Privacy policy

Business Tutor is a tutoring service for SFU Beedie students, based in Metro Vancouver, British Columbia. This policy covers businesstutor.ca and the sessions booked through it. We follow British Columbia's Personal Information Protection Act (PIPA).

• Account details: your name, email address and password (the password is stored scrambled; we cannot read it).
• Booking details: the course, the time you asked for, online or in person, your phone number if you give one, and what you want to cover.
• Session reports: notes your tutor writes after a session, and any files attached to them.
• Referrals and coupons: which referral code you signed up with and which coupon you used.
• Tutor applications: your contact details, program, grades, experience and resume.
• Basic technical data: the cookies needed to keep you logged in and to remember light or dark mode. We do not run advertising trackers.

To book and run your sessions, email you confirmations and session reports, take payment after a session, handle referrals, review tutor applications, and answer your messages. We do not use your information for anything else, and we never sell it or rent it.

We use a small number of service providers to run the site. They only process data on our behalf:

• Supabase: our database, login system and private file storage.
• Resend: sends our emails (confirmations, session reports).
• Hostinger: hosts the website.
• Zoom: online sessions. Zoom's own privacy policy applies inside the meeting.
• Google: only if you choose "Continue with Google" to sign in.

Some of these providers store data outside Canada, including in the United States, where it is subject to local law.

Account, booking and session report data stay for as long as your account is open, so you can re-read your reports. Tutor applications are deleted within 12 months if we do not move forward. Payment records are kept for as long as tax law requires.

You can see and edit your profile and bookings on your account page at any time. You can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete your account and its data. Message us on WhatsApp and we will act within 30 days.

Our students are university students. If you are under 19, please have a parent or guardian read this policy with you before booking.

Every table in our database is locked so that students can only read their own records. Files such as session attachments and resumes sit in private storage and are opened through short-lived links. No system is perfect; if a breach ever affected you, we would tell you promptly.