Privacy policy

Who is responsible for your data

OpenTuition is operated by Sabiedrība ar ierobežotu atbildību “Opentuition.com” (registration number 40103169173), Rūpniecības iela 21 k-3–26, Rīga, LV-1045, Latvia. We are the controller for the processing described here. You can contact us through our contact form or at that postal address.

Information we process

• Site and security data: IP address, device and browser details, requested pages, timestamps, security events and privacy choices.
• Account and study data: display name, email, password hash, country, qualification, preferences, referral answer, saved resources, progress, tests and mock-exam activity.
• Community data: forum posts, comments, reactions, reports, live-room messages, Study Buddy and Marketplace listings, and private messages.
• AI Tutor data: questions, answers, exam and mode, feedback, source references, account or session identifiers, and technical usage information such as provider, model and token counts.
• Payments and communications: donation amount and status, a payment-provider reference, support messages, and newsletter or email preferences. We do not store full payment-card details.

We receive most information from you. We also receive technical data from your browser, reports from other members and limited transaction, delivery, security or advertising information from our service providers.

Why we use it

• To provide the service and your account: including study tools, downloads, messages, listings and requested payments. This is generally necessary to perform our agreement with you.
• To keep OpenTuition useful and safe: including moderation, abuse prevention, troubleshooting, service measurement and improvement. We rely on our legitimate interests, balanced against your rights.
• With your consent: for optional newsletters, personalised advertising and optional Google or YouTube storage or access. You can withdraw consent for the future.
• To meet legal duties: including accounting, tax, fraud prevention, rights requests and lawful requests from authorities.

OpenTuition's AI tools provide educational assistance and do not make decisions about you that produce legal or similarly significant effects. AI answers can be wrong and should be checked against the course materials.

Who receives information

We disclose only what is needed to run the relevant feature. Providers include our hosting and delivery services (including Imageleet and Cloudflare), email delivery (Elastic Email), payments (Stripe), AI processing (currently OpenAI, Anthropic and, where enabled, Cohere), and Google services for AdSense and YouTube. Matomo analytics is hosted for OpenTuition and configured without analytics cookies.

Public forum contributions can be read by anyone and indexed by search engines. Study Buddy and Marketplace listings are visible to signed-in members. Messages intended as private are visible to their participants and may be accessed by authorised moderators when needed for safety, support or a report.

If you allow Google advertising, ad requests can include your full IP address and other information described in Google's notices. If you do not consent, we request limited or non-personalised advertising where available. The Cookie Policy explains how to change your choice.

International processing

Some providers process information outside Latvia or the European Economic Area. Depending on the destination, they rely on an adequacy decision or contractual safeguards approved under applicable data-protection law. Contact us if you want information about the safeguard used for a particular provider.

How long we keep it

• Account information is kept while the account is active and then deleted or anonymised, except where a legal or safety record must be retained.
• AI Tutor conversation history is kept for up to 365 days unless it is deleted sooner through account erasure or an administrator action.
• Listings remain for the period you choose or until you remove them. Private messages remain while needed to provide the inbox and are removed when the connected account data is erased, subject to safety records.
• Public contributions remain for community continuity until removed under our moderation or erasure process; account erasure anonymises them where deletion would damage a discussion.
• Payment and accounting records are kept for the legally required period. Unsubscribe and suppression records can be retained so we continue to respect your choice.
• Security logs and backups are kept for limited operational cycles and then overwritten, unless an incident or legal claim requires longer retention.

Your choices and rights

Depending on the processing and applicable law, you may ask for access, correction, deletion, restriction or portability, and may object to processing based on legitimate interests. You can withdraw consent at any time; this does not affect processing already carried out lawfully. You have an unconditional right to object to direct marketing and can also use the unsubscribe link in an email.

You can download a structured copy of your account data, update your profile or permanently delete your account from your profile settings. Contact us if the self-service tools do not cover your request. We may need to confirm your identity. Rights can have legal exceptions, including necessary moderation, fraud-prevention, accounting and legal-claims records.

You may complain to Latvia's Data State Inspectorate. If UK data-protection law applies to your concern, you can also contact the Information Commissioner's Office.

Changes

We update this notice when the service or our processing changes. The date above identifies the current version; we will draw attention to material changes where appropriate.