This Privacy Policy describes how Nabu Tutor Co. ("Nabu Tutor," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website at nabututor.com, use our mobile or web applications, or otherwise interact with our services (collectively, the "Services"). By using our Services, you agree to the collection and use of information as described in this Privacy Policy.
If you do not agree with this Privacy Policy, please do not use our Services. We encourage you to review this policy periodically as it may be updated from time to time.
1. Information we collect
We collect information you provide directly to us, information collected automatically when you use our Services, and information from third-party sources, as described below.
1.1 Information you provide directly
- Account registration information, including your full name, email address, password, and account preferences.
- Profile information, including your educational level, institution, medical specialty, and the board examinations you are preparing for.
- Payment and billing information, including credit card or debit card details, billing address, and transaction history, processed through our third-party payment processor Stripe, Inc.
- Communications you send us, including support requests, feedback, and correspondence.
- Session content, including questions asked, responses provided, topics discussed, and notes generated during tutoring and advising sessions.
- Any other information you choose to provide through forms, surveys, or other interactions with our Services.
1.2 Information collected automatically
- Log data, including your IP address, browser type, operating system, referring URLs, pages viewed, and the date and time of your visit.
- Device information, including hardware model, operating system version, unique device identifiers, and mobile network information.
- Usage data, including features used, session duration, frequency of use, and interaction patterns within the Services.
- Cookies and similar tracking technologies, as described in the "Cookies and tracking technologies" section below.
1.3 Information from third parties
- Single sign-on providers, such as Google, if you choose to authenticate through a third-party service.
- Payment processors, who may share transaction confirmation and fraud prevention data with us.
- Analytics providers, who help us understand how users interact with our Services.
2. How we use your information
We use the information we collect for the following purposes.
2.1 Providing and improving the Services
- To create and manage your account.
- To deliver AI-powered tutoring, personalized study plans, and educational content.
- To facilitate group office hour sessions and one-on-one physician advising sessions.
- To process payments and manage billing.
- To personalize your learning experience based on your goals, performance, and preferences.
- To track your progress and generate session notes and performance reports.
- To improve, test, and develop new features and services.
2.2 Communications
- To send you transactional emails related to your account, sessions, and payments.
- To send you service announcements, updates, and security notices.
- To send you marketing communications about Nabu Tutor features, promotions, or events, subject to your preferences and applicable law.
- To respond to your inquiries and provide customer support.
2.3 Legal and safety
- To comply with applicable laws, regulations, and legal processes.
- To enforce our Terms of Service and other agreements.
- To protect the rights, property, and safety of Nabu Tutor, our users, and the public.
- To detect, investigate, and prevent fraudulent or unauthorized activity.
3. How we share your information
We do not sell your personal information. We may share your information only in the limited circumstances described below.
3.1 Service providers
We share information with third-party vendors and service providers that perform services on our behalf, including payment processing (Stripe, Inc.), cloud hosting, analytics, email delivery, and customer support. These service providers are contractually obligated to use your information only as directed by us and in accordance with this Privacy Policy.
3.2 Session facilitators
If you participate in group office hour sessions or one-on-one physician advising sessions, the facilitator conducting that session will have access to information you share during the session, including your name and any questions or information you choose to disclose. Facilitators are bound by confidentiality obligations under their independent contractor agreements with Nabu Tutor.
3.3 Business transfers
If Nabu Tutor is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email or a prominent notice on our Services before your information is transferred and becomes subject to a different privacy policy.
3.4 Legal requirements
We may disclose your information if we believe disclosure is required by law, subpoena, court order, or other legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of Nabu Tutor, our users, or the public.
3.5 With your consent
We may share your information for any other purpose with your prior consent.
4. Data retention
We retain your personal information for as long as your account is active or as needed to provide you with the Services. We also retain information as necessary to comply with our legal obligations, resolve disputes, enforce our agreements, and for legitimate business purposes.
