1. Introduction
Welcome to XyBricks ("we," "our," or "us"). XyBricks operates an online education tutoring marketplace accessible at xybricks.com (the "Platform"). We are committed to protecting your privacy and ensuring the security of your personal information.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Platform, create an account, book tutoring sessions, or otherwise engage with our services. By accessing or using our Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
If you do not agree with the terms of this Privacy Policy, please discontinue use of our Platform immediately.
2. Information We Collect
We collect information that you provide directly to us, information that is generated automatically when you use our Platform, and information from third-party sources. The categories of information we collect include the following:
2.1 Personal Information
When you register for an account, book a session, or interact with our services, we may collect the following personal information:
- Account Information: Full name, email address, phone number, date of birth, profile photograph, and password.
- Profile Information: Educational background, subjects of interest, learning goals, tutor qualifications, certifications, and biographical details.
- Payment Information: Billing address, credit or debit card numbers, bank account details, and transaction history. Payment card data is processed securely by our third-party payment processors and is not stored on our servers.
- Communication Data: Messages exchanged through our in-platform messaging system, session reviews, feedback, and any correspondence with our support team.
- Verification Data: Government-issued identification documents, background check information, and academic credentials submitted by tutors during the verification process.
2.2 Usage Data
We automatically collect certain information when you access or use the Platform, including:
- Device Information: IP address, browser type and version, operating system, device identifiers, and screen resolution.
- Log Data: Pages visited, time and date of your visit, time spent on each page, referring URLs, and clickstream data.
- Session Data: Tutoring session duration, frequency, subject areas, and scheduling patterns.
- Search Data: Search queries, filters applied, and tutor profiles viewed.
- Location Data: Approximate geographic location derived from your IP address or, with your consent, more precise location data from your device.
2.3 Cookies and Similar Technologies
We use cookies, web beacons, pixels, and similar tracking technologies to collect information about your browsing activities. This includes:
- Essential Cookies: Required for the Platform to function properly, including authentication and security cookies.
- Analytics Cookies: Help us understand how visitors interact with the Platform by collecting and reporting information anonymously.
- Functional Cookies: Enable enhanced functionality and personalization, such as remembering your preferences and settings.
- Advertising Cookies: Used to deliver relevant advertisements and measure the effectiveness of our marketing campaigns.
For more details, please see Section 7: Cookies and Tracking Technologies.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Providing Services: To create and manage your account, facilitate tutoring sessions, process payments, and enable communication between students and tutors.
- Personalization: To tailor your experience on the Platform, recommend tutors based on your learning needs, and customize content and notifications.
- Communication: To send you service-related notifications, respond to your inquiries, provide customer support, and deliver promotional materials (with your consent where required by law).
- Safety and Trust: To verify tutor qualifications, conduct background checks, detect and prevent fraud, and maintain the safety and integrity of our Platform.
- Analytics and Improvement: To analyze usage patterns, monitor the performance of our Platform, conduct research, and improve our services and user experience.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, and governmental requests.
- Marketing: To deliver targeted advertising, measure the effectiveness of our marketing campaigns, and promote our services through various channels.
4. Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
4.1 With Other Users
When you book a tutoring session, certain information (such as your name, profile photo, and relevant learning details) is shared with the tutor. Similarly, tutor profiles — including qualifications, reviews, and availability — are visible to students on the Platform.
4.2 With Service Providers
We engage trusted third-party companies and individuals to perform services on our behalf, including payment processing, data analytics, email delivery, hosting services, customer support, and marketing assistance. These service providers have access to your personal information only to the extent necessary to perform their functions and are obligated to protect it.
4.3 For Legal Reasons
We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to:
- Comply with a legal obligation, regulation, or valid legal process.
- Protect and defend the rights, property, or safety of XyBricks, our users, or the public.
- Detect, prevent, or address fraud, security, or technical issues.
- Enforce our Terms of Service and other agreements.
4.4 Business Transfers
If XyBricks is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred as part of that transaction. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
4.5 With Your Consent
We may share your information with third parties when you have given us explicit consent to do so.
5. Data Security
We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of data in transit using TLS/SSL protocols and encryption of sensitive data at rest.
- Regular security assessments, vulnerability scans, and penetration testing.
- Access controls that limit employee and contractor access to personal information on a need-to-know basis.
- Secure data storage with redundant backups and disaster recovery procedures.
- Continuous monitoring of our systems for suspicious activity and potential security threats.
While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security but are committed to promptly addressing any security incidents in accordance with applicable laws.
6. Your Rights and Choices
Depending on your location and applicable law, you may have the following rights regarding your personal information:
- Access: You may request a copy of the personal information we hold about you.
- Correction: You may request that we correct inaccurate or incomplete personal information.
- Deletion: You may request that we delete your personal information, subject to certain legal exceptions.
- Portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
- Restriction: You may request that we restrict the processing of your personal information under certain circumstances.
- Objection: You may object to the processing of your personal information for direct marketing purposes or where processing is based on our legitimate interests.
- Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at privacy@xybricks.com. We will respond to your request within 30 days or as required by applicable law. We may request additional information to verify your identity before fulfilling your request.
6.1 Communication Preferences
You can manage your email notification preferences through your account settings. You may opt out of promotional communications at any time by clicking the "unsubscribe" link in any marketing email or by contacting us directly. Please note that even if you opt out of promotional communications, we may still send you service-related messages necessary for the administration and use of your account.
8. Children's Privacy
Our Platform is designed primarily for users aged 16 and older. We do not knowingly collect personal information from children under the age of 13 (or the applicable minimum age in your jurisdiction) without verifiable parental consent.
Students between the ages of 13 and 17 may use the Platform with the consent and supervision of a parent or legal guardian. Parents or guardians who create accounts on behalf of minors are responsible for the minor's use of the Platform and agree to our Terms of Service and this Privacy Policy on the minor's behalf.
If we become aware that we have collected personal information from a child under the minimum age without appropriate consent, we will take steps to delete that information promptly. If you believe we have inadvertently collected such information, please contact us at privacy@xybricks.com.
9. International Data Transfers
XyBricks operates globally, and your personal information may be transferred to, stored, and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction.
When we transfer personal information across borders, we implement appropriate safeguards to ensure that your data remains protected in accordance with this Privacy Policy and applicable law. These safeguards may include:
- Standard contractual clauses approved by relevant data protection authorities.
- Reliance on the recipient's participation in recognized data protection frameworks.
- Obtaining your explicit consent for specific transfers where required.
- Ensuring that the receiving country provides an adequate level of data protection.
By using our Platform, you acknowledge and consent to the transfer of your information as described in this section.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last updated" date at the top of this page.
- Post a prominent notice on our Platform or send you a direct notification.
- Where required by applicable law, obtain your consent to the changes.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the Platform after any changes to this Privacy Policy constitutes your acceptance of such changes.
11. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us:
XyBricks Privacy Team
- Email: privacy@xybricks.com
- Address: XyBricks Inc., 123 Education Lane, Suite 400, San Francisco, CA 94105, United States
- Phone: +1 (555) 123-4567
- Website: xybricks.com/contact
For users in the European Economic Area, you also have the right to lodge a complaint with your local data protection supervisory authority if you believe that our processing of your personal information violates applicable law.