Privacy Policy

Effective 13 September 2026

1. Who is responsible

TutorFlow is operated by Artemii Berko, a sole proprietor established in Ontario, Canada. We are the controller of the personal data described here. For anything about your data, write to @TutorFlowEzBot in Telegram.

2. What we collect

From tutors (the people who subscribe):

• your Telegram user ID, name, username and language code, received from Telegram when you open the bot;
• what you enter in the cabinet: display name, time zone, working hours and booking rules, links to your video-call rooms, and the notes you write about your students;
• subscription records: the term you bought, when access starts and ends, the payment method and a reference to the payment. We never see or store card numbers — card payments are collected by Paddle on its own pages.

From students (people a tutor adds or who join a tutor’s bot): Telegram user ID, name, username and language code; the lessons they book, move or cancel; the count of lessons paid for and held; and reminder preferences. A student’s data is visible to their tutor and to nobody else.

Technical data: IP address, request logs and error reports needed to run and protect the Service. The website sets no cookies; the Telegram apps keep only interface preferences on your device. Paddle’s checkout uses its own cookies under Paddle’s policy.

3. Why we use it and on what basis

• To provide the Service — showing free slots, recording bookings and balances, sending reminders and messages through the tutor’s bot. Basis: performance of our contract with the tutor; for students, the tutor’s legitimate interest in running their lessons, which they have asked us to serve.
• To bill the subscription — creating the invoice, applying the payment, sending a notice before access ends. Basis: performance of the contract.
• To keep the Service secure — preventing abuse, investigating errors. Basis: our legitimate interest in running a reliable, lawful service.
• To meet legal obligations — keeping payment records for tax and accounting.

We do not send marketing messages, show advertising or sell personal data.

4. Who receives it

• Telegram — every message, button and app screen goes through Telegram’s Bot API; Telegram’s own privacy policy applies to your use of Telegram.
• Paddle (Paddle.com Market Limited / Paddle.com Inc.) — our merchant of record for card payments. Paddle collects your email, country and payment details on its checkout as an independent controller, to complete the sale, calculate tax and issue the receipt. We receive the payment status, the country and a customer reference.
• Payment processors for other methods — Telegram for payments in Stars; a cryptocurrency payment processor for crypto payments. Each receives what it needs to take the payment.
• Hosting and monitoring providers that run our servers and collect error reports, under contracts that limit them to acting on our instructions.
• Authorities, where the law requires it or to protect the rights and safety of users.

5. Where it is stored

Our servers may be located outside your country. Where data leaves the European Economic Area, the United Kingdom or another jurisdiction with transfer rules, we rely on the safeguards those rules allow, such as standard contractual clauses.

6. How long we keep it

• Account and student data — for as long as the tutor’s account exists, including while access is paused so it can be renewed.
• On a deletion request — removed within 30 days, except what we must keep by law.
• Payment records — for the period tax and accounting law requires, up to 7 years.
• Request logs — 30 days.

7. Your rights

Depending on where you live, you may have the right to access your data, correct it, have it deleted, receive a copy in a portable format, object to or restrict certain processing, and complain to your data protection authority. Write to @TutorFlowEzBot; we answer within one month. Students exercise their rights the same way, or through their tutor.

8. Security

Traffic is encrypted in transit. Bot credentials are stored encrypted. Access to production systems is limited to the operator. No method of storage or transmission is completely secure; tell us at once if you believe your account has been misused.

9. Children

Subscribing to TutorFlow is for adults. A tutor who teaches minors is responsible for obtaining any parental consent their local law requires before adding a student.

10. Changes

We may update this Policy. Material changes are announced in the TutorFlow bot before they take effect, and the effective date above is updated.