Privacy Policy

1. Introduction

YStarEdu, Inc. (“YStarEdu,” “we,” “us,” or “our”) provides a cloud-based operations and learning management platform for tutoring and education organizations. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our websites, applications, and related services (collectively, the “Services”).

By using the Services, you acknowledge that you have read this Privacy Policy. If you do not agree, please discontinue use of the Services.

2. Scope and roles

Depending on your relationship with us, we may process personal information as a business (“data controller”) for our own operational purposes, and/or as a processor on behalf of organizations that subscribe to the Services (“Customers”). Customers are responsible for their own notices and consents to their end users (for example, students, parents, and staff). Where we process personal information solely on a Customer’s instructions, the Customer’s privacy terms may also apply.

3. Information we collect

We may collect the following categories of information:

• Account and profile data: name, email address, phone number, role, organization affiliation, credentials, profile photo, and similar identifiers you or your administrator provide.
• Authentication and security data: login events, session tokens, device/browser metadata, IP address, and security logs used to protect accounts and detect abuse.
• Operational and educational data: scheduling, attendance, assignments, billing records, teacher payment–related fields permitted by the Customer configuration, internal notes entered by authorized users, and other content submitted through the Services.
• Support and communications: messages you send to us (including email), feedback, and diagnostic information you choose to share when contacting support.
• Technical and usage data: application errors, performance metrics, and aggregated usage patterns to maintain reliability and improve the product.

We do not use the Services to knowingly collect special categories of data (such as health information) unless a Customer configures fields for that purpose and has an appropriate legal basis. Customers are responsible for the categories of data they collect through the platform.

4. How we collect information

We obtain personal information from:

• You, when you register, sign in, complete forms, or communicate with us.
• Your organization’s administrators, who may create or manage user accounts.
• Automated technologies necessary to operate and secure the Services.
• Service providers that assist us in delivering the Services, subject to contracts.

5. How we use information

We use personal information to:

• Provide, operate, maintain, and improve the Services.
• Authenticate users, enforce permissions, and protect against fraud and misuse.
• Communicate about the Services, including security notices and administrative messages.
• Provide customer support and respond to lawful requests.
• Comply with law, regulatory obligations, and contractual commitments.
• Analyze usage in an aggregated or de-identified form to understand product performance and plan improvements.

We do not sell your personal information and we do not use it for third-party behavioral advertising across unrelated sites.

6. Disclosure of information

We may disclose personal information:

• Within your organization according to role-based access configured in the Services.
• To service providers who perform functions on our behalf (for example, hosting, email delivery, monitoring) under written agreements that require appropriate confidentiality and security measures.
• For legal reasons if we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, safety, and integrity of our users, the public, or YStarEdu.
• In connection with a business transaction such as a merger, acquisition, financing, or sale of assets, subject to confidentiality obligations and continued protection of personal information as described here.
• With your direction or consent when you or your administrator explicitly authorizes sharing.

7. Retention

We retain personal information for as long as necessary to provide the Services, fulfill the purposes described in this policy, meet legal or audit requirements, and resolve disputes. Retention periods may depend on the Customer’s settings, the nature of the data, and applicable law. When data is no longer needed, we delete or de-identify it in accordance with our retention procedures.

8. Security

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, or alteration. These measures include access controls, encryption in transit where appropriate for the Services, monitoring, and vendor diligence. No method of transmission or storage is completely secure; we encourage strong passwords, multi-factor authentication when available, and prompt reporting of suspected incidents.

9. International transfers

We may process and store information in the United States and other countries where we or our service providers operate. When we transfer personal information across borders, we take steps consistent with applicable law, such as contractual safeguards where required.

10. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, or export certain personal information, or to object to or restrict certain processing. Many requests can be fulfilled through your account settings or by contacting your organization’s administrator, because the Customer often controls workspace data.

You may also contact us at support@ystar.edu to submit a request. We will respond in accordance with applicable law and may need to verify your identity. If you are in the European Economic Area, UK, or Switzerland, you may have the right to lodge a complaint with a supervisory authority.

11. Children

The Services are intended for use by schools, tutoring businesses, and their authorized users. We do not knowingly market the Services to children under 13 as consumers. Where Customers include student information, the Customer is responsible for compliance with laws such as COPPA and FERPA as applicable. If you believe we have collected information from a child inappropriately, please contact us and we will take appropriate steps.

12. U.S. state privacy notices

Residents of certain U.S. states may have additional rights under local privacy laws (for example, rights to know, delete, or opt out of certain processing). To exercise rights that apply to YStarEdu’s processing, contact us at support@ystar.edu. We do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are commonly defined in state laws.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. If changes are material, we will provide additional notice as appropriate (for example, via the Services or email to administrators).

14. Contact us

Questions about this Privacy Policy or YStarEdu’s privacy practices may be sent to support@ystar.edu.