Privacy Policy
Last Updated: May 11, 2026
Table of Contents
Introduction
TutorNetworking ("we", "our", or "the Platform") is a lightweight SaaS platform built for small teaching brands, providing brand pages, online payments, automated revenue sharing, and student management. We value your privacy, and this Privacy Policy explains how we collect, use, and protect your personal data.
This Privacy Policy complies with Taiwan's Personal Information Protection Act. By using the Platform, you agree to this Privacy Policy.
Information We Collect
Information We Collect
When you use the Platform, we may collect the following data:
Basic Information:
• Name
• Email address
• Google account information (via OAuth sign-in)
• Profile photo (optional)
Additional Teacher Information:
• Teaching subjects and specialties
• Teaching experience
• Teaching languages
• Teaching introduction
Teaching Brand Information:
• Brand name and description
• Teacher roles (Founder, Admin, Member)
• Brand invitation and membership records
• Course settings and course package information
• Revenue split ratio settings
Additional Student Information:
• Course package purchase records
• Lesson balance
Usage Data:
• Browsing history
• Booking records
• Platform interaction data
• Device information (IP address, browser type)
How We Collect Data
• Information you provide during registration
• Information provided through Google OAuth
• Information automatically collected as you use Platform features
• Cookies and similar technologies
How We Use Your Information
Purpose of Use
We use the personal data we collect to:
• Provide core platform functionality (account management, brand management, course management, bookings)
• Support the creation and operation of teaching brands
• Process course bookings and payments
• Automatically calculate revenue splits and generate revenue reports
• Manage student lesson balances
• Improve platform service quality
• Prevent fraud and abuse
• Meet legal compliance requirements
• Send service notifications (non-marketing)
We Will Not
We commit to never:
• Use your data for marketing without your consent
• Sell your personal data
• Use your data for purposes not listed in this policy
Information Sharing
We share your information with:
Third-Party Services (see "Google Calendar Integration" section below for details):
• Google (OAuth authentication, Calendar API integration)
• ECPay (payment processing)
• TapPay (payment processing)
• These services have their own privacy policies
Within Brands:
• Brand founders and admins can view member booking records and revenue summaries
• Teachers can view their own revenue and payout details
• Brand student data is only visible to brand managers
Other Users:
• Teacher profile pages are publicly visible
• Brand public pages (including brand description, course info, member list) are publicly visible
• Students can view teacher and brand information before booking
• Booking parties can see each other's contact information
Legal Requirements:
• We may disclose data when required by law (court orders, government requests)
• We may share data to protect the Platform or user rights and safety
• We may share data in connection with business transactions (mergers, acquisitions)
We commit to never:
• Sell your personal data to third parties
• Use your data for advertising purposes
• Share your payment details (handled by payment processors)
Google Calendar Integration
When you connect your Google Calendar to TutorNetworking, we request limited access:
Read Access (calendar.readonly):
• View your calendar availability (FreeBusy information only)
• Check for scheduling conflicts before booking acceptance
• Display accurate available time slots to students
• We do NOT read the content, titles, or details of your existing calendar events (except events created by TutorNetworking)
Write Access (calendar.events):
• Create calendar events when students book lessons with you
• Update calendar events when bookings are rescheduled
• Delete calendar events when bookings are cancelled
• Only manage events created by TutorNetworking
How We Use Calendar Data:
• Availability Checking: Query your calendar's busy/free times to prevent double bookings
• Automatic Sync: Confirmed bookings automatically added to your chosen destination calendar
• Conflict Prevention: Check for conflicts before accepting new bookings
• No Content Access: We do NOT read event details from your existing calendar
Data Security:
• All calendar access tokens are encrypted using industry-standard encryption (ActiveRecord::Encryption)
• Tokens are stored securely and never shared with third parties
• Tokens automatically expire and are refreshed securely
• You can disconnect your calendar at any time
Your Control:
• Choose which calendar to sync bookings to (destination calendar)
• Enable/disable conflict checking per calendar
• Disconnect calendar integration anytime from Settings → Calendars
• Revoke access through your Google Account settings: https://myaccount.google.com/permissions
Google API Limited Use Disclosure:
TutorNetworking's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
This means:
• We only use Google user data for providing and improving features directly visible to you
• We do NOT sell, share, or transfer your Google data to third parties for advertising or other purposes
• We do NOT use your Google data for personalized ads
• Human access to your Google data is restricted to authorized developers only, for security, compliance, and debugging purposes
Data Security
Security Measures
We take the following measures to protect your data:
• HTTPS encrypted transmission
• Encrypted database storage
• Regular security audits
• Access control management
• Staff data protection training
Data Retention
• While account is active: Continuously retained
• After account termination: Deleted within 3 months
• Legally required data: Retained per legal requirements
Security Limitations
Please note that no internet transmission or storage method is 100% secure. We do our best to protect your data but cannot guarantee absolute security.
