Privacy Policy

This Privacy Policy explains how LessonSync LLC (“LessonSync”, “we”, “us”, or “our”) collects, uses, discloses, and retains personal information through lessonsync.app, Instructor workspaces, student portals, Group Sign-Up, support, and related services.

LessonSync LLC determines how information is used for its own account administration, subscription billing, security, support, and service improvement. When an Instructor decides why and how to manage student, family, lesson, and business records, the Instructor is responsible for those decisions and LessonSync LLC processes that information on the Instructor’s behalf to provide the service.

If your information is in an Instructor’s workspace, contact that Instructor first for questions about the Instructor’s teaching records, communications, charges, or practices. LessonSync will assist the Instructor with an appropriate request when needed and may respond directly when LessonSync has an independent legal obligation.

Account, profile, and organization information includes names, email addresses, login and authentication records, role, workspace or team membership, organization name, profile settings, timezone, invitation status, and information used to secure or recover an account. Legal acceptance records include the account identifier, accepted Terms and Privacy Policy versions, acceptance context and timestamp, and associated technical information such as IP address and browser user agent.

Instructor-managed information may include student and guardian names and contact details, relationships, lesson schedules, attendance, notes, packages, balances, payment records, reminders, messages, portal access, custom fields, and other teaching-business records.

Group Sign-Up information may include a student name, parent or guardian name, email, phone number, message, requested group or session, answers to Instructor-created questions, the displayed question and explanatory text, waiver or checkbox acceptance, confirmation status, and related timestamps.

Subscription information includes billing email, plan, billing interval, subscription status, transaction identifiers, and limited card metadata such as brand and last four digits. Stripe collects and stores full card numbers and other payment credentials; LessonSync does not store full card numbers on its servers.

Communications information may include service, account, billing, security, and support messages; emails an Instructor sends through LessonSync; recipient information; delivery, bounce, and complaint status; and messages you send to us.

Technical and usage information may include IP address, browser and device type, authentication session data, pages or features used, feature events, timestamps, diagnostic details, security events, server logs, and limited public-page and signup-conversion events.

AI information may include the request, instructions, relevant workspace context, generated output, feature and model identifiers, action and token counts, and whether an authorized Instructor chooses to save generated content to a record.

We receive information directly from Instructor and organization account holders; authorized team members; adult students; parents or legal guardians managing portals; people submitting Group Sign-Up requests; and people contacting support.

Instructors and organizations may provide information about students, family members, staff, and other contacts even when those people do not have LessonSync accounts. We also collect limited technical and usage information automatically and receive billing, authentication, email-delivery, fraud-prevention, and diagnostic information from service providers.

We use information to provide and configure the service; authenticate users; maintain workspaces, teams, and portals; manage Group Sign-Up; record lesson and business activity; process subscriptions; deliver requested email; operate optional AI features; provide support; prevent fraud and abuse; protect deliverability; monitor security and reliability; diagnose errors; enforce our terms; comply with law; and improve product functionality and user experience.

We use information for the purposes described here, for another compatible or legally permitted purpose, for a purpose disclosed when it is collected, or with appropriate permission. We do not use Instructor-managed student or family records for third-party advertising or to build advertising profiles.

AI processing is triggered when an authorized Instructor chooses an AI-assisted draft, recap, summary, report, template, or import preview. LessonSync processes the request, relevant workspace context, and generated result. Depending on the feature, that context may include names, contact details, lesson notes, attendance, schedules, package or balance information, or pasted roster data.

The feature is designed to send context relevant to the requested result to the configured external AI model provider. LessonSync records usage metadata such as feature, provider or model identifier, action count, and token count. Generated content may be stored in LessonSync when the Instructor chooses to save it to a record; some output may instead be copied or sent without being saved as a product record.

The configured AI provider may process and retain submitted information under its contract and privacy commitments. LessonSync will update this Policy or its provider disclosures when needed to identify a material provider or materially different practice. Instructors must avoid unnecessary personal or sensitive information and have authority to submit information used with AI features.

