Privacy Policy

1. Information We Collect

Information You Provide

When you create an account and use Lesson Console, you may provide us with:

• Account Information: Name, email address, password, and profile details
• Studio Information: Business name, address, contact details, and teaching schedule
• Student Records: Student names, contact information, lesson history, and progress notes
• Payment Information: Billing details processed through our payment provider (Stripe)
• Communications: Messages sent through our platform, support inquiries, and feedback

Information Collected Automatically

When you use our service, we automatically collect:

• Usage Data: Pages visited, features used, and actions taken within the platform
• Device Information: Browser type, operating system, and device identifiers
• Log Data: IP address, access times, and referring URLs
• Cookies: See our Cookie Policy for details

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our studio management services
• Process payments and manage your subscription
• Send lesson reminders, invoices, and service notifications
• Respond to your support requests and inquiries
• Analyze usage patterns to improve the platform
• Detect, prevent, and address technical issues or fraud
• Comply with legal obligations

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, we process your personal data based on the following legal grounds:

Contract Performance

Processing necessary to provide our services to you, including account management, lesson scheduling, and payment processing.

Legitimate Interests

Processing necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring platform security, where these interests are not overridden by your rights.

Consent

Where you have given clear consent for us to process your personal data for specific purposes, such as marketing communications.

Legal Obligation

Processing necessary to comply with legal requirements, such as tax reporting or responding to lawful requests from authorities.

4. Data Sharing and Third Parties

We share your information only in the following circumstances:

Service Providers

We work with trusted third-party service providers who process data on our behalf. See our Subprocessors page for a complete list.

Legal Requirements

We may disclose information when required by law, court order, or government request, or when necessary to protect our rights, safety, or property.

Business Transfers

If Lesson Console is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

With Your Consent

We may share information with your explicit consent for purposes not covered in this policy.

5. International Data Transfers

Lesson Console is operated from Canada, and our data is stored in the United States. If you are accessing our services from outside these regions, please be aware that your information may be transferred to, stored, and processed in Canada and the United States.

For users in the EEA or UK, we ensure appropriate safeguards are in place for international transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data processing agreements with all subprocessors
• Assessment of the data protection laws in recipient countries

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active, and for up to 30 days after deletion to allow for account recovery
• Transaction Records: Retained for 7 years for tax and legal compliance purposes
• Usage Logs: Retained for up to 90 days for security and troubleshooting
• Support Communications: Retained for 3 years to provide consistent support

After these periods, data is securely deleted or anonymized for aggregate analytics.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request that we limit how we use your data
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests or for direct marketing
• Withdraw Consent: Where processing is based on consent, withdraw that consent at any time

To exercise these rights, please contact us at [PRIVACY_EMAIL]. We will respond to your request within 30 days.

You also have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data appropriately.

8. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Regular security assessments and vulnerability scanning
• Access controls and employee training
• Secure data centers with physical security measures

For more details, see our Security page.

9. Children's Privacy

Lesson Console is designed for use by music teachers and studio owners, not by children directly. Teachers may store information about minor students as part of their studio management.

We do not knowingly collect personal information directly from children under 13 (or the applicable age in your jurisdiction). If you are a parent or guardian and believe we have collected information about your child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or through the platform for significant changes
• Provide at least 30 days notice before changes take effect for material updates

Your continued use of Lesson Console after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: