logo

ScholarPASS Privacy Policy

ScholarPASS is committed to protecting your personal data. We have written this Privacy Policy in clear and plain language to make it easy to understand. Our goal is to provide you with our privacy commitments in a transparent and accessible way. With this Policy, we want you to have all the details you need to be assured that your personal data is safe with us.

Before you provide us with your personal data or give us consent to process it through any form on our website or mobile application, we kindly ask you to read this Privacy Policy carefully. This way, you will fully understand the conditions under which we cooperate and how your data is used.

This Privacy Policy applies to your use of the services of ScholarPASS, as defined in our Terms of Service. It explains when, where, and why we process the personal data of people who use the ScholarPASS Platform, how we use it, the conditions under which we may disclose it to others, your rights regarding your personal data, and how we keep it secure.

GENERAL

Access to the ScholarPASS Platform (including the website, related software, and ScholarPASS mobile applications) is available with or without registering an account. For example, you may browse our website, explore how ScholarPASS works, view available tutors and institutes, read blog articles, or check services without registering. However, whenever you access the website, we collect log information and place cookies on your device to track activity. You may opt out of cookies, except those strictly necessary for the platform to function.

To use certain features—such as the ScholarPASS mobile application or enrolling a course—you need to register for an account. When you are a registered user, ScholarPASS may collect and process cookie identifiers as well as data you provide during registration, such as your first name, last name, email, phone number, social login details (if you sign in via Google or Facebook), time zone, interface language, IP address, and device type.

If you are a tutor, ScholarPASS may additionally collect and process other information you provide, including zip code, gender, year of birth, city of residence, and education or teaching experience.

Registered users may also provide a profile picture and select their preferred currency to perform actions related to payments and refunds in line with our Payments Policy.

More details about the specific cases of data collection and the purposes of such processing are described in later sections of this Privacy Policy.

We may update this Privacy Policy from time to time. Any changes will be posted on this page and the modification date will be updated at the top. If there are significant changes, additional notifications will be sent to your email.

From time to time, ScholarPASS may also experiment with new features or services that affect how personal data is processed. In such cases, we will provide prior notification and obtain your consent when required.

1. What Is Personal Data and the Processing of Personal Data? Main Definitions

Personal data is any information relating to you that, alone or in combination with other information, allows a person who collects and processes such information to identify you as an individual.

Processing of personal data means any operation performed on your personal data, whether or not by automated means. This includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.

Data subject is any identified or identifiable natural person whose personal data is processed by the controller responsible for the processing. In this Privacy Policy, “data subject” means you as a user of ScholarPASS (student, tutor, guardian, institute representative, or visitor).

Consent of the data subject/user is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which he or she, through a statement or clear affirmative action, signifies agreement to the processing of personal data relating to them.

2. ScholarPASS’s Lawful Bases for Processing

ScholarPASS processes your personal data only when there is a lawful basis. Specifically, ScholarPASS processes your personal data if:

Consent:

Processing is based on the consent you have given. For example, our newsletters, collection and publication of user feedback and reviews, analysis of course participation, your attendance in events and webinars, the placement of optional cookies, or the announcement of scholarship winners may rely on your consent.

Contractual necessity:

Processing is required to provide our services under the Terms of Service (and any additional terms). This includes enabling personalized learning recommendations, scheduling tools, AI-powered study plans, tutor–student matching, and other features essential to delivering our platform services.

Explicit consent for sensitive data:

In cases such as tutor identity verification, fraud prevention, or biometric verification (e.g., ID checks, facial verification), ScholarPASS may process such data only with your explicit consent and through verified third-party providers.

