INTRODUCTION

1.1. This Privacy Policy governs how Tutorverse ("we", "us", or "our") collects, uses, stores, and protects personal information from users of the Tutorverse platform ("Platform").

1.2. By using the Platform, you (as a Tutor or Client) consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Platform.

LEGAL BASIS

2.1. This Policy is governed by the Protection of Personal Information Act 4 of 2013 (POPIA) and any related South African privacy regulations.

2.2. Tutorverse is the "responsible party" as defined under POPIA and takes all reasonable steps to ensure that your personal information is processed lawfully and securely.

INFORMATION WE COLLECT

3.1. We collect the following categories of personal information:

3.1.1. Information You Provide

3.1.1.1 Full name

3.1.1.2 Email address

3.1.1.3 Phone number

3.1.1.4 Qualification (Credential) Uploads

3.1.1.5 Payment (via Paystack)

3.1.1.6 Tutor profile data (subjects, bio, availability, rates)

3.1.2. Information We Collect Automatically

3.1.2.1 IP address

3.1.2.2 Device information and browser type

3.1.2.3 Usage data (e.g. bookings, messages, session logs)

3.1.2.4 Cookies and similar technologies

PURPOSES OF COLLECTION

4.1. Personal information is processed for the following purposes:

4.1.1 Creating and managing user accounts

4.1.2 Facilitating tutoring sessions and bookings

4.1.3 Processing payments and issuing receipts

4.1.4 Providing customer service and support

4.1.5 Verifying certifications (where voluntarily disclosed)

4.1.6 Preventing fraud and abuse

4.1.7 Complying with legal obligations

4.1.8 Improving Platform functionality and analytics

CONSENT AND PROCESSING CONDITIONS

5.1. We only process your personal information with your consent, or where it is necessary to perform our contract with you, comply with a legal obligation, or pursue a legitimate interest (e.g., security, service optimisation).

5.2. You may withdraw your consent at any time by emailing info@tutorverse.co.za, subject to legal and contractual limitations.

DATA STORAGE

6.1. We use Google Firebase (provided by Google LLC) as a service provider (known as an "Operator" under POPIA) for the storage and processing of your Personal Information, application development, and related services.

6.2. In using Firebase, we have taken steps to ensure that they comply with the necessary security and privacy standards and that they process Personal Information only on our documented instructions.

PAYMENT PROCESSING

7.1. To process payments for our products/services, we use Paystack as a secure payment facilitator. Paystack acts as an Operator (a party processing Personal Information on our behalf) for all payment transactions.

7.2. When you make a purchase on our website, we share your personal information with our payment processor, Paystack (an Operator under POPIA), to enable the secure and lawful processing of your payment.

7.3. We share the following categories of your Personal Information with Paystack for the sole purpose of authorising, processing, and securing the transaction: your Name, Email Address, Phone Number, the Transaction Amount, and certain Device/Transaction Data (such as your IP address).

Please note that your full payment card details are collected directly by Paystack in their secure checkout environment and are not stored on our servers. For full details on how Paystack handles and secures your data, please refer to: https://paystack.com/privacy/merchant?q=/za/privacy/merchant.

CARD TOKENISATION

8.1. We do not store your full payment card number (the 16-digit Primary Account Number or PAN) or your Card Verification Value (CVV) on our platform. Instead, we employ the industry standard of tokenisation by using a third-party Payment Processor (Paystack, who acts as our Operator).

8.2. When you save your card details, Paystack securely stores your sensitive information and provides us with a non-sensitive token.

8.3. We only store this token and the following partial card details to enable you to identify and manage your saved payment methods:

8.3.1 Card Type (e.g., Visa, Mastercard)

8.3.2 Last 4 digits of the card number

8.3.3 Expiry Date

8.4. This process ensures that the minimum amount of your personal financial information is processed and retained by us.

PROCESSING OF LOCATION INFORMATION

9.1. The provision of your lesson location is voluntary but necessary to access our tutoring services which depend on proximity.

9.2. We collect and process your Lesson Location for the following specific and explicit purpose:

9.2.1 Service Matching: To effectively match you with available tutors/service providers in your immediate geographic area. This ensures the functionality and quality of the in-person lesson service.

9.2.2 Service Delivery: To facilitate the Tutor's ability to find the correct location for the scheduled lesson.

9.3. Disclosure and Consent

9.3.1 By voluntarily entering your Lesson Location, you provide us with your explicit consent to process and share this information.

9.3.2 We will only share the necessary Lesson Location details (which may include the street address if provided) with the specific Tutor(s) you have engaged for a lesson or who are being considered for a booking.

9.3.3 Risk Acknowledgment: You acknowledge that a physical address is personal information. If you choose to use your private residence as a Lesson Location, you do so at your own risk. We limit the visibility of this address to only the necessary service providers (Tutors) to minimise the risk.

9.3.4 Consequences of Failure to Provide Failure to provide a Lesson Location will mean that our platform will be unable to match you with tutors for in-person services, as we cannot determine proximity or facilitate service delivery. This will limit you to online services only.