Your Rights
Under Taiwan's Personal Information Protection Act, you have the following rights:
Right to Inquiry:
• Request to view your personal data held by us
• Understand how your data is being used
Right to Copy:
• Request a copy of your personal data
Right to Correction:
• Correct inaccurate or incomplete information
• Modify your personal data at any time
Right to Deletion:
• Request deletion of your account and data
• Some data may be retained for legal compliance (see "Data Retention Policy" section below)
Right to Withdrawal:
• Withdraw consent for data processing
• Close your account and disconnect Google Calendar
Right to Objection:
• Object to certain data processing activities
• Opt out of marketing communications
To exercise these rights, contact us at: support@tutornetworking.com
Data Retention Policy
We retain data for different periods depending on the type:
Account Data:
• Active accounts: Retained while account is active
• Deleted accounts: Personal data deleted within 90 days
• Legal retention: Transaction records retained for 7 years (Taiwan tax law requirement)
Google Calendar Tokens:
• Active connections: Tokens refreshed automatically
• Disconnected calendars: Tokens immediately revoked and deleted from our servers
• Expired tokens: Automatically removed after 30 days of inactivity
• Token encryption: All tokens encrypted at rest using ActiveRecord::Encryption
Booking and Course Records:
• Completed bookings: Retained permanently for teaching records and reviews
• Cancelled bookings: Retained for 1 year for dispute resolution
• Course orders and payment records: Retained for 7 years (legal compliance)
• Lesson balance records: Retained while account is active
• Booking-related calendar events: Managed according to your Google Calendar settings
Brand and Revenue Records:
• Teacher collaboration history: Retained while account is active
• Revenue report records: Retained for 7 years (legal compliance)
• Brand invitation records: Retained for 1 year
Visit Tracking:
• Anonymous analytics: Retained for 2 years
• Bot detection data: 90 days
Communication Records:
• Support inquiries: Retained for 2 years
• System notifications: 90 days
• Reviews and feedback: Retained while associated profile is active
Third-Party Links
The Platform may contain links to third-party websites or services (such as teachers' personal websites).
These third-party websites:
• Are not covered by this Privacy Policy
• Have their own privacy policies
• We are not responsible for their privacy practices
We recommend reviewing the privacy policies of third-party services before use.
Children's Privacy
Age Restrictions
The Platform does not knowingly collect personal data from children under 13.
Parental Supervision
If you are a parent and discover that your minor child has provided personal data to us without your consent, please contact us and we will delete the relevant data as soon as possible.
Minor Usage
Users under 18 must obtain consent from a parent or legal guardian to use the Platform.
Changes to Privacy Policy
Update Notification
We may update this Privacy Policy from time to time. For significant changes, we will notify you via email or platform announcement.
Effective Date
Changes take effect 30 days after announcement.
Continued Use
Continuing to use the Platform after changes take effect is deemed as acceptance of the new Privacy Policy.
Contact Us
For questions about this Privacy Policy or your personal data, please contact us:
Email: support@tutornetworking.com
We will respond within 3 business days of receiving your message.
This Privacy Policy is governed by the laws of Taiwan and subject to Taiwan's Personal Information Protection Act.
Have questions about our privacy practices? support@tutornetworking.com