Legitimate interests:

Processing is necessary for the legitimate interests of ScholarPASS, provided these are not overridden by your rights and freedoms. Legitimate interests include but are not limited to:

  • Compliance with financial, accounting, and tax legislation;
  • Assessing ScholarPASS’s platform performance through analytics of traffic and financial indicators;
  • Promotion of ScholarPASS via social networks, affiliates, and media, including the use of tutor names, profile pictures, or other details for marketing purposes under our Terms of Service;
  • Performance of contracts with institutes, organizations, or scholarship sponsors, including progress reports for enrolled students;
  • User session monitoring, fraud prevention, and ensuring data security;
  • Tutor verification and the development of high-quality learning and teaching programs;
  • Training and improvement of AI-powered tools (e.g., for learning recommendations, auto-generated study content).

Legal obligations:

Processing may be required to comply with applicable laws, such as responding to data subject requests, financial regulations, or tax reporting.

Vital interests or public interest:

In exceptional cases, processing may occur to protect your vital interests or those of another natural person, or for the performance of a task carried out in the public interest or by an authority vested in us.

In all cases, ScholarPASS will notify you about the legal basis for processing and other relevant details before starting the processing of your personal data under that basis, unless prohibited by applicable law.

3. Data We Collect: Scope

ScholarPASS collects from you only the following information and only for the stated purposes below:

(1) Account for Students

ScholarPASS collects and processes personal data submitted by you upon registration and through later edits to your account. For registration, you submit your login credentials (username and password), first name, last name, and email. You may also update your account at any time with additional information, as well as sync your Google Calendar or ScholarPASS Calendar. Such additional information may help you find suitable time slots for lessons, schedule tutoring sessions, or maintain better visibility of your learning activities. At the same time, you are not required to provide additional information that is not necessary for registration; it is your choice.

(2) Account for Tutors

ScholarPASS collects and processes personal data submitted by you upon registration and further profile edits. For registration purposes, you provide login credentials (username and password), first name, last name, and email. We also require proof of your qualifications, such as diplomas, certificates, or other teaching credentials. You may further update your profile with additional details and sync your Google or ScholarPASS Calendars. Additional information, such as your location, teaching subjects, work experience, or language skills, can improve scheduling and visibility, but it is not strictly required.

Some personal data, such as names and locations listed in your user profiles or derived from IP addresses, may be publicly visible to other users or the web. ScholarPASS may also provide you with options to control what information is visible by adjusting your privacy settings in the “Edit My Profile” section of the Service.

(3) Subscription to the ScholarPASS Blog and Updates

You may decide to subscribe to the ScholarPASS Blog, newsletter, or product updates. For this, we require your email address.

(4) Posting of Information

We process personal data that you freely submit on the ScholarPASS Platform. This may include surveys, online forms, questions or comments in our Q&A sections, or feedback you provide to us.

ScholarPASS may also process information you post on or through the Platform (including messages, uploaded files, and other user-generated content). By doing so, you acknowledge that any information you share will be visible to ScholarPASS and, in some cases, to other users (students, tutors, or institutes). You also acknowledge that certain content may not be deletable if it is linked to lessons, courses, or sessions used by others.

Unless you opt out, we retain such information as necessary to resolve disputes, provide customer support, or troubleshoot problems as permitted by law. We also reserve the right to terminate accounts that misuse the Service or violate our Terms of Service.

(5) Service Use, Cookies, and Other Similar Technologies

When you use our Services, we monitor and analyze web traffic and track your behavior for service improvement and security. Please refer to our Cookie Policy for details on our use of cookies and similar technologies.

(6) Billing Information

We process the details of transactions carried out through the ScholarPASS Platform (such as transaction ID, date, and time of payment). Payment information is handled securely by third-party providers.

(7) ScholarPASS for Organizations and Institutions

We may collect your name, email, company or institute name, and phone number to provide information about ScholarPASS for Institutions (our business-to-business services), as defined in our Terms.

(8) Sensitive Data

Unless you expressly agree, ScholarPASS does not process your sensitive data.

(9) Pages on Social Networks

We maintain official ScholarPASS pages on social networks such as Facebook, TikTok, Instagram, and LinkedIn. When you interact with these pages (e.g., subscribe, like, comment), we may analyze this data to measure our outreach effectiveness and improve our marketing campaigns, based on our legitimate interests.

