§ Legal
Privacy Policy
Last updated: 24 May 2026
Pythora Academy (“Pythora”, “we”, “us”) respects your privacy. This policy explains what personal information we collect, how we use it, and your rights. We handle information in line with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
1. What we collect
We collect information you give us when you create an account, book a session, or contact us. This typically includes: name, email, phone number, suburb, year level, subjects of interest, and (for students) information about academic goals or assessments. We collect payment information via Stripe (we do not store card numbers).
2. How we use it
We use your information to match students with tutors, schedule and run sessions, process billing, send session summaries and reminders, improve the service, and communicate about your account. We do not sell your data.
3. Session content
With permission, sessions may be recorded for quality and safety. Transcripts may be processed by AI to generate written summaries. Summaries are visible to the student, the parent on the account, and the matched tutor.
4. Sharing
We share information only as needed to run the service: matched tutors see relevant student information; Stripe processes payments; Supabase hosts our database; Resend delivers transactional email; Vercel hosts the website. We may share information where required by law.
5. Children
For students under 18, accounts are held by a parent or guardian. Parents have full visibility of and control over their child’s data on the account.
6. Storage and security
Data is stored on cloud infrastructure with industry-standard security controls including TLS in transit and encryption at rest. Access is restricted to staff who need it. Servers are typically located in Australia or the United States.
7. Retention
We retain information for as long as your account is active and as required to meet legal, tax, or accounting obligations. Session summaries may be retained for the academic year. You may request earlier deletion (see below).
8. Your rights
You can request access to, correction of, or deletion of your personal information at any time. To exercise these rights, email privacy@pythoraacademy.com. We respond within 30 days.
9. Marketing
We may send service-related emails (session reminders, summaries, account notices) that you cannot opt out of while your account is active. Marketing emails are opt-out at any time via the unsubscribe link.
10. Cookies
We use a small number of cookies for authentication and to keep you signed in. We do not use third-party advertising cookies.
11. Complaints
If you believe we have mishandled your information, email privacy@pythoraacademy.com. If unresolved, you can lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.
12. Changes
We will update this policy from time to time. Material changes will be communicated by email or via a notice on the website.