TutorThread

Privacy Policy

Last updated: October 17, 2026

This Privacy Policy explains how TutorThread ("TutorThread", "we", "us") collects, uses, shares, and protects your information when you use our website at tutorthread.ai and related services (the "Service"). TutorThread connects students with tutors for live and AI-assisted tutoring. By using the Service you agree to this Policy.

Pilot notice. TutorThread is currently an invite-only pilot. Features and data practices may change as the Service develops; we will update this Policy and the "Last updated" date when they do.
On this page
  1. Information we collect
  2. How we use information
  3. Google user data
  4. AI tutoring & your content
  5. How we share information
  6. Payments
  7. Data retention
  8. Security
  9. Your choices & rights
  10. Children & minors
  11. International transfers
  12. Changes
  13. Contact

1. Information we collect

Information you provide

  • Account details: your name, email address, password (stored only as a secure hash), account type (student or tutor), and optional profile details such as phone number, country, subject interests, and lesson preferences.
  • Tutor applications: if you apply to tutor, the professional information in your application (headline, experience, qualifications, years of experience, subjects, and any resume link you provide), which an administrator reviews before approval.
  • Content you create: messages you exchange with tutors or students, conversations with AI tutors, lesson bookings, and reviews or ratings you submit.

Information from third parties

  • Sign in with Google (optional): if you choose to sign in with Google, we receive your name, email address, and whether that email is verified, to create or authenticate your account. See Google user data below.
  • Google Calendar (optional, tutors): if a tutor connects their Google Calendar, we access calendar availability and events to schedule lessons and create Google Meet links. This is used only for scheduling and is never sold or used for advertising.
  • Payment processor: when payments are enabled, our processor (Stripe) returns limited, non-sensitive details about a saved payment method (such as card brand, last four digits, and expiry) and transaction results.

Information collected automatically

  • Usage & technical data: server logs, IP address, browser/device type, and interactions with the Service, used to operate, secure, and improve it.
  • Local storage: we store a session token in your browser to keep you signed in. We do not use third-party advertising or cross-site tracking cookies.

2. How we use information

  • Create and manage your account and authenticate you.
  • Provide the core Service: matching, messaging, scheduling, AI tutoring, reviews, and (where enabled) payments and tutor payouts.
  • Send transactional communications — for example lesson confirmations, reminders, and password-reset or verification emails — by email and, if you opt in, SMS.
  • Maintain safety and integrity: prevent fraud and abuse, enforce our Terms, and debug.
  • Improve and evaluate the Service, including the quality of AI tutoring (see below).
  • Comply with legal obligations.

3. Google user data

TutorThread's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

  • We request the minimum Google scopes needed: basic profile and email for sign-in, and, only for tutors who connect it, Google Calendar access for scheduling.
  • We use Google user data solely to provide and improve these user-facing features.
  • We do not sell Google user data, use it for advertising, or transfer it to others except as needed to provide the Service, for security, or to comply with law.
  • We do not use Google user data to train generalized AI/ML models.
  • You can disconnect Google Calendar at any time from your account settings, and you can revoke TutorThread's access from your Google Account permissions.

4. AI tutoring & your content

When you chat with an AI tutor, your messages are sent to our AI model provider (Microsoft Azure OpenAI Service) to generate responses. We retain AI conversations to operate the Service and to evaluate and improve tutoring quality. Please do not share sensitive personal information (such as financial account numbers, government IDs, or health information) in AI chats. AI responses are generated automatically, may be inaccurate, and are not a substitute for professional advice.

5. How we share information

  • Between users: to deliver tutoring, we share necessary details between a student and the tutor they work with (such as name, messages, and booking details).
  • Service providers: we use vetted vendors to run the Service — cloud hosting (Microsoft Azure), AI inference (Azure OpenAI), payments (Stripe), and email/SMS delivery. They process data only on our instructions.
  • Legal & safety: we may disclose information to comply with law, enforce our Terms, or protect the rights, safety, and security of users or the public.
  • Business transfers: information may transfer as part of a merger, acquisition, or sale of assets, subject to this Policy.

We do not sell your personal information.

6. Payments

When payments are enabled, card payments are processed by Stripe and tutor payouts by our payout providers. Full card numbers are handled by the processor and are not stored on our servers; we retain only limited metadata (such as card brand and last four digits) and transaction records. Your use of payment features is also subject to the processor's own privacy policy.

7. Data retention

We keep personal information for as long as your account is active and as needed to provide the Service, then retain it only as required for legitimate business or legal purposes (such as financial records and dispute resolution). You may request deletion of your account as described below; some records may be retained where the law requires.

8. Security

We protect your information with industry-standard measures: encryption in transit (HTTPS), hashed passwords, secrets held in a managed key vault, role-based access controls, and rate limiting. No method of transmission or storage is perfectly secure, but we work to protect your data and to respond promptly to any incident.

9. Your choices & rights

  • Access & update: view and edit your profile details in your account settings.
  • Delete: request deletion of your account and associated personal data by contacting us.
  • Notifications: opt out of non-essential email or SMS at any time; some transactional messages are required to use the Service.
  • Google access: disconnect Google Calendar in settings or revoke access in your Google Account.

Depending on where you live, you may have additional rights (such as access, correction, portability, or objection). Contact us to exercise them and we will respond as required by applicable law.

10. Children & minors

The Service is not directed to children under 13, and we do not knowingly collect their personal information. Tutoring may involve minors; where a user is a minor under applicable law, they must use the Service with the involvement and consent of a parent or legal guardian, who is responsible for the minor's use. If you believe a child has provided us information without appropriate consent, contact us and we will delete it.

11. International transfers

We operate using cloud infrastructure that may process and store data in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

12. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by an updated "Last updated" date and, where appropriate, additional notice. Your continued use of the Service after an update means you accept the revised Policy.

13. Contact us

Questions about this Policy or your data? Contact us at support@tutorthread.ai.