(10) Tutor Community (for Tutors Only)

We maintain a Tutor Community accessible via Single-Sign-On (SSO) through our website. For purposes described in this Policy, we may collect and process your interaction and usage data within the Tutor Community.

(11) Information Required for Submitting Tax Documentation

To comply with tax and accounting laws, we may be required to collect and process personal data for tax documentation purposes (e.g., Form 1099 or other equivalent forms). This may include your full name, citizenship, permanent address, mailing address, date of birth, taxpayer identification number, or foreign tax ID.

Where applicable, regulations such as the EU Directive 2021/514 (DAC7) may require us to collect, verify, and report information on tutors and sellers operating through the ScholarPASS Platform. This may include your name, primary address, date of birth, tax identification number (TIN), VAT number, and bank account identifiers.

(12) Information Required for Marketing and Promotion

We may collect a tutor’s postal address to promote tutoring services provided via the ScholarPASS Platform and connect you with prospective students in a specific geographical area.

(13) Analysis of Speech Activity

During lessons conducted on ScholarPASS, we may analyze microphone activity and measure sound volume to provide feedback on speaking participation. We do not record your voice, words, or lesson content for this purpose. If you are based in the EEA or Switzerland, you will have the option to disable this feature.

(14) Assessments and Exams

We may process personal data (e.g., name, email, and results) when conducting language or academic assessments, placement tests, or exam simulations through ScholarPASS. These assessments may occur before or after registration.

(15) Video Lessons, Calls, Events, and Webinars

We may process recordings (audio, video, likeness, interactions) during your use of ScholarPASS services, including group classes, private lessons, sales calls, events, or webinars. You will be notified in advance and asked for consent if recording is required.

(16) Information Processed by AI-Powered Tools

We integrate certain AI-powered tools to enhance your learning experience. For example, your text prompts, audio inputs, transcripts, or lesson recordings may be used to:

  • generate personalized learning recommendations,
  • prepare study plans,
  • provide explanations, quizzes, and exercises,
  • enrich vocabulary resources,
  • enable chatbots for practice or inquiries, and
  • train ScholarPASS AI systems responsibly.

(17) Tutor Verification (for Tutors Only)

For identity verification and fraud prevention, we may process your ID documents and facial biometrics via secure third-party verification providers.

(18) Information about B2B Leads’/Clients’ Representatives

We process personal data of business or institutional representatives (e.g., name, email, phone number, position, company name) for purposes including:

  • Sales and marketing outreach, qualification, and follow-up,
  • Offering tailored services to organizations,
  • Fulfilling contractual obligations, such as delivering agreements, updates, and official communications.

4. Data We Collect: Purposes

We may process the personal data you provide voluntarily for the purposes defined below. From our perspective, we process your personal data to personalize your use of ScholarPASS to the fullest extent possible and to provide you with high-quality services under the Terms of Service.

(1) Provision of Services

Primarily, we process your personal data to authorize access to our services and to fulfill our obligations under the Terms of Service. Specifically, we use your personal data upon registration to:

  • Help others (tutors, students, guardians, or institutes) find your account or profile,
  • Schedule and attend lessons, courses, or activities,
  • Track your learning progress, assessments, or achievements.

To use the services, you may need to provide payment (e.g., credit card details) and billing information, processed securely through our third-party payment providers. Please see our Refund and Payment Policy for more details.

We may also ask you to complete placement tests or academic assessments to establish your learning level.

For institutions and organizations using ScholarPASS for Institutions, we may process the personal data of their authorized users to create accounts, enable access, and provide reporting on learning progress, assessments, and other performance indicators.

Please note: without the information provided by you under our Terms of Service, we cannot provide the functionality of the ScholarPASS Platform, connect you with other users, or allow you to fully participate in our services.

(2) Payment Services

We use third-party payment providers to handle billing securely. This ensures that:

  • Your payment data (e.g., card details) is processed via secure providers such as Stripe, PayPal, or other authorized partners,
  • Tutors, institutes, or service providers receive payment for completed lessons or services,
  • Transactions are encrypted and protected by SSL.

