Privacy Policy

Last updated: May 3, 2026

This Privacy Policy explains what information Tag-a-Tutor collects, how we use it, and the rights you have over it. We try to keep this short and plain. If anything is unclear, email info@tagatutor.org and we'll explain.

Children under 13: Tag-a-Tutor's TAG feature is designed for parents to request tutoring for younger students. We only collect information about a child after a parent has signed up and entered it themselves. If you're a parent who wants information about your child removed, email us at the address above.

1. Who runs Tag-a-Tutor

Tag-a-Tutor is operated by Jack Cleveland, a student at Parish Episcopal School in Dallas, Texas. The platform is hosted on Vercel and stores its data in a managed Postgres database (Neon). We are not affiliated with any school or school district except as a service provider.

2. What we collect

Student and teacher accounts

From Google sign-in: name, email address, profile picture URL, and the email-domain hint Google provides (used to identify which school you belong to).
From your profile: grade level, free blocks/periods, subjects you can tutor or want help with, an optional bio, and any availability information you choose to enter.
From your activity: sessions you book or tutor, ratings and reviews you write, messages you send through the in-app chat, and help-board posts you create or claim.

Parent accounts (TAG)

Email address, hashed password, the school you selected, your child's name, and any notes you write about your child (free-text "anything we should know").
Details from each TAG request you submit: subject, kid's grade and age, learning differences if you choose to share them, what you'd like the tutor to help with, preferred method/time, and location.

Automatic technical data

Your IP address and basic browser/device information from server logs.
Session cookies that keep you signed in for up to 7 days.

We do not knowingly collect more than this. We do not run advertising trackers, social-media pixels, or third-party analytics.

3. Why we collect it

To run the service: showing tutors to students, routing requests to the right tutor or facilitator, sending notification emails, etc.
To keep school data separated: every record is tagged with a school ID so users from one school can't see data from another.
To keep accounts secure: detect suspicious sign-ins, prevent unauthorized access.
To improve the platform: aggregate, non-identifying usage information helps us decide what to build next.

4. Who else sees your data

People at your school see what the role-based UI shows them: students see other students' tutoring profiles; tutors see requests addressed to them; school admins and TAG facilitators see all records at their school for the purposes of moderation and approval.
Service providers who power the platform: Google (sign-in and email delivery via Gmail), Neon (database hosting), Vercel (web hosting). These providers can technically access data in transit or at rest, but they are bound by their own privacy commitments and only act on our instructions.
Nobody else. We do not sell user data. We do not share data with marketers or unrelated third parties. We will only release information to law enforcement in response to a valid legal request.

5. Children's privacy (COPPA)

Tag-a-Tutor is intended for use by students aged 13 or older when they sign in directly. The TAG feature is the exception: parents may submit information about a child under 13 in order to request tutoring. By submitting that information, a parent is providing the consent required under the Children's Online Privacy Protection Act ("COPPA") for Tag-a-Tutor to collect and use that information for the limited purpose of operating the TAG match.

A parent may, at any time:

Review the information we have about their child by signing in and viewing the parent dashboard.
Request that we delete the child's information by emailing info@tagatutor.org.
Withdraw consent and close the parent account by emailing the address above.

6. School privacy (FERPA)

When a school subscribes to Tag-a-Tutor, the school may share student information (name, grade, schedule, contact email) with the platform so the platform can function. Under the Family Educational Rights and Privacy Act ("FERPA"), Tag-a-Tutor acts as a "school official with a legitimate educational interest" or as a service provider operating under direct school control, depending on the school's policy. We will sign a data-processing agreement with any school that requests one, before that school's data is loaded into the platform.

7. How long we keep things

Account records (student, tutor, parent): as long as the account is active.
Session and review history: indefinitely, so school admins can run reports across school years.
Messages: indefinitely, unless you ask us to delete them.
Server logs: typically 30 days, then automatically rotated.

You can request deletion of your account and associated records by emailing the address at the top of this page.

8. Security

Passwords for parent accounts are stored using a one-way salted hash (we cannot read your password). Connections to the site use HTTPS. Database access is restricted to the application and a small number of administrators with personal credentials. We do not claim our security is perfect — no system is — but we follow industry-standard practices for a service of this size.

9. Your rights

Regardless of where you live, you can:

Ask what information we have about you.
Ask us to correct it.
Ask us to delete it.
Withdraw any consent you've given us.

If you live in California, the EU, or another jurisdiction with specific privacy laws (CCPA, GDPR, etc.), you have additional rights under those laws. Email us and we'll honor them.

10. Changes to this policy

If we make material changes, we'll update the "Last updated" date at the top and, if the change is significant, notify active users by email. Continuing to use Tag-a-Tutor after a change means you accept the updated policy.

11. Contact

Questions, requests, or concerns: info@tagatutor.org.