Privacy Policy

This Privacy Policy explains how StudentSlot, operated by LONUT (UEN 53462899X), collects, uses, discloses, protects, and retains personal data. It is intended to support Singapore Personal Data Protection Act 2012 (PDPA) obligations, including notifying individuals of purposes for collection, use, and disclosure.

1. Who We Are

StudentSlot is operated by LONUT (UEN 53462899X) and provides scheduling software for private tutors. For many records entered by tutors, the tutor is responsible for deciding what personal data is entered and why. StudentSlot processes that data to provide the service.

2. Personal Data We Collect

• Tutor account details, such as name, email, subject, lesson settings, availability, and payment records.
• Student and parent details entered by tutors, such as names, emails, phone numbers, addresses, levels, notes, lesson slots, fees, terms, and reschedule history.
• Parent or student email addresses submitted to request access links.
• Authentication, security, device, log, and usage information generated when the service is used.
• Emails and service communications needed to operate login, schedule links, reminders, rescheduling, and support.

3. Purposes

We collect, use, and disclose personal data where reasonably necessary for purposes including:

• providing tutor accounts, parent access links, schedules, rescheduling, reminders, and payment records;
• authenticating users and protecting the service against misuse, fraud, security incidents, and errors;
• sending transactional emails such as login links, schedule links, lesson reminders, and reschedule notices;
• responding to support, debugging, monitoring reliability, and improving StudentSlot;
• complying with legal, regulatory, accounting, security, and operational obligations; and
• enforcing the Terms of Service and Acceptable Use Policy.

4. Consent and Authority

Tutors must ensure they have authority or consent to enter student, parent, and other third-party personal data into StudentSlot. By using the service or submitting an email address to request a link, users consent to the collection, use, and disclosure of personal data for the purposes described in this Policy, unless an exception under applicable law applies.

5. Disclosure and Service Providers

We may disclose personal data to infrastructure, database, hosting, authentication, email, analytics, security, support, and other service providers needed to operate StudentSlot. Current core providers include Vercel, Supabase, and Resend. These providers may process or store data outside Singapore.

6. Overseas Transfers

Personal data may be transferred outside Singapore because StudentSlot uses cloud providers. Where required, we take reasonable steps to ensure that overseas recipients provide a standard of protection comparable to the protection under the PDPA, including by using reputable providers and contractual or platform safeguards.

7. Protection

We use reasonable administrative, technical, and organisational measures to protect personal data, including email-based authentication, scoped database access controls, service-role separation, HTTPS, provider security controls, and limiting operational access to people who need it. No internet service is completely secure.

Users are responsible for protecting their own email accounts, devices, browsers, passwords, access links, and forwarding practices. Reusable parent links may expose lesson information if they are forwarded, stored insecurely, or accessed from a compromised email account or device.

8. Access, Correction, and Withdrawal

Individuals may request access to, correction of, or withdrawal of consent for personal data by contacting the relevant tutor or StudentSlot at joshuawwy@studentslot.com. We may need to verify identity and may refer requests to the relevant tutor where the tutor controls the data. Withdrawal of consent may affect the ability to use the service.

9. Retention

We retain personal data only for as long as reasonably needed for business, legal, security, accounting, support, backup, or operational purposes. Parent access links expire according to term settings, but underlying lesson and payment records may remain available to tutors unless deleted or no longer needed.

10. Cookies and Authentication Storage

StudentSlot uses cookies or browser storage for authentication sessions, security, and basic service operation. Disabling these may prevent the service from working properly.

11. Children and Students

StudentSlot may contain data about students, including minors, when entered by tutors or parents. Tutors are responsible for obtaining any required parental consent and for entering only data that is necessary for lesson administration.

12. Data Breaches

If we become aware of a data breach affecting personal data, we will assess it and take reasonable steps required by applicable law, which may include notifying affected users, tutors, service providers, or regulators where required.

13. Updates

We may update this Policy from time to time. The effective date above shows when this version took effect. Continued use of StudentSlot after an update means the updated Policy applies.

14. Data Protection Contact

Data protection questions, access requests, correction requests, complaints, and withdrawal requests may be sent to joshuawwy@studentslot.com.