ScholarPASS does not store your full payment information on its servers.

We may also use limited payment transaction data (e.g., date, amount, and last 4 digits of card number) to confirm eligibility for promotions or offers.

(3) Referral Programs

Student/Tutor Referral: For our “Invite a Friend” referral program, we generate a personalized referral link for you to share. We will not collect your friend’s data until they register on ScholarPASS.

Institutional Referral: For our B2B referral program, you may share the name, job title, and email of colleagues or representatives who may be interested in ScholarPASS for Institutions. We will inform them at the time of initial contact.

(4) Communications

We may contact you via email, push notifications, or other methods for service-related purposes, including:

  • Welcome messages,
  • Security or legal notices,
  • Announcements, reminders, and ScholarPASS updates,
  • Lesson or assessment notifications,
  • Suggestions and personalized tips.

You may also use ScholarPASS to communicate with other users (students, tutors, or institutes), including messaging, video calls, or leaving reviews.

Push notifications can be adjusted via your mobile device settings. You may opt out of non-essential communications at any time, but legal or essential notices cannot be disabled.

(5) User Research

We may contact you to participate in surveys or feedback sessions to improve the ScholarPASS experience. Your contact data (email, phone, etc.) may be used for this purpose.

Research may be used for:

  • Feature development and product updates,
  • Marketing insights (including publishing anonymized feedback),
  • Customer support improvements,
  • General service enhancements.

Your voice or image will not be recorded without your explicit consent.

(6) Marketing and Promotion of ScholarPASS

With your consent, we may process your name and email for newsletters or promotional messages. You may opt out at any time.

If you provide your phone number, we may also contact you with promotional information.

We may run affiliate programs or influencer collaborations where participation requires registration and tracking.

Postal addresses (if provided with consent) may be used for campaigns, search engine optimization, or marketing purposes.

Feedback you provide may also be used in marketing or promotional material in accordance with our Terms of Service.

(7) Behavioral and Social Media Marketing

We may share limited data (such as your email address) with platforms like Google or Meta to deliver personalized ads or social media campaigns. These activities are carried out on the basis of our legitimate interests and with safeguards for your privacy.

(8) Identifying Influencers for Potential Collaborations

We may use third-party services (e.g., influencer analytics tools) to analyze registration data (e.g., name, social accounts) and identify students, tutors, or institutes with significant influence. If selected, we may contact you for collaboration opportunities and provide a separate privacy notice.

(9) Analytics and Development

To improve ScholarPASS, we analyze registration data, traffic, cookies, and usage behavior. This may include:

  • Pages visited, duration of use, location, and device type,
  • A/B testing to compare different features or layouts,
  • Polls and surveys to understand satisfaction,
  • Integration with third-party analytics tools (e.g., Google Analytics, Amplitude, Hotjar).

These insights help us develop new features, optimize performance, and provide personalized recommendations.

(10) Tutor Verification and Program Preparation

We process tutor data (credentials, IDs, biometrics, etc.) to:

  • Verify eligibility to teach,
  • Prevent fraud,
  • Ensure quality of lessons,
  • Assist tutors in developing programs and methodologies.

(11) Improvement of Tutors’ Ranking Algorithm

We collect and analyze tutor and student metrics to enhance our tutor ranking system. This helps optimize visibility, match efficiency, and learning outcomes.

(12) Managing Tutor Community

We process tutor emails, interactions, and usage data within the Tutor Community to:

  • Facilitate collaboration and knowledge-sharing,
  • Provide official updates,
  • Support moderation and analytics,
  • Improve community experience.

Access is limited to authorized staff and providers.

(13) Support and Platform Supervision

In case of disputes or service-related issues, we may use communications and data to:

  • Investigate and resolve problems,
  • Supervise user activity,
  • Respond to complaints and support requests.