9.4. Purpose of Processing: We process and retain the token and partial card details for the following specific purposes:

9.4.1 Performance of a Contract: To facilitate future or recurring transactions (e.g., monthly fees, subscription renewals) as explicitly agreed to by you.

9.4.2 User Convenience: To allow you to easily identify and select your saved payment method for fast checkout.

9.5. Consent for Stored Payments

9.5.1 We will only store your payment token and the partial card details listed above if you provide us with explicit consent to "Save Card Details for Future Use" at the time of checkout.

9.5.2 You have the right to withdraw this consent and request the deletion of your saved payment token at any time via your account settings.

PROCESSING OF CREDENTIAL DOCUMENTS

10.1. We process your Credential Documents for the following specific, explicit, and lawful purposes:

10.1.1 Verification: To perform internal (and, where necessary, external via a third-party verification Operator) checks to confirm the validity of the credentials and that the identity on the document matches the registered Tutor account.

10.1.2 Public Display (Credibility): As a marketing tool to potential service buyers (students/parents), to demonstrate and reinforce your professional credibility and qualifications.

10.2. By voluntarily uploading and agreeing to display your Credential Documents, you provide express, specific, and informed consent to the following:

10.2.1 Internal Verification: The processing of all personal information contained within the Credential Document for verification purposes.

10.2.2 Public Visibility: You acknowledge and expressly consent that once approved and displayed, your Credential Documents (or a verified excerpt/badge) will be publicly visible to all users and any public visitor to your Tutor profile on the platform.

10.2.3 Public Availability: The information will remain publicly available until you actively remove it from your profile, which may be at any time.

10.3. Processing and Retention

10.3.1 Verification Operator: You consent to us sharing the Credential Document with an authorised third-party Operator solely for the purpose of identity and credential verification. We ensure that any such Operator is bound by written agreement to uphold the same POPIA standards as the Responsible Party.

10.3.2 Retention: We will retain a copy of the verified Credential Document only for as long as you maintain it on your public profile or as required for regulatory compliance or dispute resolution related to your profile's accuracy.

10.4. Right to Withdraw Consent (Deletion)

10.4.1 You may withdraw this consent and request the cessation of processing and public display at any time by removing the Credential Document from your profile.

10.4.2 The withdrawal of consent does not affect the lawfulness of the processing or public display that occurred prior to your withdrawal.

10.4.3 Upon deletion, we will take all reasonable steps to permanently destroy or de-identify the records in accordance with our retention policy, unless otherwise required by law.

RESPONSIBLE USE OF PERSONAL DATA

11.3. We do not sell your personal data.

11.4. We may disclose your personal information only in the following instances:

11.4.1 To other users (e.g., Tutors and Clients) where required for session facilitation

11.4.2 To trusted third-party service providers (e.g., hosting, payment processors)

11.4.3 To law enforcement or regulatory bodies when legally required

11.4.4 To internal staff for support and platform management, under confidentiality agreements

DATA STORAGE AND SECURITY

12.1. Tutorverse stores personal information securely using industry-standard protections, including but not limited to:

12.1.1 SSL encryption

12.1.2 Access control and authorisation

12.1.3 Regular monitoring

12.2. While we take all reasonable precautions, no system is entirely immune to risk.

DATA RETENTION

13.1. We retain personal data for as long as it is required to:

13.1.1 Fulfil the purpose for which it was collected

13.1.2 Meet our legal or regulatory obligations

13.1.3 Resolve disputes or enforce agreements

13.2. You may request deletion of your personal data by contacting info@tutorverse.co.za. We will act on your request unless legal or operational reasons prevent us from doing so.

YOUR RIGHTS UNDER POPIA

14.1. You have the following rights under POPIA:

14.1.1 To access your personal information

14.1.2 To request correction or deletion of inaccurate or outdated information

14.1.3 To object to the processing of your personal information

14.1.4 To withdraw consent for processing

14.1.5 To lodge a complaint with the Information Regulator at complaints.IR@justice.gov.za

14.2. Requests to exercise these rights should be sent to info@tutorverse.co.za.

COOKIES AND TRACKING

15.1. We use cookies and similar tracking technologies to:

15.1.1 Improve platform performance

15.1.2 Remember user preferences

15.1.3 Track booking and usage patterns for analytics

15.2. You may disable cookies via your browser settings, but doing so may impair platform functionality.

THIRD-PARTY LINKS

16.1. The Platform may include links to third-party websites or services (e.g., Paystack, external resources). We are not responsible for the privacy practices of these entities. Users are encouraged to read their privacy policies separately.

CHILDREN’S PRIVACY

17.1. Our services are intended for users aged 18 and above.

17.2. If we discover that we have collected personal data from a minor without verified parental consent, we will delete such information promptly.

DATA BREACH NOTIFICATION

18.1. In the event of a data breach involving personal information, Tutorverse will notify affected users and the Information Regulator within a reasonable time as required by POPIA.

POLICY UPDATES

19.1. We may update this Privacy Policy from time to time. Updates will be communicated via email or in-app notice at least 7 days before taking effect.

19.2. Continued use of the Platform after an update indicates acceptance of the revised Policy.

CONTACT INFORMATION

20.1. For privacy questions, data requests, or complaints, please contact: info@tutorverse.co.za