Privacy Policy

1. Introduction

TebTally Pro ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our classroom management platform.

By using TebTally Pro, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and profile image (via Google OAuth)
• Classroom Data: Class names, grade levels, student information (first name, last name, preferred name)
• Usage Data: Schedules, seating plans, energy logs, group configurations, and other classroom management data

2.2 Automatically Collected Information

• Authentication Data: Login timestamps, session tokens
• Usage Analytics: Feature usage patterns, page views (anonymized)
• Technical Data: IP address (for rate limiting), browser type, device information

3. How We Use Your Information

We use the collected information for:

• Providing and maintaining the TebTally Pro service
• Authenticating your account and managing sessions
• Storing and managing your classroom data
• Improving our services and developing new features
• Preventing abuse and enforcing rate limits
• Communicating important service updates
• Providing customer support

4. Third-Party Services

We use the following third-party services:

4.1 Google OAuth

We use Google OAuth for authentication. When you sign in with Google, we receive your email address, name, and profile image. Please review Google's Privacy Policy for information on how Google handles your data.

4.2 Neon Database

Your classroom data is stored securely in a Neon PostgreSQL database. Neon is SOC 2 Type II compliant and provides enterprise-grade security.

4.3 Upstash Redis

We use Upstash Redis for rate limiting to protect against abuse. Only temporary rate limit counters and timestamps are stored, with automatic expiration.

5. Data Storage and Security

We implement industry-standard security measures to protect your data:

• Data encrypted in transit using HTTPS/TLS
• Data encrypted at rest in our database
• Regular security audits and updates
• Rate limiting to prevent abuse
• Secure authentication via OAuth 2.0

However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Your Rights (GDPR & Australian Privacy Act)

You have the following rights regarding your data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Update or correct your information
• Right to Erasure: Request deletion of your account and all associated data
• Right to Data Portability: Export your classroom data in JSON format
• Right to Object: Object to processing of your personal data
• Right to Restriction: Request restriction of data processing

To exercise these rights, please use the data export and account deletion features in your Settings page, or contact us at privacy@tebtally.com.

7. Student Data Protection

TebTally Pro is designed for teachers to manage their classrooms. We recognize the sensitive nature of student information:

• Student data is only accessible to the teacher who created it
• We collect minimal student information (names only, no contact details or sensitive data)
• Student data is never shared with third parties
• Student data is never used for advertising or marketing purposes
• Teachers can delete student records at any time
• When a teacher account is deleted, all associated student data is permanently deleted

Important: Teachers are responsible for ensuring they have appropriate consent and authorization to store student information in TebTally Pro, in accordance with their school's policies and local privacy laws.

8. Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your account and all associated data is permanently deleted within 30 days
• Backups containing your data are retained for up to 90 days for disaster recovery
• After 90 days, all traces of your data are completely removed

9. Children's Privacy

TebTally Pro is intended for use by teachers and educators, not directly by students. We do not knowingly collect personal information from children. Teachers are responsible for obtaining appropriate consent before entering student information into the platform.

10. International Data Transfers

Your data may be transferred to and stored on servers located outside of Australia. We ensure that any international transfers comply with applicable data protection laws and that adequate safeguards are in place.

11. Cookies and Tracking

We use essential cookies to maintain your session and authentication state. We do not use tracking cookies or third-party advertising cookies. You can manage cookie preferences in your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@tebtally.com
• Support: support@tebtally.com