Legal

Privacy Policy

Version 1.0 · Last updated 13 June 2026

Pythora Academy (“Pythora”, “we”, “us”) respects your privacy. This policy explains what personal information we collect, how we use it, and your rights. We handle information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

1. What we collect

We collect information you give us when you create an account, book a session, or contact us. This typically includes: name, email, phone number, suburb, year level, subjects of interest, and (for students) information about academic goals or assessments. We collect payment information via Stripe (we do not store card numbers).

2. How we use it

We use your information to match students with tutors, schedule and run sessions, process billing, send session summaries and reminders, improve the service, and communicate about your account. We do not sell your data.

3. Session content

With permission, sessions may be recorded for quality and safety. Transcripts may be processed by AI to generate written summaries. Summaries are visible to the student, the parent on the account, and the matched tutor.

4. Sharing and third parties

We share information only as needed to run the service. Our key providers are: Supabase (database, authentication, and file storage); Stripe (payment processing, we never store card numbers); Resend (transactional email delivery); Vercel (website and app hosting); Google (Google Meet for sessions, and Google Analytics for de-identified usage analytics); and Sentry (error monitoring to detect and fix bugs). Matched tutors see only the student information needed to tutor. We do not sell your data, and we share information outside these providers only where required by law.

5. Children

For students under 18, accounts are held by a parent or guardian. Parents have full visibility of and control over their child’s data on the account.

6. File storage

Files you upload, such as assignments, photos of handwritten work, and transcripts, are stored securely in Supabase Storage. They are used only to provide the service (marking, feedback, and summaries) and are visible only to the student, the parent on the account, and the matched tutor. You retain ownership of work you upload; see our Copyright & Acceptable Use policy.

7. Storage and security

Data is stored on cloud infrastructure with industry-standard security controls including TLS in transit and encryption at rest. Access is restricted to staff who need it. Servers are typically located in Australia or the United States.

8. Retention

We retain information for as long as your account is active and as required to meet legal, tax, or accounting obligations. Session summaries and uploaded files may be retained for the academic year. When you close your account, we delete or de-identify your personal information within a reasonable period, except where we are required to keep records (for example, billing records for tax purposes). You may request earlier deletion (see below).

9. Your rights

You can request access to, correction of, or deletion of your personal information, including uploaded files, at any time. To exercise these rights, email privacy@pythoraacademy.com. We respond within 30 days.

10. Marketing

We may send service-related emails (session reminders, summaries, account notices) that you cannot opt out of while your account is active. Marketing emails are opt-out at any time via the unsubscribe link.

11. Cookies

We use a small set of cookies for authentication and to keep you signed in, and, with your consent, Google Analytics 4 for de-identified usage analytics and Sentry for error monitoring. We do not use third-party advertising cookies. For the full detail and your controls, see our Cookie Policy.

12. Complaints

If you believe we have mishandled your information, email privacy@pythoraacademy.com. If unresolved, you can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.

13. Changes

We will update this policy from time to time. Material changes will be communicated by email or via a notice on the website.

Contact

privacy@pythoraacademy.com