, subject, bio, photo, booking link) is visible to anyone who views your profile page or sees your advertisements. This is essential to the Service's purpose of connecting you with potential students.

4.3 Legal Requirements

We may disclose information when required by law, subpoena, court order, or government request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Security

We implement industry-standard security measures to protect your data, including:

• SSL/TLS encryption for data in transit
• Encrypted database storage
• Secure authentication through Clerk
• PCI-compliant payment processing through Stripe
• Regular security audits and monitoring
• Access controls and authentication requirements

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

6. Your Privacy Rights

6.1 General Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a portable, machine-readable format
• Objection: Object to certain processing of your data
• Restriction: Request restriction of processing in certain circumstances
• Withdrawal: Withdraw consent at any time where processing is based on consent

6.2 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete, the right to opt-out of sale (we do not sell personal information), and the right to non-discrimination for exercising privacy rights.

6.3 European Residents (GDPR)

If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). Our legal basis for processing includes: performance of contract, legitimate interests, compliance with legal obligations, and consent where applicable.

To exercise any of these rights, contact us at privacy@tutorboost.org. We will respond within 30 days.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for the following periods:

• Transaction Records: 7 years (for tax and legal compliance)
• Campaign Performance Data: 3 years (for analytics and reporting)
• Support Communications: 2 years
• Server Logs: 90 days

8. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for authentication and security
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how visitors use our Service

You can control cookies through your browser settings. Disabling certain cookies may affect Service functionality.

9. Third-Party Links

Our Service may contain links to third-party websites (e.g., your booking platform, social media profiles). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our Service is intended for users who are at least 18 years old. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with personal information, please contact us immediately at privacy@tutorboost.org, and we will delete such information.

11. International Data Transfers

Your data may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection laws than your country of residence. By using our Service, you consent to such transfers. We ensure appropriate safeguards are in place, including standard contractual clauses where required.

12. Do Not Track Signals

Our Service does not currently respond to "Do Not Track" signals from browsers. However, you can control tracking through your browser settings and cookie preferences.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by email and/or by posting a prominent notice on our Service prior to the change becoming effective. The "Last updated" date at the top indicates when this policy was last revised. Your continued use of the Service after any changes indicates your acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries, you may also contact your local data protection authority.