When you delete your account, we will delete or anonymize your personal information within thirty (30) days, except where we are required to retain certain information by law or for legitimate business purposes such as fraud prevention. Session recordings, if any, may be retained for up to ninety (90) days following session completion unless you request earlier deletion.
5. Your rights and choices
5.1 Account information
You may review, update, or correct your account information at any time by logging into your account settings. If you wish to delete your account, please contact us at kartik@nabututor.com.
5.2 Marketing communications
You may opt out of receiving marketing emails from us by following the unsubscribe instructions included in those emails, or by contacting us directly. You may not opt out of transactional communications related to your account or the Services.
5.3 Cookies
Most web browsers are set to accept cookies by default. You can adjust your browser settings to remove or reject cookies, though doing so may affect the functionality of the Services.
5.4 California residents (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):
- The right to know what personal information we collect, use, disclose, and sell.
- The right to delete personal information we have collected from you, subject to certain exceptions.
- The right to correct inaccurate personal information.
- The right to opt out of the sale or sharing of your personal information (we do not sell personal information).
- The right to limit the use of sensitive personal information.
- The right to non-discrimination for exercising your privacy rights.
To exercise your rights under the CCPA, please contact us at kartik@nabututor.com. We will respond to verifiable consumer requests within forty-five (45) days.
5.5 European Economic Area, United Kingdom, and Switzerland (GDPR)
If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the General Data Protection Regulation (GDPR) or equivalent applicable law, including:
- The right to access personal information we hold about you.
- The right to rectification of inaccurate personal information.
- The right to erasure of your personal information under certain circumstances.
- The right to restrict processing of your personal information.
- The right to data portability.
- The right to object to processing of your personal information.
- The right to withdraw consent at any time where processing is based on consent.
Our legal bases for processing personal information under the GDPR include performance of a contract, compliance with legal obligations, legitimate interests, and your consent. To exercise your GDPR rights, please contact us at kartik@nabututor.com.
6. Cookies and tracking technologies
We use cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your interactions with our Services. Cookies are small data files stored on your device that help us recognize you and remember your preferences.
- Strictly necessary cookies. Required for the Services to function properly, including authentication and security features. These cannot be disabled.
- Functional cookies. Used to remember your preferences and settings to provide a personalized experience.
- Analytics cookies. Used to understand how users interact with our Services and to improve performance. We may use third-party analytics tools such as Google Analytics.
- Marketing cookies. Used to deliver relevant advertising. We do not currently use third-party advertising cookies.
You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may impact the functionality of the Services.
7. Data security
We implement commercially reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit using TLS, restricted access to personal data on a need-to-know basis, and regular review of our security practices.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and applicable regulatory authorities as required by law.
8. Children's privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at kartik@nabututor.com and we will promptly delete such information. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to remove that information.
9. Third-party links and services
Our Services may contain links to third-party websites, applications, or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party services you access through our Services.
10. International data transfers
Nabu Tutor is based in the United States. If you access our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our operations are managed. Data protection laws in the United States may differ from those in your country or region.
For transfers of personal information from the European Economic Area, United Kingdom, or Switzerland to the United States, we rely on appropriate transfer mechanisms including Standard Contractual Clauses approved by the European Commission.
11. Important note regarding medical information
Nabu Tutor is an educational tutoring and advising platform. Our Services are not a covered entity under the Health Insurance Portability and Accountability Act (HIPAA), and our Services do not constitute medical advice, diagnosis, treatment, or any licensed healthcare service. Any information shared during tutoring or advising sessions is used solely for educational purposes.
We strongly advise you not to share protected health information (PHI) about yourself or any third party, including patients, during your use of our Services. Any information you choose to share is subject to this Privacy Policy and not to HIPAA protections.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through a prominent notice on our Services prior to the change becoming effective. We will also update the "Last updated" date at the top of this Privacy Policy. Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy.
13. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
Nabu Tutor Co.
Email: kartik@nabututor.com
Website: nabututor.com