LessonSync uses third-party providers to operate the service, currently including Vercel and Fly.io for application hosting, Supabase for authentication and data services, Resend for product email, Stripe for LessonSync subscription billing, Sentry for error and performance monitoring, and a configured AI model provider for user-requested AI features.

These providers receive the categories of information reasonably needed for their function. Hosting and data providers may process account, workspace, student, and technical data; authentication providers process identity and session data; email providers process sender, recipient, message, and delivery data; billing providers process billing and transaction data; monitoring providers process diagnostic and technical data; and the AI provider processes the request and context described above.

Stripe receives payment credentials, billing address, and transaction information directly. For LessonSync subscription billing, LessonSync receives customer and subscription identifiers, status, plan, billing email, and limited payment-method details. When an Instructor enables integrated student payments, Stripe processes the payment on the Instructor's connected account, and LessonSync receives the transaction identifiers, amount, status, payer contact information, limited payment-method details, receipt, fee and settlement details, and refund or dispute status needed to show payment activity and keep LessonSync's payment records accurate. LessonSync does not receive full card numbers or security codes.

Sentry may receive technical error, browser, device, release, and performance information. LessonSync configures browser error replays to mask text and form inputs, block media, disable ordinary session sampling, and sample a limited portion of error sessions. LessonSync does not intentionally send student records as analytics, but an error report may contain technical context needed to diagnose a problem.

Instructors may also display links to independent payment services they select, such as Venmo, Zelle, or bank transfer. Those services are independent of LessonSync, and their own privacy terms apply when a student or family uses them.

We disclose personal information to service providers as reasonably needed to operate, secure, support, maintain, and improve LessonSync or provide a feature you request. We also disclose information at an Instructor’s direction, such as when sending an email or exposing authorized portal information.

Student and family information is available to the Instructor or organization managing the workspace and to authorized team members. Portal information is available to the invited adult student or parent or legal guardian managing that portal. An organization owner controls workspace membership and shared workspace data.

We may disclose information if reasonably necessary to comply with law or legal process; protect users, the public, or the service; investigate fraud or security issues; enforce our terms; or complete a merger, financing, reorganization, or sale of all or part of the service. If ownership changes, information may transfer subject to this policy or notice of materially different practices.

Based on the current product and vendor configuration, LessonSync does not sell personal information for money, share personal information for cross-context behavioral advertising, or permit student records to be used for third-party advertising. We may use or disclose information that has been aggregated or de-identified so it cannot reasonably identify a person. These statements must be reassessed before adding advertising technology or changing provider data-use terms.

LessonSync uses authentication cookies and browser storage needed to keep users signed in, protect sessions, remember interface choices, and complete requested workflows. We also use limited technical, onboarding, and public-page metrics to understand reliability, feature use, and whether visitors start or complete signup or Group Sign-Up.

Browser settings can clear or block cookies and local storage, but doing so may prevent login or other essential features from working. LessonSync does not use third-party advertising cookies.

LessonSync is intended primarily as a professional tool for adult-controlled teaching businesses, not as a child-directed consumer service. Instructor and organization accounts are for adults age 18 or older. A student portal may be managed only by an adult student or by a parent or legal guardian acting for a minor. A minor may not independently control a portal. Children under 13 may not create an account, independently use a portal, or submit a Group Sign-Up form themselves; a parent, legal guardian, or other legally authorized adult must submit information for them.

Instructors may create and maintain records about minor students when the Instructor has an appropriate legal basis and any required parent or guardian permission. LessonSync does not require a student’s date of birth for ordinary records or portal setup. Instructors are responsible for not directing children under 13 to provide information directly and for collecting no more information than is reasonably needed.

A parent or legal guardian may contact the Instructor or support@lessonsync.app to ask about information concerning their minor, request access, correction, or deletion, or withdraw authorization where applicable. We may verify the requester’s identity and authority and coordinate with the responsible Instructor before acting.

