Privacy policy
Last updated November 13, 2026
TutorPetal collects only the information needed to run classes and bookings. This policy explains what we collect, why, and your choices. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
- Booking details: parent or guardian name and email; student first name (or the name you give), grade and learning goals; the course, time and type of class.
- Payment records: amounts, refunds and a Stripe payment reference. Card details are handled by Stripe and never reach us.
- Messages: what you send through the contact form or by email.
- Feedback: optional ratings and comments after a class.
- Technical data: IP address, used to prevent abuse (rate limits) and kept briefly; and anonymous, cookie-free page statistics from Vercel Analytics.
How we use it
- To book, prepare and run classes, and to send confirmations, changes, cancellations and an optional feedback request.
- To take payments and issue refunds.
- To answer your questions.
- To keep the site secure and prevent misuse.
We don't sell personal information, and we don't send marketing emails.
Who we share it with
Only the service providers that run the site: Stripe (payments), Supabase (database, hosted in Canada), Resend (email delivery), Vercel (website hosting) and Zoom (the class itself, when your child joins). Some providers may process data outside Canada, under their own privacy safeguards. Tutors see the booking details they need for the class.
Children's information
Bookings are made by a parent or guardian. We ask only for the student details a tutor needs: a name, grade and learning goals. Please don't include sensitive information in the goals box.
How long we keep it
Booking and payment records are kept for 7 years for tax and accounting purposes. Contact messages and feedback are kept for up to 2 years. Rate-limit records are deleted within a day.
Your choices
You can ask to see, correct or delete your information (except records we must keep by law). Contact us and we'll respond within 30 days.
Cookies
The public site doesn't use tracking or advertising cookies. Your theme choice (light or dark) is saved in your browser only. The admin area uses a sign-in cookie for staff.
Changes
If we change this policy, we'll update the date above.