(14) Events and Webinars Conducted by ScholarPASS

We use registration data for events or webinars to:

  • Provide access to sessions,
  • Send confirmations, reminders, and follow-up materials,
  • Share requested information about our services.

(15) Competitions and Scholarships

Competitions: Occasionally, we may organize learning or skill-based competitions. We collect necessary data (e.g., registration form details) to determine eligibility, select winners, and deliver prizes.

Scholarship Programs: For ScholarPASS scholarships, we may collect personal and academic details to evaluate applications, award funding, and comply with applicable reporting.

Sweepstakes: For promotional sweepstakes, we may process user ID, name, date of birth, and contact details to verify eligibility, notify winners, and fulfill legal obligations. Winners’ names may be published with consent.

(16) Compliance with Legal Requirements

We process payment and account data to comply with financial, tax, or regulatory requirements. We may also process data in response to lawful requests or to exercise, defend, or establish legal claims.

(17) Fraud Prevention

We supervise log data, payment details, and platform behavior to prevent fraud, misuse, or unauthorized access, ensuring a secure environment for all users.

(18) Platform Adaptation (for Tutors Only)

If tutors provide optional demographic data (e.g., gender), we may process it to improve platform personalization, such as adapting tutor profiles or course discovery.

(19) Changes

ScholarPASS may update this Privacy Policy periodically. We will not reduce your rights under this Policy without explicit consent. Updates will be posted on this page, and significant changes will be communicated by email.

5. How Is Personal Data Shared?

In order to provide high-quality services, ScholarPASS hires employees, engages independent contractors, and cooperates with third-party service providers, companies, and organizations strictly under Data Processing Agreements (DPAs) or Standard Contractual Clauses (SCCs). For those reasons, some of your personal data can be shared with the parties mentioned. ScholarPASS uses secure storage (e.g., reputable cloud providers) with servers that may be located in multiple jurisdictions.

(1) Categories of Third-Party Service Providers

Analytics services

Personal data shared with this category may include the information described in subsections (5) and (14) of section 3 of this Privacy Policy.

Social network platforms and search engines

Personal data shared with this category may include the information described in subsection (7) of section 4 and subsection (2) of section 5 of this Privacy Policy.

Customer communication solutions

Personal data shared with this category may include the information described in subsection (4) of section 3 of this Privacy Policy.

User research tools

Personal data shared with this category may include the information described in subsection (5) of section 4 of this Privacy Policy.

Email delivery and push notification services

Personal data shared with this category may include your contact details and personal identifiers you provide to us.

SMS providers for mobile marketing and notifications

Personal data shared with this category may include your contact details and personal identifiers you provide to us.

Payment service providers

Personal data shared with this category may include the information described in subsection (6) of section 3 of this Privacy Policy.

AI-powered service providers

Personal data shared with this category may include the information described in subsections (16) and (17) of section 3 of this Privacy Policy.

Providers of video conferencing, speech-to-text, and conversation analytics tools

Personal data shared with these categories may include the information described in subsection (16) of section 3 of this Privacy Policy.

Influencer marketing solution providers (to identify and engage influencers)

Personal data shared with this category may include your name and other identifiers described in subsections (1) and (2) of section 3 of this Privacy Policy.

Assessment and proctoring tools (language/academic assessments)

Personal data shared with this category may include the information described in subsection (15) of section 3 of this Privacy Policy.

Search engine optimization and marketing tools

Personal data shared with this category may include the information described in subsection (13) of section 3 of this Privacy Policy.

Services to manage Tutor Academy

Personal data shared with this category may include the information described in subsection (11) of section 3 of this Privacy Policy.

Services to manage Tutor Community

Personal data shared with this category may include the information described in subsection (10) of section 3 and subsection (12) of section 4 of this Privacy Policy.

Online verification providers

Personal data shared with this category may include the information described in subsection (18) of section 3 of this Privacy Policy.

Tax and accounting compliance software providers

Personal data shared with this category may include the information described in subsection (12) of section 3 of this Privacy Policy.

