Privacy Policy

Bridge Point Scholars Limited ("we," "us," or "the Company") is committed to protecting the privacy of our students, parents/guardians, tutors, and website visitors. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in compliance with the Saint Lucia Data Protection Act, 2011.

1. Information We Collect

1.1 Account Information

• Students & Parents/Guardians: full name, email address, phone number (+1-758 format), physical address (free-text + latitude/longitude via Google Maps), academic level, subjects of interest, date of birth (for minors), guardian relationship
• Tutors: full name, email, phone number, address, bio, education history, subjects taught, service location and travel radius, profile photo, verification documents (government-issued ID, degree/certification, background check documentation)

1.2 Payment Information

Payment details are processed securely through our payment provider (PowerTranz / First Atlantic Commerce). We do not store full credit card numbers on our servers — only a tokenized reference issued by PowerTranz. We retain transaction records including amounts, dates, payment status, and transaction reference IDs for billing and accounting purposes.

1.3 Session & Usage Data

• Session booking history, attendance records, and session notes
• Tutor availability schedules
• Reviews and ratings submitted after sessions
• Referral code usage
• Subscription plan and billing cycle information

1.4 Technical Data

• IP address, browser type, and device information
• Pages visited and interactions with the platform
• Cookies and similar technologies (see Section 7 below)

1.5 Location Data

For in-person tutoring sessions, we collect location information (address and geographic coordinates) to match students with nearby tutors and calculate travel distances. Location data is collected via Google Maps integration only when you provide an address.

2. How We Use Your Information

We use your personal information to:

• Create and manage your account
• Match students with qualified tutors based on subject, availability, location, and modality preferences
• Process payments and manage subscriptions
• Send session confirmations, reminders, and notifications
• Generate Google Meet links for online tutoring sessions
• Administer the referral program and apply session credits
• Verify tutor qualifications and conduct background checks
• Moderate reviews and maintain platform quality
• Communicate important updates about our services
• Comply with legal obligations

3. Legal Basis for Processing

Under the Saint Lucia Data Protection Act, 2011, we process your personal data on the following bases:

• Contractual necessity: to provide our tutoring services, process bookings, and manage your account
• Consent: for marketing communications, review publication, and optional features like referral tracking
• Legitimate interests: for platform security, fraud prevention, and service improvement
• Legal obligation: to comply with applicable laws and regulations

4. Children's Privacy

Our platform serves students of all ages, including minors under 18. For students under 18:

• A parent or guardian must create and manage the student's account
• The parent/guardian is the primary account holder and billing entity
• We collect only the information necessary to provide tutoring services
• Parents/guardians can view, update, or request deletion of their child's data at any time
• We do not knowingly collect personal data directly from children under 18 without parental consent

5. Information Sharing

We do not sell your personal information. We share data only in the following circumstances:

• Between students and tutors: when a session is confirmed, we share limited information (name, session details, location for in-person sessions, Google Meet link for online sessions) to facilitate the tutoring session
• Service providers: we use third-party services including Supabase (database and authentication), PowerTranz (payment processing), Resend (email notifications), Google (Maps, Calendar, Meet), and Vercel (hosting). These providers process data on our behalf under contractual obligations
• Legal requirements: we may disclose information when required by law, regulation, or legal process
• Platform safety: we may share information to investigate fraud, abuse, or violations of our Terms of Service

6. Data Security

We implement appropriate security measures including:

• Encryption of data in transit (HTTPS/TLS) and at rest
• Row-level security policies on our database
• Secure authentication with email verification and OAuth (Google)
• Private storage for sensitive documents (tutor verification documents are not publicly accessible)
• Role-based access controls (student, tutor, and admin roles with distinct permissions)

7. Cookies

We use cookies and similar technologies for authentication, session management, and basic analytics. We do not use third-party advertising cookies. Essential cookies are required for the platform to function and cannot be disabled.

8. Data Retention

• Account data: retained for as long as your account is active. Deleted accounts are soft-deleted (marked inactive) and permanently purged after 12 months
• Session records: retained for 3 years for audit and quality purposes
• Payment records: retained for 7 years to comply with financial record-keeping requirements
• Tutor verification documents: retained for the duration of the tutor's active engagement plus 1 year after deactivation
• AI chat messages: retained for 12 months from creation, then permanently deleted via automated weekly cleanup
• AI consent records: retained for the lifetime of the account for audit purposes
• Diagnostic results: retained for the lifetime of the account as educational records

8.1 AI-Powered Features

Our platform uses artificial intelligence (provided by Anthropic) to power several learning features. These include the AI Tutor Chat, Diagnostic AI scoring, AI grading on practice questions, AI study plans, AI flashcard generation, AI Writing Corner feedback, the weekly parent digest summary, and tutor-side AI features that process child data (session-prep focus areas, session-note enhancement, and observation enhancement). All of these features require separate, explicit consent from a parent/guardian (for students under 18) or the student themselves (for students 18+). Consent is opt-in by default — every new student profile starts with AI features disabled until a parent explicitly turns them on. Practice questions, the content library, formula sheets, the calculator, the whiteboard, and tutoring sessions all keep working when AI features are disabled.

• Data processed: student name, academic level, enrolled subjects, recent quiz and assignment scores, diagnostic results, and messages entered during AI chat sessions
• Purpose: to personalize tutoring responses, grade student work, and generate diagnostic assessments
• Third-party processor: Anthropic (Claude API). Student data sent to Anthropic is not used to train AI models
• Consent management: AI consent can be granted or revoked at any time from the Settings page. Revoking consent immediately disables all AI-powered features for that student
• Retention: AI chat messages are automatically deleted after 12 months

9. Your Rights

Under the Saint Lucia Data Protection Act, 2011, you have the right to:

• Access your personal data held by us
• Correct inaccurate or incomplete information
• Request deletion of your data (subject to legal retention obligations)
• Withdraw consent for optional processing (e.g., marketing communications)
• Object to processing based on legitimate interests
• Lodge a complaint with the relevant data protection authority

To exercise any of these rights, contact us at info@bridgepointscholars.com.

10. International Data Transfers

Our service providers may process data outside of Saint Lucia (including the United States). Where data is transferred internationally, we ensure appropriate safeguards are in place through contractual obligations with our service providers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The updated policy will be posted on this page with a revised effective date.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: info@bridgepointscholars.com
• Address: Castries, Castries, Saint Lucia