Privacy Policy

Effective Date: April 11, 2026

Version: 2026-04-11

1. Scope

This Privacy Policy describes how we collect, use, disclose, retain, and protect personal data when tenants and end users use the platform.

This includes data relating to administrators, teachers, parents, students, and site visitors.

2. Personal Data We Collect

We may collect:

• account details such as names, email addresses, phone numbers, and passwords
• organization and tenant setup details
• user role, login, and authentication data
• student and contact information entered by tenants
• schedule, attendance, lesson, and payment records
• IP addresses, browser details, device information, and usage logs
• audit records and security event logs
• consent and agreement acceptance records
• cookie and local preference information

3. How We Use Personal Data

We use data to:

• create and manage tenant and user accounts
• provide the service and core platform features
• authenticate users and secure accounts
• support scheduling, attendance, student management, and payment workflows
• monitor service health, prevent abuse, and investigate incidents
• comply with legal obligations
• communicate service notices and support responses
• maintain audit trails and compliance records
• improve product quality using internal analytics or aggregated reporting

4. Legal Basis and Role Allocation

For tenant-provided end-user data, the tenant typically acts as the data controller and we act as a data processor or service provider.

For platform account data, security logs, billing records, and direct communications with us, we may act as an independent controller where applicable.

5. Data Sharing

We do not sell personal data.

We may share data with service providers that help us operate the platform, such as hosting, database, cloud, email, authentication, logging, backup, or infrastructure vendors.

We may also disclose data if required by law, valid legal process, or to protect rights, safety, users, or the integrity of the service.

6. Cookies and Similar Technologies

We use cookies and similar technologies to keep users signed in, secure sessions, store preferences, and support core site functionality.

If we introduce non-essential analytics or advertising technologies, we may update this policy and request any consent required by law.

Please also review our Cookie Policy.

7. Data Retention

We retain personal data only as long as reasonably necessary to provide the service, maintain security, support legitimate business operations, meet contractual duties, or comply with law.

Retention periods may vary depending on the type of data, tenant configuration, and legal requirements.

Backups may persist for a limited period after deletion.

8. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal data, including access controls, password hashing, encrypted transport, and audit logging where implemented.

However, no system can guarantee absolute security.

9. User Rights

Depending on your location, you may have rights such as:

• right to know or access personal data
• right to request deletion
• right to correction
• right to data portability where applicable
• right to object to certain processing where applicable
• right to opt out of certain sharing under applicable law

Tenants may need to submit certain end-user requests to us on behalf of their users when we act as processor.

10. California Privacy Rights

If California law applies, California residents may have rights under CCPA or CPRA to request access to certain personal information, request deletion, and receive information about categories of data collected and disclosed.

We do not sell personal information as traditionally defined.

11. European Privacy Rights

If GDPR or similar laws apply, data subjects may have rights including access, correction, deletion, restriction, portability, and objection, subject to legal limitations.

Where we act as processor, tenants are primarily responsible for responding to data subject requests.

12. Children and School Data

The platform may be used by parents, students, schools, and studios.

Tenants are responsible for determining and complying with legal requirements relating to minors, educational records, parental authorization, and local notice obligations when they use the platform.

13. International Transfers

Data may be stored or processed in countries other than the country where the user is located, subject to applicable safeguards and contractual protections where required.

14. Changes to This Policy

We may update this Privacy Policy from time to time.

When we do, we may update the effective date and version number and provide notice where required.

15. Contact and Requests

Privacy requests may be submitted using the contact details published on the platform or through tenant administrators, depending on the nature of the request.