Privacy Policy
Last updated:
1. What we collect
When you create an account, we collect your name, email, phone number, and password (stored as a one-way hash, never in plain text). Students additionally provide their location and subject preferences; Teachers provide qualifications, experience, fees, a bio, and verification documents (ID proof, address proof, certificates). If you sign in with Google, we receive your name and email from Google, not your password.
2. Location data
TutorLink's core feature is distance-based matching, so we ask for your precise location (via your browser's GPS, confirmed on a map) and store it as latitude/longitude along with the general area, district, and pincode. This is used only to calculate distance and show relevant search results — we do not sell or share this data with third parties for advertising.
3. How we use your information
We use your data to operate the platform: matching Students with nearby Teachers, processing bookings and payments, sending booking/reminder notifications by email or SMS, verifying Teacher documents, and responding to support requests or reports you file. We do not use your data to train third-party AI models or sell it to data brokers.
4. Who can see what
A Teacher's profile (name, subjects, qualifications, fee, approximate area, rating, and reviews) is visible to anyone browsing the platform once approved. A Student's exact location is never shown publicly — it is only used server-side to calculate distance. Verification documents (ID proof, address proof, certificates) are private: only the Teacher who uploaded them and TutorLink admins can view them; they are never public.
5. Payments
Online payments are processed by Razorpay. TutorLink does not store your card, UPI, or bank account details — that information goes directly to Razorpay under their own security and privacy practices. We store only the payment status and a Razorpay transaction reference for record-keeping.
6. Third-party services we use
OpenStreetMap / Nominatim — for showing maps and converting
coordinates to addresses (no account needed, no personal data sent beyond the
coordinates being looked up).
Google Sign-In — optional login method; governed by Google's own
privacy policy for the data they share with us.
Razorpay — payment processing.
Email (SMTP) and SMS (Twilio) — used only to send booking
confirmations, reminders, and account emails (like password resets) — never marketing
spam without your consent.
7. Data retention
We retain your account data for as long as your account is active. If you'd like your account and associated data deleted, contact support — we will remove your personal data except where we're required to retain records (e.g. payment records) for legal or accounting purposes.
8. Security
Passwords are hashed with bcrypt and never stored in plain text. Accounts lock temporarily after repeated failed login attempts. Payment verification is checked server-side using cryptographic signatures, never trusted from the browser alone. Despite these measures, no system is 100% secure — please use a unique password and contact us immediately if you suspect unauthorized access to your account.
9. Your choices
You can update or correct your profile information at any time from your account settings. You can request a copy of your data or its deletion by contacting support.
10. Changes to this policy
We may update this Privacy Policy from time to time; the "Last updated" date above will reflect the latest revision.
11. Contact
For privacy questions or data requests, reach us via the support email on our homepage.
This is a template and does not constitute legal advice. Depending on your users' location (e.g. EU/GDPR, California/CCPA, India's DPDP Act), you may have additional legal obligations — please have this reviewed by a qualified lawyer before launch.