TutorCloud Inc. (“TutorCloud”, “we”, “our”, or “us”), a Massachusetts corporation with its registered office at 500-West-Cummings Park, Suite 2700, Woburn, MA 01801, operates the TutorCloud.AI online learning platform, including its website located at https://tutorcloud.in/, its mobile applications, its administrator and educator dashboards, its application programming interfaces, and any related online services (collectively, the “Service”).

This Privacy Policy (the “Policy”) describes how we collect, use, disclose, retain, secure, and otherwise process personal information of individuals in the United States when they access or use the Service. It also explains the rights available to you and how to exercise them.

This Policy is designed to comply with, and should be read in conjunction with, the following United States federal and state laws applicable to us as a provider of an online educational service to a mixed audience of children under 13, minors aged 13 through 17, and adult learners aged 18 and above:

• The Children’s Online Privacy Protection Act, 15 U.S.C. 6501–6506, and the FTC’s COPPA Rule at 16 C.F.R. Part 312 (“COPPA”).
• The Family Educational Rights and Privacy Act, 20 U.S.C. 1232g, and 34 C.F.R. Part 99 (“FERPA”).
• The Protection of Pupil Rights Amendment, 20 U.S.C. 1232h (“PPRA”).
• The California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020, Cal. Civ. Code 1798.100 et seq. (“CCPA/CPRA”).
• The California Student Online Personal Information Protection Act, Cal. Bus. & Prof. Code 22584 et seq. (“SOPIPA”), and California AB 1584 (Cal. Ed. Code 49073.1).
• State student data privacy statutes generally in effect across US states, including but not limited to New York Education Law 2-d, Illinois Student Online Personal Protection Act (“SOPPA”), Connecticut Public Act 16-189, Colorado Student Data Transparency and Security Act, Utah Student Data Protection Act, and analogous statutes in other states.
• State comprehensive privacy statutes, where applicable, including the Colorado Privacy Act, Virginia Consumer Data Protection Act, Connecticut Data Privacy Act, Utah Consumer Privacy Act, Texas Data Privacy and Security Act, Oregon Consumer Privacy Act, and other comparable state laws that may govern the personal information of adult learners.

This Policy applies to personal information collected in the United States. Information collected from users outside the United States is governed by our region-specific policies published for those regions.

For purposes of this Policy the following capitalised terms have the meanings given below:

• “Child” or “Children” means a user under the age of thirteen (13).
• “Minor” means a user aged thirteen (13) through seventeen (17).
• “Adult Learner” means a user aged eighteen (18) or over.
• “Parent” means a parent or legal guardian of a Child or Minor user.
• “School” means a school, school district, local education agency, state education agency, private school, charter school, or any other educational institution (or teacher acting on their behalf) that uses the Service for educational purposes.
• “Institutional Account” means a School Account or a tutoring-center, corporate, or similar organisational account through which end-user accounts are provisioned.
• “Student Personal Data” means personal information relating to a student that is provided to us by, or created within, the Service in connection with a School’s or Institutional Account’s use of the Service, and which may constitute “education records”, “personally identifiable information from education records”, “covered information”, “student data”, or an equivalent category under FERPA, SOPIPA, or applicable state student data privacy laws.
• “Personal Information” means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household, as defined under the CCPA/CPRA and other applicable US state privacy laws, and also has the meaning ascribed to “personal information” under COPPA where applicable.
• “AI Features” means any generative, adaptive, conversational, voice-recognition, video/webcam analytics, or personalisation features of the Service that are powered in whole or in part by artificial intelligence models, whether hosted by us or by third-party model providers.
• “Service Provider”, “Processor”, and “Contractor” have the meanings given under the CCPA/CPRA and other applicable state comprehensive privacy laws.

We collect the categories of personal information described below. The specific information collected in any given case depends on the account type (Child, Minor, Adult, Parent, Teacher, School Administrator), whether the account is a School Account or a consumer account, the features you or your School choose to use, and the settings and consents applied.

3.1 Identifiers and Account Registration Data

• Given name, chosen display name or username, and (for adult accounts only, unless otherwise required by the School) surname.
• Email address (for Children, we typically collect a Parent email address rather than the Child’s email address, unless the account is a School Account provisioned through a School-owned email address).
• Date of birth or self-reported age band, used solely to determine the correct age-appropriate experience, to apply COPPA parental consent requirements, and to enforce the age-appropriate design of the Service.
• Account credentials, including password hashes and, where applicable, single sign-on identifiers obtained from federated identity providers.
• Grade level, subject preferences, and language preferences.