(2) Use of Social Network Platforms

We use platforms like Facebook, Instagram, LinkedIn, and TikTok to maintain ScholarPASS social media pages.

Please note that LinkedIn may act both as a processor engaged by ScholarPASS and as an independent controller of your personal data. Additionally, TikTok and ScholarPASS may independently process your personal data as separate controllers.

For ScholarPASS Facebook and Instagram pages, Meta Platforms, Inc. (“Meta”) is a joint controller for certain processing activities. In particular, Meta and ScholarPASS are joint controllers for page insight data and statistics, your reactions and comments under our posts, and other information you make available to ScholarPASS when you contact us via those pages.

You may contact us with any questions related to your activity on ScholarPASS social media pages on the above-mentioned platforms or regarding our processing of your personal data in that context.

The service providers mentioned under subsections (1) and (2) help us ensure your data is handled securely within ScholarPASS.

ScholarPASS has contractors and subsidiaries in other countries, including outside the European Economic Area, who may have access to your personal data. Whenever we transfer your personal data to other parties, we ensure it is protected and used only for the purposes specified in this Privacy Policy. We do so by:

  • Using certified services and products;
  • Signing data processing agreements with contractors and partners (including SCCs adopted by the European Commission and compliant with EU data protection laws); and
  • Implementing technical and organizational measures to safeguard information while stored, used, processed, and transferred.

(3) Data Transfer in Case of Change of Control or Asset Disposition

In the event of a merger, acquisition, sale, or change of control, we will continue to ensure the confidentiality of your personal data and will notify affected users before personal data is transferred or becomes subject to a different privacy policy.

(4) Organizations Using ScholarPASS for Institutions

We may share authorized users’ learning progress and assessment results with their respective institutions or employers, where applicable.

(5) ScholarPASS Independent Contractors

We work with independent contractors who help us provide our services. We may engage such contractors for data analytics, software development, customer support, promotion and marketing, user research, and financial or legal services. These contractors will only have access to your personal data on a need-to-know basis and under strict privacy and security obligations.

(6) Other Users of the ScholarPASS Platform

Your personal data may be visible to visitors and users of the ScholarPASS Platform in limited ways. This can occur via direct interactions (e.g., between student and tutor) or in connection with social features. For example, your profile picture and name may be visible if you enroll in a group class or leave a review.

6. How Long Will the Personal Data Be Processed and Stored by ScholarPASS?

Your personal data will be stored by ScholarPASS for no longer than necessary for the purposes for which it is processed.

Generally, ScholarPASS retains your personal data as long as your account is active. If your last activity on ScholarPASS was more than two (2) years ago, your account will be considered expired. In this case, or if you choose to delete your ScholarPASS account, we will remove your personal data from our active systems and servers within 90 days or earlier.

ScholarPASS may store personal data processed by AI-powered tools (for example, data used to generate personalized learning content or recommendations) for up to 2 years within the EU and potentially longer in non-EU jurisdictions, in line with applicable laws.

In the event of an ongoing conflict or dispute, ScholarPASS may retain your personal data for longer in order to establish, exercise, or defend legal claims. Once the conflict is resolved, all personal data will be deleted if the standard retention period has already expired.

We may also retain certain personal data for longer periods if required to comply with legal, regulatory, tax, accounting, or other statutory obligations.

Personal data collected when you subscribe to our mailing list or newsletter will be stored as long as you remain subscribed. We will consider you subscribed until you actively unsubscribe using the link provided in our emails.

If you register for events or webinars using your ScholarPASS account credentials, this information will be stored alongside your account data. If you register using separate contact details, those details will be deleted within 30 days after the event or webinar concludes.

Lists of sweepstakes or scholarship participants (including those who entered via alternative methods) will be deleted within 30 days after the close of the program. However, the names of scholarship or sweepstakes winners published on our website will remain publicly available until you withdraw your consent.

After the expiration of the applicable retention period, ScholarPASS will terminate the processing of your personal data, unless otherwise required by relevant legislation.

