This Privacy Policy explains how LessonSync collects, uses, shares, and retains personal information through lessonsync.app, Instructor workspaces, student portals, Group Sign-Up, support, and related services.

LessonSync determines how information is used for its own account administration, subscription billing, security, support, and service improvement. When an Instructor decides why and how to manage student, family, lesson, and business records, the Instructor is responsible for those decisions and LessonSync processes that information on the Instructor’s behalf to provide the service.

If your information is in an Instructor’s workspace, contact that Instructor first for questions about their teaching records or practices. LessonSync will assist with an appropriate request when needed.

Account and profile information includes names, email addresses, login and authentication records, role, workspace membership, profile settings, timezone, and information used to secure or recover an account.

Instructor-managed information may include student and guardian names and contact details, relationships, lesson schedules, attendance, notes, packages, balances, payment records, reminders, messages, portal access, custom fields, and other teaching-business records.

Group Sign-Up information may include a student name, parent or guardian name, email, phone number, message, requested group or session, answers to Instructor-created questions, waiver or checkbox acceptance, confirmation status, and related timestamps.

Subscription information includes billing email, plan, billing interval, subscription status, transaction identifiers, and limited card metadata such as brand and last four digits. Stripe collects and stores full card numbers and other payment credentials; LessonSync does not store full card numbers on its servers.

Communications may include emails sent through LessonSync, delivery status, support requests, and messages you send to us. Technical information may include IP address, browser and device type, authentication session data, pages or features used, timestamps, diagnostic information, security events, and server logs.

We receive information directly from you, from an Instructor or organization that uses LessonSync, from Portal Users and Group Sign-Up submitters, automatically when the service is used, and from service providers such as authentication, billing, email, and monitoring providers.

We use information to provide and personalize the service; authenticate users; maintain workspaces and portals; process subscriptions; deliver requested email; provide support; prevent fraud and abuse; monitor security and reliability; diagnose errors; enforce our terms; comply with law; and improve product functionality and user experience.

We use data only for the purposes described here, for another purpose disclosed when it is collected, or with appropriate permission. We do not use Instructor or student data for third-party advertising or to build advertising profiles.

When an Instructor chooses an AI-assisted draft, recap, summary, report, template, or import preview, LessonSync processes the request, relevant workspace context, and generated result. Depending on the feature, that context may include names, contact details, lesson notes, attendance, schedules, package or balance information, or pasted roster data.

LessonSync sends only the context needed for the requested feature to its configured AI model provider. We record usage metadata such as feature, model, action count, and token count. Generated content may be stored in LessonSync when the Instructor chooses to save it to a record.

The AI provider may process and retain submitted information under its contract and privacy commitments. Instructors are responsible for avoiding unnecessary personal or sensitive information and for having authority to submit the information they use with AI features.

LessonSync uses third-party providers to operate the service, currently including Vercel and Fly.io for hosting, Supabase for authentication and data services, Resend for product email, Stripe for LessonSync subscription billing, Sentry for error and performance monitoring, and an AI model provider for user-requested AI features. These providers process information only for the relevant service and under their own contractual and privacy obligations.

Stripe receives payment credentials, billing address, and transaction information directly. LessonSync receives the customer and subscription identifiers, status, plan, billing email, and limited payment-method details needed to operate the subscription.

Sentry may receive technical error, browser, device, release, and performance information. LessonSync masks text, form inputs, and media in browser error replays and does not intentionally send student records as analytics. An error report may still contain technical context needed to diagnose a problem.

Instructors may display links to payment services they select, such as Venmo, Zelle, bank transfer, or their own Stripe link. Those services are independent of LessonSync and their own privacy terms apply when a student or family uses them.

We share personal information with service providers only as needed to operate, secure, support, and improve LessonSync or provide a feature you request.

Student and family information is available to the Instructor or organization managing the workspace and to authorized team members. Portal information is available to the invited adult student or parent or legal guardian managing that portal. An organization owner controls workspace membership and shared workspace data.