3.2 School- or Institutional-Provided Data

• Roster data provided by Schools or their rostering service providers, including student identifier, class assignment, teacher of record, and grade level.
• Data provided via industry-standard rostering interoperability standards, learning-tools interoperability protocols, or federated identity/authorisation protocols.

3.3 Learning Activity and Usage Data

• Lessons attempted, questions answered, correct/incorrect responses, hints requested, time-on-task, mastery levels, streaks, and progress against a curriculum.
• Assignments assigned by teachers, submissions, grades, and teacher-generated feedback.
• Interactions with AI Features, including inputs, prompts, and outputs (subject to the AI Features section below).

3.4 Content You Submit

• Text you enter into the Service, including written essays, chat inputs, and answers.
• Voice recordings and transcripts generated by the Service’s voice/speech-recognition features when you use them.
• Images or video that you upload, and — where you affirmatively enable webcam-based features (for example, engagement analysis or proctoring) — video and image data captured while such features are active.
• Files, documents, or images you upload to the Service.

3.5 Communications

• Messages you send to us or to our support team, including chat transcripts, tickets, and survey responses.
• Communications you send within the Service to a teacher, tutor, coach, or Parent through Service messaging features.

3.6 Device, Log, and Technical Data

• Internet protocol (“IP”) address (which we truncate or hash for Child Users in accordance with COPPA).
• Browser type and version, operating system, device type and model, device identifiers, screen resolution, and time-zone information.
• Server log data including access times, pages viewed, referring/exit pages, and click-stream data.
• Approximate location derived from IP address (city or region only — we do not collect precise geolocation from Children).

3.7 Payment and Billing Data (Freemium and Institutional Licensing)

• For paid consumer subscriptions: billing name, billing address, and a payment token/last-four digits from our payment processor. We do not collect or store full payment card numbers on our systems.
• For Institutional Licensing: purchase-order data, invoicing contact, tax identification, and payment reference numbers.

3.8 Cookies and Similar Technologies

We use a limited number of cookies and similar technologies. See our Cookie Policy for details. We do not use behavioural-advertising cookies on any part of the Service directed to Children, and we do not permit third-party behavioural tracking on School Accounts.

3.9 Information We Do Not Knowingly Collect

• We do not knowingly collect biometric identifiers, biometric information, or precise geolocation from Children.
• We do not knowingly collect information from Children that is not reasonably necessary for their participation in the online educational activity.

We collect information from the following sources:

• Directly from you when you create an account, complete your profile, use the Service, submit content, take part in a lesson, contact us, or respond to a survey.
• From your Parent, teacher, tutor, or coach, where they set up your account, invite you to the Service, or provide information about you as part of the learning relationship.
• From your School or district, or from any rostering, single sign-on, or learning-management integration used by your School.
• Automatically, through cookies, server logs, and application telemetry when you interact with the Service.
• From service providers, such as our payment processor when you make a purchase, or our communications providers when they deliver a message to you at our request.
• From third-party sources in limited cases where required to prevent fraud, ensure security, or comply with law.

We use personal information for the following purposes, and only to the extent required for each purpose:

• Provide, operate, personalise, and improve the Service, including delivering lessons, tracking progress, generating reports, and adapting content to a learner’s demonstrated needs.
• Authenticate users, secure accounts, and prevent unauthorised access.
• Communicate with users, Parents, teachers, and Schools about the Service, including transactional messages, security alerts, and support responses.
• Provide AI Features requested by the user (subject to the safeguards described in Section 7).
• Understand how the Service is used, conduct educational research and analytics, and improve pedagogical outcomes, using de-identified or aggregated data where feasible.
• Process payments and manage subscriptions for adult and paid users, or invoices for Institutional Accounts.
• Respond to legal process, protect the safety of users, and enforce our Terms of Use.
• For Children, we use personal information solely to (i) provide the age-appropriate educational Service; (ii) maintain and analyse the Service for internal operations; (iii) protect the security or integrity of the Service; and (iv) fulfil other purposes permitted under COPPA 312.5(c).

We do not use Student Personal Data, or personal information of Children, to build advertising profiles, to target advertising to a user or a device, or to conduct amassed profiling for non-educational purposes. We do not sell Student Personal Data or personal information of Children.

