Privacy Policy

• We collect what we need to match families with teachers, run bookings and payments, and keep lessons safe.
• We do not sell your personal information, and we do not use it for third-party advertising.
• Teachers see the student details they need to teach. Families see the teacher details they need to choose and book.
• Card details are handled by Stripe. We never see or store your full card number.
• You can see, correct or delete your information by contacting our privacy officer.

Everyone with an account

• Name, email address and password (stored only as a secure hash).
• Your role on CadenzaHub (family, adult learner or teacher) and your account settings.
• Messages you send and receive on CadenzaHub, and requests you send to our support team.

Families and adult learners

• Students you add: first name, optional last name, birth year, instruments, level and learning goals.
• Your city and postal code, and your address when you book an in-home lesson.
• Bookings, cancellations, reviews you write and lesson notes your teachers send you.
• Payment records. Stripe processes your card and gives us only limited details, such as the card brand and last four digits.
• Requests to see a teacher's background check: who asked, which teacher, when, and whether the teacher approved. The teacher sees your name so they can decide.
• Reports you send about a teacher: who sent it, which teacher it is about, the category, what you wrote, an optional lesson date, whether a student under 18 is involved, and our notes and decision.
• Lesson requests, which you can send without an account for a teacher who has not joined CadenzaHub yet: your name, email, optional phone, the student's first name and age, and your message. Our team uses them to contact that teacher for you and to reply to you. We keep a request for up to 2 years, then delete it.

Teachers

• Profile information: photo, headline, bio, instruments, city, languages, experience, rates, availability and cancellation policy.
• Your postal code, and your studio address if you teach at a studio.
• Credentials you upload, such as certificates, diplomas and degrees: the document, which may show your full name and other details, plus the title, issuer and year you enter and our review decision.
• Reports students and families send about you, and any response you give us.
• Background check documents, if you teach in person or teach students under 18: the police check you upload, which may show your full name, date of birth, address and any record it reports, plus the details our team records when reviewing it (type of check, issuing police service, issue date and our decision).
• Identity verification and payout details. Stripe collects your government ID, date of birth, banking and tax details directly. We receive confirmation that verification is complete and the payouts made to you.
• Lesson notes you write, and your booking, earnings and review history.

Collected automatically

• Technical information such as IP address, browser and device type, and the pages you visit, recorded in server logs to keep the Service secure and working.
• Essential cookies that keep you signed in. See section 9.

Many of our students are children. Children cannot create their own accounts. A parent or legal guardian adds a child as a student and consents on the child's behalf to the information described here.

We collect only what a teacher needs to teach well: the child's first name, birth year rather than full date of birth, instruments, level and goals, plus the lesson notes written about them. We do not ask for photos of children, and we do not use children's information for marketing.

A teacher sees a child's details only once the parent books with that teacher. Parents can view, correct or remove their child's information at any time.

• To create and secure your account and confirm your email address.
• To show teacher profiles to families and help families find the right teacher.
• To process bookings, payments, payouts, refunds and cancellations.
• To deliver messages and lesson notes, and to send booking confirmations, reminders and receipts.
• To pass on lesson requests to teachers who have not joined yet, by contacting them ourselves. We share only what the teacher needs to reply.
• To review teachers, including identity, credentials and the background checks teachers upload. A person on our team makes every decision. An automated reading tool helps reviewers pull details out of a check, but no decision about a teacher is made by automated means alone.
• To show families the type of check, issuing police service and issue month on a teacher's profile, and to share the check document with families the teacher approves.
• To review reports about teachers, keep students safe, prevent fraud, resolve disputes and enforce our Terms of Service.
• To understand how CadenzaHub is used and improve it, using aggregated information where we can.
• With your consent, to send news and tips by email. You can withdraw consent at any time.
• To meet our legal obligations, such as tax and accounting rules.

We use your information only for these purposes, or others we tell you about and, where required, ask your consent for.

