Beta version, effective 15 November 2026. · Wersja beta, obowiązuje od 15 listopada 2026.

Privacy Policy (Tutorfold platform)

Beta. Effective 15 November 2026. Version 2026-11-beta.

Who is responsible. For tutors' accounts and Tutorfold's own website: Green State Labs (contact hello@tutorfold.com; registered address and company details: available on request at hello@tutorfold.com) is the controller. For students' data inside a school: the tutor or school is the controller and Tutorfold is the processor, acting only on the school's instructions under the Data Processing Terms, which are part of the Terms of Service.

What we collect. Tutor account and billing details; usage data (class hours, video minutes, AI use) to run plans and allowances; sign-in records for security; website contact messages. Inside schools: what the school and its students put in, such as names, contact details, level, homework, chat, class recordings and transcripts when the school switches them on.

Why. To provide the service (contract), to bill (contract, legal duty), for security and fraud prevention (legitimate interest), and with consent for optional tracking cookies on a school's website.

Children. A school may teach children. The school is responsible for having a parent's or guardian's consent where the law requires it (in Poland, under 16) and for the consent the school switches on for recording, transcription and AI notes. Tutorfold shows the consent text before these are used and does not use children's data for advertising or for its own purposes.

Where data is hosted. Railway hosts the application and database in the EU (Railway Europe West, Amsterdam). Some sub-processors below (for example Stripe, Anthropic, OpenAI, Resend) may process data outside the EU/EEA; for them we rely on the EU Standard Contractual Clauses (SCCs) or an adequacy decision.

How long. While the account is active, then up to 30 days after the school is closed; encrypted backups are kept up to 12 months, then deleted; billing records as long as tax law requires (5 years). Inside a school, the tutor sets how long transcripts and chat are kept (Policies in the school admin).

Backups are encrypted copies of the whole database, kept with Cloudflare (R2) and Google (Drive) and on company-controlled encrypted equipment. Every backup copy is deleted after at most 12 months.

Questions and requests. Write to hello@tutorfold.com.

Your rights. Access, correction, deletion, restriction, portability (export), objection, and complaint to the President of the Personal Data Protection Office (UODO) or your local authority. Tutors: write to hello@tutorfold.com for access, an export of your school's data, or closing your school and deleting its data. Students: ask your school (see the Privacy page on your school's website); the tutor can find, correct and delete a student's data in the school admin, and Tutorfold helps them do it. Invoices and payment records are kept as long as tax law requires.

Sub-processors.

Cookies. Tutorfold uses only cookies needed to sign in. A school's website loads tracking pixels (Meta, Google, TikTok) only if the school sets them up and the visitor agrees in the cookie banner.