For Adult Learners, we process personal information on one or more of the following bases: (a) performance of the contract to provide the Service to you; (b) your consent, where we ask for it (for example, to use certain optional AI Features); (c) our legitimate interests in operating, securing, and improving the Service, provided those interests are not overridden by your rights; and (d) compliance with a legal obligation.

For Children, we rely on verifiable parental consent as required by COPPA (or on School consent under COPPA’s school-authorisation exception, where the Service is used at the direction of a School for educational purposes). For Minors aged 13 through 17, we rely on the Minor’s own agreement to the Terms of Use, together with additional consents or approvals as described in Sections 8 and 10 below.

The Service includes AI Features such as: an AI tutor and chatbot; adaptive learning and personalisation engines; voice/speech recognition; video/webcam analytics for engagement and proctoring where affirmatively enabled; and generative content features that produce essays, images, code, and similar outputs. Some AI Features are powered in whole or in part by third-party large-language-model application programming interfaces provided by external model providers.

7.1 Our Commitments Regarding AI and Third-Party Models

• We do not send personally identifiable information about a user (including a user’s name, email address, precise date of birth, student identifier, teacher name, school name where materially identifying, or free-text account identifiers) as part of the payload transmitted to any third-party AI model provider. Instead, we use pseudonymous or de-identified session identifiers and strip inputs of directly identifying data before dispatch, to the extent technically feasible.
• We contractually prohibit our AI model providers from using inputs, prompts, outputs, or any content derived from the Service to train, fine-tune, retrain, evaluate, or otherwise improve their generally available foundation models or any other model made available to third parties.
• We contractually require our AI model providers to retain input and output data for zero-day or minimal-duration abuse-monitoring windows only, and to delete or return such data at the end of the applicable retention period.
• We do not use Student Personal Data to train or improve any generally available foundation model, and we do not permit our providers to do so on our behalf.

7.2 User Guidance and Limitations

• We advise users not to enter personal information about themselves or others into AI Feature inputs. Reasonable guidance and warnings are provided within the interface.
• AI Feature outputs may be inaccurate, incomplete, or inappropriate. Educational judgment by teachers, tutors, and Parents remains essential. AI outputs are not a substitute for professional advice.
• Where a user affirmatively enables voice or webcam features, audio or video captured is used only to deliver the requested feature, is not used to train third-party models, and is retained only for the period reasonably needed to deliver the feature and, where applicable, for a short quality-assurance window.

This Section applies to Children under the age of 13. It is intended to satisfy the notice requirements of the COPPA Rule at 16 C.F.R. 312.4.

8.1 Operator Contact

Operator: TutorCloud Inc.
Address: 500-West-Cummings Park, Suite 2700, Woburn, MA 01801.
Email: dpo@tutorcloud.in
Telephone: +1 617-752-0010

8.2 Categories of Personal Information Collected From Children

We collect from Children: first name or username (which we encourage not to identify the Child); Parent email address (for consumer accounts) or school-issued email address (for School Accounts); age band; learning-activity data; content submitted in the course of lessons and AI Feature interactions; and technical/log data (which we truncate or minimise where feasible). We do not collect surnames of Children (unless required by a School), photographs of Children (unless the Parent or School affirmatively enables a feature that captures them), precise geolocation, or contact information for Children other than as reasonably necessary to operate the Service.

8.3 How Children’s Information Is Used and Disclosed

Children’s information is used to provide the age-appropriate educational Service, to communicate with the Parent or School, to protect the security of the Service, to comply with law, and for other purposes permitted under COPPA. It is disclosed only to our vetted service providers under written contract limiting their use of the data to services provided on our behalf, and — for School Accounts — to the School as further described in Section 9.

8.4 Verifiable Parental Consent

For consumer accounts, we obtain verifiable parental consent before we collect any personal information from a Child, using a method reasonably calculated to ensure that the person providing consent is the Child’s Parent. Methods we use include, as appropriate, credit-card or debit-card charge with confirmation; signed consent form returned by mail, fax, or electronic scan; toll-free telephone confirmation; video-call confirmation; or the “email plus” method for internal-use collections that meet the COPPA criteria.

For School Accounts used at a School’s direction for educational purposes, we rely on the School to provide consent on behalf of the Parent, in accordance with the guidance issued by the Federal Trade Commission. Schools that use the Service warrant that they have the authority to do so.