7. Your Rights as Data Subject Regarding Your Personal Data Processed by ScholarPASS

As a user of ScholarPASS, you are a data subject under applicable data protection laws, which grants you specific rights regarding the processing of your personal data. These rights include:

(1) Right of Confirmation

You can obtain confirmation from ScholarPASS as to whether personal data concerning you is being processed.

(2) Right of Access

You can access your personal data processed by ScholarPASS.

(3) Right to Rectification

You can request that ScholarPASS correct or complete inaccurate or incomplete personal data concerning you.

(4) Right to Erasure (Right to Be Forgotten)

You may request ScholarPASS to erase your personal data. In most cases, ScholarPASS will comply unless retention is required by law.

To delete your personal data, you can:

  • Contact us by email at support@scholarpass.com. We will respond within 30 days and notify you of the outcome.
  • Delete specific items (such as stored payment methods) directly through your account settings.
  • Delete your entire account by sending a request to support@scholarpass.com.

(5) Right of Restriction of Processing

You may request the restriction of processing of your personal data, for example:

  • When you contest the accuracy of your data, or
  • When ScholarPASS no longer needs your data but you require it to establish, exercise, or defend legal claims.

Instead of erasure, your data may be restricted under these conditions.

(6) Right to Data Portability

You can request that ScholarPASS transmit your personal data directly to another controller, where technically feasible and provided it does not adversely affect the rights and freedoms of others.

(7) Right to Object to Processing

You can object to the processing of your personal data by ScholarPASS when:

  • The processing is related to a task carried out in the public interest or in the exercise of official authority vested in us, or
  • The processing is based on our legitimate interests or those of a third party, and you believe such interests are overridden by your fundamental rights and freedoms.

For example, you have the right to object to our AI data training in your account settings. If you object, ScholarPASS will no longer process your personal data unless we demonstrate compelling legitimate grounds that override your rights.

(8) Right to Withdraw Consent at Any Time

You may withdraw your consent to processing at any time by contacting us. After we receive your withdrawal request, we will promptly stop processing your data unless otherwise required by law.

All such requests are free of charge. If you believe that ScholarPASS’s use of your personal data violates your rights, you may lodge a complaint with the competent data protection authority in your jurisdiction.

Please note: when the processing of your personal data is carried out for direct marketing purposes, you have the right to object at any time, without justification. ScholarPASS will then stop processing your data for such marketing.

8. Other Privacy Commitments

(1) Cross-border Transfers

ScholarPASS processes personal data both within the United States and in other jurisdictions. Although the countries where we process data may have different laws, we implement safeguards to ensure high standards of privacy and compliance (as outlined in Section 5 of this Privacy Policy).

(2) Time for Reply and Reaction

ScholarPASS will provide information on any action taken regarding your rights (as outlined in Section 7) within one month of receipt of your request. In exceptional cases, this period may be extended by up to two additional months if the request is particularly complex or if we receive numerous requests simultaneously. In such cases, we will notify you within one month of receipt and explain the reasons for the delay.

(3) Security

ScholarPASS takes technical and organizational measures to ensure personal data is processed securely and protected against unauthorized access, unlawful processing, accidental loss, destruction, or damage. For example, ScholarPASS only works with verified contractors and partners who sign binding data processing agreements and who meet strict data protection requirements.

(4) Accessing Account to Provide Support

In exceptional cases, such as providing customer support, ScholarPASS specialists may require temporary access to your account. This may include personal data you provided in your account, such as schedules or linked calendar data (if you have synced your Google Calendar or ScholarPASS Calendar).

  • We will always request your permission before accessing your account for troubleshooting.
  • You may edit your Google Calendar privacy settings to limit visibility of personal events before granting access.
  • Please note that refusing permission may affect the timeliness and quality of our support.

(5) Children’s Privacy

The privacy of children is important to us. ScholarPASS services are not intended for children under the age of 18 without parental or guardian supervision.