Other CadenzaHub users

• Teacher profiles, including name, photo, city, rates, availability and reviews, are public, and may appear in search engines.
• Reports are seen only by our team. We never tell a teacher who reported them. When we need a teacher's side to resolve a report, we may share a summary of the concern without the reporter's name or other details that would identify them.
• Credential documents are never public and are not shared with families. Only the teacher and our review team can open them. Profiles show only the title, issuer and year of credentials we have reviewed.
• A teacher's background check document is never public. Only the teacher, our review team and families the teacher approves can open it, through short-lived links. Profiles show only the type of check, the issuing police service and its issue month.
• When a family books, the teacher sees the family's name, the student's details and, for in-home lessons, the lesson address. The family sees the studio address for studio lessons.
• Reviews show the reviewer's first name and the review date.
• We never share a family's payment details with teachers.

Service providers

We use trusted providers to run CadenzaHub. They may only use your information to provide their service to us, and they must protect it:

• Supabase: database, sign-in and file storage, hosted in Canada (Canada Central region). Background check and credential documents are kept in private storage buckets.
• Railway: application hosting, in the United States.
• Cloudflare: website delivery and security, worldwide.
• Stripe: payments, payouts and teacher identity verification.
• SMTP2Go: delivery of transactional email.
• Anthropic (Claude API): automated reading of background check documents to help our reviewers, in the United States. Anthropic processes the document only to return the reading to us.

When the law requires it

We may disclose information if the law requires it, such as in response to a court order, or where it is necessary to protect someone's safety, investigate fraud, or establish or defend a legal claim. If we are involved in a merger or sale of the business, your information may transfer to the new owner, who must keep protecting it as this policy describes.

We do not sell, rent or trade your personal information.

Our main database is in Canada, but some of our providers process information in the United States and other countries. While it is outside Canada, your information is subject to the laws of those countries and may be accessible to their courts and authorities. We choose providers with strong security and contractual commitments to protect your information.

• Account and profile information: while your account is open. When you close your account, we delete or anonymise it within 90 days, except as below.
• Lesson notes: while the family's account is open, so the student keeps their learning record.
• Bookings, payments and payout records: 7 years after the transaction, to meet tax and accounting requirements.
• Reports about teachers: 3 years after the report is closed. If a report leads to a suspension or removal, or relates to a safety concern or a legal claim, we may keep it for up to 7 years.
• Information about disputes and suspensions: up to 7 years, so we can keep the community safe and respond to legal claims.
• Credential documents and review records: while the credential is on the teacher's profile or under review, and for 12 months after it is removed or rejected, or the teacher's account closes, then deleted.
• Background check documents and review records: while the check is current, and for 12 months after it expires, is replaced, or the teacher's account closes, then deleted.
• Requests to see a background check: for as long as the related check is kept.
• Server logs: up to 90 days.

We use encryption in transit, access controls that limit each user to the information they are allowed to see, hashed passwords, and restricted access for our own team. Payment data is handled by Stripe, which is certified to the highest level of the payment card industry standard.

No system is perfectly secure. If a breach of security creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada as PIPEDA requires, and keep a record of the breach.

We use essential cookies to keep you signed in and to protect your account. They are needed for the Service to work, so they cannot be turned off.

We do not use advertising or cross-site tracking cookies. If we add analytics or other non-essential cookies in the future, we will update this policy and ask for your consent where required.

• Access: ask for a copy of the personal information we hold about you.
• Correction: update most details yourself in your account, or ask us to correct anything inaccurate.
• Deletion: close your account and ask us to delete your information, subject to the retention periods in section 7.
• Withdraw consent: unsubscribe from marketing emails using the link in any email. Withdrawing consent to information we need to run your bookings may mean we cannot provide the Service.
• Complaints: contact our privacy officer first. You can also complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

We respond to requests within 30 days. We may need to confirm your identity first.

We send transactional emails that are part of the Service, such as confirmations, lesson notes, receipts and security notices. We send marketing emails only with your consent, as Canada's anti-spam legislation (CASL) requires, and every one includes a way to unsubscribe.

Messages between users are stored so both sides can refer back to them. Messages that are blocked for sharing contact details are kept too, but never delivered. Our team may review messages and blocked attempts when investigating a report, a dispute or a breach of our terms, and each time an admin opens a conversation it is recorded.

We will update this policy as CadenzaHub changes. If we make a significant change to how we use your information, we will email account holders and post a notice on the Service before it takes effect, and ask for consent where the law requires it.

Questions, requests and complaints about privacy go to our privacy officer, Guillermo Figueredo, at [email protected]. Awesome Web Designs Inc., operating as CadenzaHub, Burlington, Ontario, Canada.