8.5 Parental Rights

A Parent has the right to:

• Review the personal information collected from the Child.
• Direct us to delete the personal information collected from the Child.
• Refuse to permit further collection or use of the Child’s information, and terminate the account.

To exercise these rights, a Parent may contact us at dpo@tutorcloud.in. We will respond within a reasonable time and after we take steps reasonably designed to verify the identity of the requester.

8.6 No Behavioural Advertising or Third-Party Tracking for Children

We do not permit any form of third-party behavioural advertising, cross-context behavioural advertising, targeted advertising, or third-party analytics that construct persistent profiles, on any part of the Service directed to Children or on any Child account, in accordance with COPPA and applicable state law.

8.7 Community and Sharing Restrictions for Children

Child accounts are restricted so that they cannot make personal information publicly available, cannot post to public areas of the Service, cannot direct-message unknown users, and cannot upload profile photographs, in each case unless the Parent or School affirmatively enables the feature and, where required, provides additional COPPA-compliant consent.

When the Service is used by, or at the direction of, a School for educational purposes, this Section applies in addition to the general provisions of this Policy. In the event of any conflict between this Section and any written agreement with the School (including a data privacy agreement, addendum, or educator agreement), the written agreement controls with respect to Student Personal Data governed by that agreement.

9.1 Our Role Under FERPA

When we process Student Personal Data at the direction of a School, we act as a “school official” with a “legitimate educational interest” under FERPA’s school-official exception (34 C.F.R. 99.31(a)(1)(i)(B)), to the extent applicable. In that capacity:

• We use Student Personal Data only for the educational purpose(s) for which the School engaged the Service.
• We are under the direct control of the School with respect to the use and maintenance of Student Personal Data.
• We do not re-disclose Student Personal Data except as authorised by the School or as required by law.
• We maintain appropriate administrative, physical, and technical safeguards.

9.2 Our Role Under SOPIPA and State Student Privacy Laws

Where the Service is provided to a K-12 educational context, we operate as a “K-12 school service provider” or equivalent, and we undertake to comply with the substantive obligations of SOPIPA (Cal. Bus. & Prof. Code 22584–22585), California AB 1584 (Cal. Ed. Code 49073.1), New York Education Law 2-d, Illinois SOPPA, Colorado Student Data Transparency and Security Act, Connecticut Public Act 16-189, Utah Student Data Protection Act, and other comparable state student data privacy laws to the extent applicable, including the following commitments:

• We do not sell Student Personal Data.
• We do not use or disclose Student Personal Data for targeted advertising, and we do not build advertising profiles based on Student Personal Data.
• We do not amass a profile about a K-12 student except in furtherance of school purposes.
• Student Personal Data remains the property of, and under the control of, the School (or student and Parent, as applicable under state law).
• On termination of the School’s use of the Service or on the School’s written request, we delete or return Student Personal Data within the time frames required by the applicable state law and our data privacy agreement.
• We maintain administrative, physical, and technical safeguards appropriate to the sensitivity of Student Personal Data.
• We provide notification of security incidents to Schools as required by the applicable state law and our data privacy agreement.

9.3 PPRA

We do not conduct, administer, or facilitate the administration of any survey, analysis, or evaluation on behalf of a School that is designed to reveal information in any of the eight PPRA-protected categories (20 U.S.C. 1232h(b)) without the School’s confirmation that appropriate parental notice and, where applicable, consent have been obtained.

9.4 Creation of School Accounts

A user account is treated as a School Account, and Section 9 applies to it, when the account is (i) created by a teacher, School administrator, district administrator, or their delegate; (ii) provisioned by way of a rostering, single sign-on, or learning-management-system integration operated by or for a School; (iii) associated with a school-issued email domain and enrolled in a Class provided by a School; or (iv) covered by a written agreement between us and the School or district specifying that accounts under that agreement are School Accounts.

9.5 Institutional (Non-K-12) Accounts

Where the Service is licensed to an institutional customer that is not a K-12 School (for example, a tutoring centre, higher-education institution, or corporate learning customer), we process personal information of end users at the direction of that institutional customer under our applicable master services agreement or licence terms. FERPA, SOPIPA, and state K-12 student privacy laws apply only to the extent legally applicable.

10.1 Parental Rights

Parents of Children and, where afforded by state law, Parents of Minors, have the right to:

• Review the personal information we have collected from the Child or Minor.
• Request correction or updating of that information.
• Request that we delete the account and the personal information associated with it, subject to any applicable retention obligations imposed by law or by the School.
• Refuse further collection or use of the Child’s or Minor’s information and terminate the account.
• Receive answers to reasonable questions about our privacy practices as they relate to the Child or Minor.

