Privacy Policy

1. Introduction

MatchTutor ("we", "us", "our") respects your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights regarding it. This policy applies to all users of matchtutor.com.au

2. Data We Collect

2.1 Information you provide directly

• Account data: Name, email address, password
• Profile data: Bio, qualifications, ATAR, teaching subjects, location, hourly rate (tutors); grade level and learning goals (students).
• Credential documents: Degrees, certificates, or identification documents uploaded by tutors during onboarding or profile editing.
• Communications: Messages sent between students and tutors through the Platform.
• Lesson survey data: Ratings, quality assessments, and feedback submitted after lessons.

2.2 Information collected automatically

• Usage data: Pages visited, features used, search queries, booking actions, and timestamps.
• Device data: Browser type, operating system, device type, screen resolution, and IP address.
• Cookies and similar technologies: Session cookies for authentication; analytics cookies to understand usage patterns. See Section 6 for more detail.

2.3 Information from third parties

• Authentication providers: If you sign in via Google, we receive your name and email address from Google.

3. How We Use Your Data

We use personal data for the following purposes and legal bases:

4. Who We Share Data With

We do not sell your personal data. We share it only as described below:

• Between users: Tutor profile information (name, bio, subjects, rating) is visible to students. Student names and session context are shared with the booked tutor.
• Service providers: We use third-party processors including Supabase (authentication, database, and object storage) and Google (sign-in authentication). These processors act only on our instructions and are bound by data processing agreements.
• Administrators: MatchTutor administrators can access user profiles, credential documents, and session information for platform management, fraud prevention, and support purposes.
• Legal requirements: We may disclose data if required by law, court order, or to protect the rights, property, or safety of MatchTutor, our users, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify users before their data is transferred and subject to a different privacy policy.

5. Data Retention

• Active accounts: We retain your data for as long as your account is active.
• Closed accounts: We delete or anonymise personal data within 90 days of account closure, except where we must retain it for legal, tax, or accounting obligations (typically up to 7 years).
• Messages: In-platform messages are retained for 2 years to support dispute resolution.
• Credentials/documents: Tutor-uploaded documents are deleted within 30 days of account closure upon request.

6. Cookies

We use the following types of cookies:

• Strictly necessary: Authentication session cookies required for the Platform to function. These cannot be disabled.
• Analytics: Anonymous usage data to improve the Platform. You can opt out via your browser settings or a cookie preference tool.

We do not use advertising or tracking cookies.

7. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion ("right to be forgotten"): Request deletion of your data, subject to legal retention requirements.
• Portability: Receive your data in a machine-readable format.
• Restriction: Ask us to restrict processing of your data in certain circumstances.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

You have the right to know what personal information we collect, the right to delete, and the right to opt out of the sale of personal information (we do not sell personal information).

To exercise any of these rights, email us at matchtutoraus@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8. Security

We implement appropriate technical and organisational security measures to protect your data, including HTTPS encryption, access controls, and regular security reviews. However, no internet transmission is 100% secure, and we cannot guarantee absolute security. If you suspect unauthorised access to your account, contact us immediately.

9. Children's Privacy

Users must be at least 16 years old. We do not knowingly collect personal data from children under 16 without verifiable parental consent. If we become aware that we have collected data from a child under 16 without consent, we will delete it promptly. If you believe a child under 16 has provided us with data, please contact us.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email at least 14 days before material changes take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions, requests, or complaints, please contact our Privacy team: matchtutoraus@gmail.com