If we learn that a child under 13 submitted personal information directly or is independently operating an account, we may restrict access and delete or otherwise address that information as appropriate. Please notify support@lessonsync.app promptly if you believe this has occurred.

LessonSync does not currently position the Service for school-district use. Before intentionally offering the Service to a school or district, LessonSync and the customer should complete a separate education-privacy and contracting review, including whether school-specific terms or a data-processing agreement are required.

We retain account and product information while the relevant account or workspace is active and for as long afterward as reasonably needed to provide the service, complete a requested deletion, comply with legal and accounting obligations, resolve disputes, prevent fraud, and enforce agreements. The period depends on the information, purpose, account status, provider settings, backup lifecycle, and applicable requirements.

Raw anonymous Group Sign-Up funnel events are retained for 90 days. Subscription and transaction records may be retained as needed for tax, accounting, fraud prevention, and dispute purposes. Security, error, email-delivery, and support records are retained for operationally appropriate periods or according to the relevant provider’s retention settings.

A workspace owner can delete the workspace from the Account page. A non-owner who deletes their account removes their own login and attribution, while records shared with the organization remain under its control. Users should export information they need before deletion.

Deletion removes information from active LessonSync application systems, subject to information we must retain and residual copies that may remain in backups until they are removed or overwritten through the applicable backup lifecycle. LessonSync does not currently promise a specific backup-expiration period. Independent providers such as Stripe may retain information under their own policies and legal obligations.

You can review or update many account and workspace details in LessonSync. Workspace owners can export product data and delete their workspace. Portal Users and people whose information was submitted to an Instructor should generally contact that Instructor first because the Instructor controls the teaching record.

Depending on where you live and subject to legal exceptions, you may have rights to request access, correction, deletion, or a portable copy of personal information; to object to or restrict certain processing; or to withdraw consent where processing is based on consent. LessonSync does not discriminate against a person for exercising an applicable privacy right.

Send requests to support@lessonsync.app and describe the account, Instructor, or Group Sign-Up involved. We may verify your identity, authority, and relationship to the relevant workspace before responding. An authorized agent may submit a request where permitted, but we may require proof of authorization. If we cannot fulfill a request, we will explain why when legally required.

Privacy rights and response or appeal procedures vary by location and may be subject to applicability thresholds and exceptions. LessonSync will apply rights required by applicable law and may voluntarily honor reasonable requests when practical. If applicable law gives you a right to appeal a denied request, you may appeal by replying to the decision or emailing support@lessonsync.app with the subject “Privacy Appeal.”

LessonSync may send service, account, billing, security, legal, and support communications that are necessary to operate your account or address a request. You may not be able to opt out of essential messages while maintaining an active account.

Instructors control the operational or promotional messages they send to their contacts through LessonSync and are responsible for permission, content, sender identification, and honoring applicable opt-outs. Contact the Instructor about those messages. Where LessonSync sends its own marketing email, you may use the unsubscribe method in the message or contact support@lessonsync.app; an opt-out does not stop essential service messages.

We use reasonable administrative, technical, and organizational safeguards appropriate to the current Service, including authenticated access controls and security features provided by our infrastructure partners. This statement is not a claim of a security certification, penetration-test result, specific encryption architecture, or guaranteed protection. No online service can guarantee absolute security. Users are responsible for strong passwords, credential confidentiality, and appropriate workspace access.

LessonSync and its providers may process information in the United States and other locations where they operate. Privacy and data-protection laws in those locations may differ from the laws where you live. Where required, appropriate contractual or other safeguards should be used for international transfers.

We may update this Privacy Policy as the service or law changes. For material changes, we will provide reasonable notice by email, in-product message, or another appropriate method and update the effective date on this page.

Questions or privacy requests for LessonSync LLC may be sent to support@lessonsync.app.