1. Information we collect
We collect information when you create an account, submit a project brief, attend a lesson, interact with our support team or browse our website. Data types include personal identifiers (name, email, phone), academic details (course, institution, rubric), transaction records, chat transcripts and technical logs such as IP address, browser type and timestamps.
| Data type | Purpose | Retention |
|---|---|---|
| Account details | Authentication, service personalisation | 24 months after inactivity |
| Payment confirmations | Billing, compliance | 7 years (statutory) |
| Project briefs & files | Service delivery & revisions | 90 days post handover unless retention requested |
| Support transcripts | Quality assurance, dispute resolution | 18 months |
2. How we use information
Data powers scheduling, resource allocation, personalised tutoring recommendations, delivery of files, and notifications. We send transactional emails (order confirmations, project updates) and, with consent, newsletters or product updates. Aggregated analytics guide product design and help us monitor service health.
- Monitoring platform security, preventing fraud and enforcing academic integrity.
- Complying with legal obligations such as tax filings and anti-money laundering requirements.
- Improving curricula by analysing anonymised lesson outcomes.
5. Security
All traffic is encrypted via TLS 1.2+. Sensitive credentials are hashed with bcrypt. Access to production systems is restricted via role-based controls and multi-factor authentication. We conduct quarterly penetration tests and maintain a breach response plan.
6. Data retention
We retain data only for as long as necessary to provide services or meet legal obligations. Accounts inactive for 24 months are anonymised or deleted. Project files are purged 90 days after handover unless you request continued storage for future revisions.
7. Your rights
You may request access, correction, deletion, restriction of processing or data portability. Residents of the EU, UK, Canada or California have additional rights under GDPR, UK-GDPR, PIPEDA and CCPA respectively. Submit requests via support@teacherandtask.com. We respond within 14 business days.
8. Children’s privacy
Our services target learners aged 13 or older. If we discover data submitted by a child below 13 without verifiable parental consent, we delete it immediately.
9. Updates to this policy
We update this policy to reflect regulatory or operational changes. Updates take effect immediately, and the effective date above will change. If changes are material, we will email account holders and highlight the update in-app.