10.2 Parental Responsibilities

Parents are responsible for supervising and supporting the Child’s or Minor’s use of the Service in a manner appropriate to the learner’s age and maturity. In particular, Parents are asked to:

• Read this Policy and the Terms of Use, and discuss them with the Child or Minor in age-appropriate terms.
• Ensure that the Child or Minor uses the Service in an environment that is safe, both physically and online, and with age-appropriate device controls.
• Encourage the Child or Minor not to enter personal information about themselves or others into any Service input field, including AI Feature prompts.
• Monitor the Child’s or Minor’s engagement with AI-generated content and correct any factual errors or inappropriate output.
• Keep account credentials secure and not share them with third parties.
• Notify us promptly of any suspected unauthorised access to the Child’s or Minor’s account or of any content that appears inappropriate.

We disclose personal information only in the limited circumstances set out below.

11.1 To Service Providers, Processors, and Contractors

We share personal information with service providers that perform services on our behalf, including cloud hosting, database services, single-sign-on providers, learning-management-system connectors, rostering interoperability providers, communication providers (email, SMS, in-app messaging, video), payment processors, customer-support tooling, error monitoring, security services, and AI model providers. All such service providers are bound by written contracts that limit their use of personal information to the services provided to us, and — for Student Personal Data and Children’s data — impose obligations consistent with FERPA, COPPA, SOPIPA, and applicable state laws.

11.2 To Schools, Teachers, and Institutional Administrators

For School and Institutional Accounts, we disclose Student Personal Data and other Personal Information to the applicable School, teacher, and administrator as reasonably necessary to deliver the Service.

11.3 To Parents

We disclose a Child’s information to that Child’s Parent on request, as required by COPPA and this Policy.

11.4 With User Direction or Consent

We may share personal information with third parties where you affirmatively direct us to do so, for example when you connect a third-party learning tool via a learning-tools-interoperability integration.

11.5 For Legal and Safety Purposes

We may disclose personal information when we in good faith believe such disclosure is necessary to (i) comply with law, legal process, or lawful requests from public authorities; (ii) protect the rights, property, or safety of TutorCloud, our users, or others; (iii) detect, prevent, or address fraud, security, or technical issues; or (iv) enforce our Terms of Use.

11.6 Business Transfers

If we are involved in a merger, acquisition, financing, reorganisation, bankruptcy, or sale of assets, personal information may be transferred to the successor entity, subject to this Policy and applicable law. Where required by COPPA, SOPIPA, or a School data privacy agreement, we will provide notice and, where required, obtain consent before Student Personal Data or a Child’s personal information is transferred in a manner materially inconsistent with this Policy.

11.7 De-identified and Aggregated Data

We may disclose de-identified or aggregated data that does not reasonably identify any individual and that is maintained and used in a manner consistent with applicable law. We commit not to attempt to re-identify such data, and we require our recipients to do the same.

11.8 No Sale, No Sharing for Cross-Context Behavioural Advertising

We do not sell Personal Information, and we do not share Personal Information for cross-context behavioural advertising, as those terms are defined under the CCPA/CPRA. We do not sell Student Personal Data. We do not sell Personal Information of consumers we know to be under 16.

Personal Information collected from users in the United States is stored and processed on infrastructure located within the United States. We host United States data on a region-localised basis and do not routinely export it out of the United States. Limited exports may occur where reasonably necessary for global support, security incident response, fraud prevention, or legal compliance, and only to recipients bound by contractual and technical safeguards. If we host such data on cloud infrastructure operated by a global provider, the data-at-rest and data-in-transit locations are configured to remain within the United States region unless otherwise expressly permitted.

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, subject to the following:

• Consumer accounts: We retain account information for the life of the account. If the account is inactive for a continuous period exceeding twenty-four (24) months, we may delete or de-identify the account and its associated learning-activity data, following notice to the account holder or Parent as appropriate.
• School Accounts: We retain Student Personal Data for the period specified by the School’s data privacy agreement, or, in the absence of such a specified period, for the duration of the School’s active use of the Service plus a reasonable transition period, after which the data is deleted or returned as directed by the School.
• AI Feature inputs and outputs: We retain AI Feature inputs and outputs for a period no longer than necessary to deliver the requested feature and, where applicable, to comply with abuse-monitoring, safety, or legal-hold obligations. Retention periods and configurations are documented internally and made available to Schools on request.
• Payment and billing records: We retain to the extent required by applicable tax, accounting, and anti-fraud laws.
• Support communications: We retain for the period reasonably necessary to service the request and improve support.
• Legal hold: We may retain personal information for longer periods where required by law, litigation hold, or regulatory investigation.