We may disclose information if reasonably necessary to comply with law or legal process; protect users, the public, or the service; investigate fraud or security issues; enforce our terms; or complete a merger, financing, reorganization, or sale of all or part of the service. If ownership changes, information may transfer subject to this policy or notice of materially different practices.

LessonSync does not sell personal information for money and does not share personal information for cross-context behavioral advertising. We may use or disclose information that has been aggregated or de-identified so it cannot reasonably identify a person.

LessonSync uses authentication cookies and browser storage needed to keep users signed in, protect sessions, remember interface choices, and complete requested workflows. We also use limited technical and public-page metrics to understand reliability and whether visitors start or complete signup.

Browser settings can clear or block cookies and local storage, but doing so may prevent login or other essential features from working. LessonSync does not use third-party advertising cookies.

Instructor and organization accounts are for adults age 18 or older. A student portal may be managed only by an adult student or by a parent or legal guardian acting for a minor. Children under 13 may not create an account, independently use a portal, or submit a Group Sign-Up form themselves. A parent, legal guardian, or other legally authorized adult must submit information for them.

Instructors may create and maintain records about minor students when the Instructor has an appropriate legal basis and any required parent or guardian permission. LessonSync does not require a student’s date of birth for ordinary records or portal setup. Instructors are responsible for not directing children under 13 to provide information directly and for collecting no more information than is reasonably needed.

A parent or legal guardian may contact the Instructor or support@lessonsync.app to ask about information concerning their minor, request access, correction, or deletion, or withdraw authorization where applicable. We may verify the requester’s identity and authority and coordinate with the responsible Instructor before acting.

If we learn that a child under 13 submitted personal information directly or is independently operating an account, we may restrict access and delete or otherwise address that information as appropriate. Please notify support@lessonsync.app promptly if you believe this has occurred.

We retain account and product information while the relevant account or workspace is active and for as long afterward as reasonably needed to provide the service, complete a requested deletion, comply with legal and accounting obligations, resolve disputes, prevent fraud, and enforce agreements. The length of time depends on the type of information, why it was collected, and applicable requirements.

Raw anonymous Group Sign-Up funnel events are retained for 90 days. Subscription and transaction records may be retained as needed for tax, accounting, fraud prevention, and dispute purposes. Security, error, email-delivery, and support records are retained for operationally appropriate periods or according to the relevant provider’s retention settings.

A workspace owner can delete the workspace from the Account page. A non-owner who deletes their account removes their own login and attribution, while records shared with the organization remain under its control. Users should export information they need before deletion.

Deletion removes information from active LessonSync systems, subject to information we must retain and residual copies in backups that are isolated from ordinary use and removed through the backup lifecycle. Independent providers such as Stripe may retain information under their own policies and legal obligations.

You can review or update many account and workspace details in LessonSync. Workspace owners can export product data and delete their workspace. Portal Users and people whose information was submitted to an Instructor should generally contact that Instructor first because the Instructor controls the teaching record.

Depending on where you live and subject to legal exceptions, you may have rights to request access, correction, deletion, or a portable copy of personal information; to object to or restrict certain processing; or to withdraw consent where processing is based on consent. LessonSync does not discriminate against a person for exercising an applicable privacy right.

Send requests to support@lessonsync.app and describe the account, Instructor, or Group Sign-Up involved. We may verify your identity, authority, and relationship to the relevant workspace before responding. An authorized agent may submit a request where permitted, but we may require proof of authorization. If we cannot fulfill a request, we will explain why when legally required.

We use commercially reasonable administrative, technical, and organizational safeguards, including authenticated access controls and security features provided by our infrastructure partners. No online service can guarantee absolute security. Users are responsible for strong passwords, credential confidentiality, and appropriate workspace access.

LessonSync and its providers may process information in the United States and other locations where they operate. Privacy and data-protection laws in those locations may differ from the laws where you live. Where required, appropriate contractual or other safeguards should be used for international transfers.

We may update this Privacy Policy as the service or law changes. For material changes, we will provide reasonable notice by email, in-product message, or another appropriate method and update the effective date on this page.

Questions or privacy requests may be sent to support@lessonsync.app.