Privacy Policy

When your organization (tutor or school) signs up, we act as the data controller for your own account data — name, email, billing details, and usage/log data.

When your organization enters information about students into Lektobox (names, contact details, session notes, progress, quiz results, uploaded files), we act as a data processor on your behalf — you (the tutor or school) are the controller for that data and are responsible for having a lawful basis to collect it, including any consent required from students or their parents/guardians where students are minors.

• Account data: name, email address, password hash, organization/branch membership, role.
• Billing data: plan, subscription status. Card and payment details are collected and processed directly by our payment provider, Paddle.com — we do not store full card numbers.
• Customer Data entered by your organization: student profiles, courses, curricula, scheduled sessions, quiz results, notes, and files you upload.
• Technical data: IP address, browser/device information, and usage logs for security and reliability.

We use account and technical data to provide, secure, and improve the Service, communicate with you (e.g. billing or product notices), and comply with legal obligations. We process Customer Data only as instructed by your organization, to operate the features you use (scheduling, progress tracking, quizzes, etc.) — not for our own marketing purposes.

We share data with a limited number of service providers who help us run Lektobox, including: cloud hosting/infrastructure, email delivery (for notifications and invites), and Paddle.com (payment processing and billing, acting as Merchant of Record). Each is bound by contractual data-protection obligations.

We retain account and Customer Data for as long as your organization has an active account, and for a limited period afterward to allow reactivation and to meet legal/accounting obligations, after which it is deleted or anonymized.

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Account holders can exercise these rights directly in the app for account data; requests concerning student data should generally go through the tutor/school organization that controls it, or you may contact us at evgeniy.python.developer@gmail.com and we will route the request appropriately.

Data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.

We use industry-standard measures — encryption in transit, access controls, and hosting provider security practices — to protect data against unauthorized access, loss, or misuse. No system is 100% secure, and we cannot guarantee absolute security.

Lektobox itself is intended for use by tutors, schools, and their staff. Student profiles (including those of minors) are entered and managed by the tutor/school organization, which is responsible for obtaining any required parental/guardian consent under applicable law (e.g. GDPR, COPPA) before entering a minor's data.

We use essential cookies/local storage required for authentication and core functionality. We do not use third-party advertising cookies.

We may update this Privacy Policy from time to time. Material changes will be notified by email or in-app notice.

For privacy questions or requests, contact us at evgeniy.python.developer@gmail.com.