De-identified and aggregated data may be retained for longer periods for product development, research, analytics, and demonstrating the educational impact of the Service.

We maintain administrative, physical, and technical safeguards designed to protect personal information against unauthorised access, disclosure, alteration, or destruction. These include:

• Encryption of personal information at rest and in transit over public networks.
• Role-based access controls, principle of least privilege, and multi-factor authentication for administrative access.
• Segregation of production, staging, and development environments, and secure software development lifecycle controls.
• Vulnerability management, penetration testing, and independent third-party audits on a periodic basis.
• Employee training on privacy and security, and confidentiality and data-handling obligations imposed on personnel and contractors.
• Incident response procedures, including notification to Schools, Parents, and affected users as required by applicable federal and state law.

No security measure is infallible. We encourage users to choose strong passwords, keep credentials confidential, and notify us immediately of any suspected unauthorised access at dpo@tutorcloud.in.

15.1 Rights Available to California Consumers (CCPA/CPRA)

California consumers have the following rights, subject to verification and applicable exceptions:

• Right to know the categories and specific pieces of Personal Information we have collected, the sources of that information, the purposes for collecting it, and the categories of third parties to whom it is disclosed.
• Right to delete Personal Information we have collected from you.
• Right to correct inaccurate Personal Information.
• Right to opt out of any sale or sharing of Personal Information for cross-context behavioural advertising. (We do not sell or share for cross-context behavioural advertising.)
• Right to limit use and disclosure of Sensitive Personal Information beyond what is necessary to provide the Service. (We do not use Sensitive Personal Information for any purpose beyond permitted business purposes.)
• Right to non-discrimination for exercising your rights.
• Right to portability of Personal Information in a structured, commonly used, and machine-readable format.

15.2 Rights Available to Residents of Other US States

Residents of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, and other states with comprehensive privacy laws have, to the extent applicable to their state of residence, rights of access, correction, deletion, portability, and opt-out of certain processing activities, together with a right to appeal any denial of a rights request.

15.3 How to Exercise Your Rights

To exercise any of the rights described in this Section, submit a request to dpo@tutorcloud.in. We will acknowledge the request within ten (10) business days (or such shorter period as required by law) and respond substantively within forty-five (45) days, extendable by an additional forty-five (45) days where reasonably necessary, with notice to you.

We will verify your identity through reasonable measures proportionate to the sensitivity of the request and the nature of the account. An authorised agent may make a request on your behalf; we will require appropriate proof of authority.

For School Accounts, requests to review, correct, or delete Student Personal Data should generally be directed to the School. We will assist the School in responding to such requests as required by our agreement with the School and by applicable law.

15.4 Right to Appeal

If we deny your request, in whole or in part, you have the right to appeal our decision. To appeal, reply to our denial email or write to dpo@tutorcloud.in with the subject line “Privacy Rights Appeal”. We will respond to your appeal within sixty (60) days.

The Service uses a limited number of cookies and similar technologies. Please see our Cookie Policy for full details, including how you can manage your preferences.

If you have a complaint about our privacy practices, please contact us first at dpo@tutorcloud.in so that we may have an opportunity to address your concerns. If you are not satisfied with our response, you may lodge a complaint with:

• The Federal Trade Commission (for COPPA and general federal privacy matters) at http://www.ftc.gov.
• The United States Department of Education, Student Privacy Policy Office (for FERPA and PPRA matters) at studentprivacy.ed.gov.
• The California Privacy Protection Agency or the California Office of the Attorney General (for California residents).
• The Attorney General or state consumer protection authority of your state of residence, where applicable.

We may update this Policy from time to time. When we do, we will revise the Effective Date and, in the case of material changes affecting how we collect, use, or disclose Personal Information — in particular Student Personal Data or Children’s data — we will notify Schools and, as appropriate, Parents and users, before those changes take effect. For material changes to our processing of Student Personal Data, we will obtain any required School or parental consent before the changes are applied to previously collected data.