  • If you are under 18 but at least 13, you must have a parent or guardian create an account for you, which you may then use under their supervision.
  • ScholarPASS does not knowingly collect personal data from children under 13 and discourages such use of the platform.
  • Parents and guardians are encouraged to monitor their children’s online activities and ensure children do not provide information on the ScholarPASS platform without permission.

(6) Breach Notifications

If a personal data breach occurs that is likely to result in a high risk to your rights or freedoms, ScholarPASS will inform you and the relevant data protection authorities without undue delay. We will also take steps to minimize risks and impacts.

(7) “Do Not Track” Requests

ScholarPASS does not share personal data with third parties for their direct marketing purposes. Our services currently do not respond to browser-based “Do Not Track” requests.

(8) California Privacy Rights

If you are a resident of California, you are entitled to rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA). These include the right to:

  • Know the categories and specific pieces of personal data we have collected about you;
  • Correct inaccurate personal data about you;
  • Request Deletion of your personal data that we have collected;
  • Opt-Out of the sale or sharing of your personal data.

To verify your identity (or your agent’s authority) before fulfilling requests, we may require certain information based on your prior interactions with ScholarPASS.

For details on what we collect, see Sections 2 and 3 of this Privacy Policy. For information on purposes of collection and categories of service providers, see Sections 4 and 5.

ScholarPASS will not discriminate against you for exercising your rights. To exercise your rights, please contact us at privacy@scholarpass.com.

(9) Automated Decision-Making and Profiling

ScholarPASS uses algorithms and analytics that may qualify as profiling under data protection laws.

For example:

  • We analyze performance data, engagement metrics, and feedback to determine tutor visibility and ranking, and to match students with suitable tutors or courses.
  • This type of processing is necessary to improve matching efficiency and provide personalized services.

If you wish to request human review, express your viewpoint, or contest automated decisions, you can contact us at support@scholarpass.org

(10) Sale of Personal Data

ScholarPASS does not sell personal data, including the data of minors under the age of 16.

9. Data Privacy Framework Program

(1) Participation in the Data Privacy Framework Program

For personal data covered by this Privacy Policy, ScholarPASS complies with the EU-U.S. Data Privacy Framework (DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set by the U.S. Department of Commerce.

ScholarPASS has certified adherence to these DPF Principles regarding the processing of personal data received from the EU, the UK (and Gibraltar), and Switzerland. If any conflict arises between this Privacy Policy and the DPF Principles, the Principles will govern.

Learn more at: https://www.dataprivacyframework.gov/.

View our certification: Data Privacy Framework List.

(2) DPF Principles-Related Complaints

ScholarPASS commits to resolve complaints related to the DPF Principles. EU, UK, and Swiss individuals may first contact us at support@scholarpass.org.

(3) Dispute Resolution

If we cannot resolve a DPF-related complaint internally, ScholarPASS commits to cooperate with the Association of National Advertisers (ANA), an independent dispute resolution provider in the U.S., at no cost to you. See details at: ANA – DPF Consumer Services.

(4) Binding Arbitration

Under certain conditions, you may invoke binding arbitration for unresolved complaints regarding DPF compliance. See: DPF Annex I: Arbitral Model.

(5) U.S. Oversight

ScholarPASS is subject to the jurisdiction of the U.S. Federal Trade Commission (FTC) regarding its compliance with the EU-U.S. DPF, UK Extension, and Swiss-U.S. DPF.

(6) Disclosure to Law Enforcement

ScholarPASS may disclose your personal information if required by law or in good faith to comply with investigations, legal proceedings, national security, or law enforcement requests.

(7) Liability for Onward Transfers

If ScholarPASS transfers your personal information to third parties acting as agents on our behalf, we remain responsible for ensuring they process such information in compliance with DPF Principles, unless we can prove we are not responsible for the event leading to the damage.

We hope this Privacy Policy helps you understand how your personal data will be dealt with here at ScholarPASS. We will take care of your personal data, so you can use our Services and not be concerned about your privacy. Should you have any questions, e-mail us at support@scholarpass.org.