Privacy Policy
Version 1.0 · Last updated: March 2026
This Privacy Policy explains how TutorGator Pty Ltd collects, holds, uses, and discloses personal information. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Because our platform serves school-aged children, we apply a heightened standard of care to all personal information involving minors.
1. About This Privacy Policy
TutorGator Pty Ltd (ABN 38 667 820 680, ACN 667 820 680) ("TutorGator", "we", "us" or "our") operates an Australian online tutoring platform that delivers live one-to-one sessions for Primary, High School, and HSC students aligned to the NSW NESA curriculum. This Privacy Policy explains how we collect, hold, use, and disclose personal information. It applies to all individuals who interact with TutorGator, including parents, students, tutors, and website visitors.
We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Because our platform serves school-aged children, we apply a heightened standard of care to all personal information involving minors.
By enrolling, creating an account, or using our platform, you agree to the handling of your personal information as described in this policy. If you have questions, contact us using the details in Section 18.
2. Who We Are
| Company | TutorGator Pty Ltd |
| ABN | 38 667 820 680 |
| ACN | 667 820 680 |
| Address | Level 27, International Towers, 100 Barangaroo Avenue, Sydney NSW 2000 |
| admin@tutorgator.com.au | |
| Phone | 1300 042 867 |
| Website | tutorgator.com.au |
3. Anonymity and Pseudonymity
TutorGator does not offer services anonymously or pseudonymously. We must collect identifiable information to: match students with qualified tutors; comply with child safety and Working With Children Check (WWCC) requirements; communicate with parents about their child's progress; process payments; and maintain accurate records.
4. What Personal Information We Collect
4.1 Parents and Guardians
- Full name, email address, phone number, residential address
- Preferred contact method and enrolment history
- Payment information (processed by our payment provider, TutorGator does not store card details)
4.2 Students
- Full name, email address (used to create their platform account), year level, school (optional), learning goals (optional)
- All whiteboard content created during sessions (stored in real time in Cloud Firestore)
- Session chat messages, shared file links, and session notes prepared by tutors
- Note: live video is transmitted via peer-to-peer WebRTC and is not recorded or retained by TutorGator
4.3 Tutors and Tutor Applicants
- Full name, date of birth, contact details, residential address
- Qualifications, teaching experience, resume, and referee details
- Working With Children Check (WWCC) number, state of issue, and expiry date
- ABN, bank account details, and TFN (where applicable)
- Identity verification documents and board templates (stored locally in the tutor's browser via localStorage only)
4.4 Website Visitors
- IP address, browser type, device, pages visited, visit duration, and cookies
5. How We Collect Personal Information
We collect information when: a parent completes an enrolment form; payment is processed; a parent or tutor contacts us; a tutor applies through our hiring process; a tutor or student participates in a live session through the Platform; or you visit our website.
6. Website and Platform Data
6.1 General Website Data
When you visit tutorgator.com.au or use the Platform, we and our service providers may collect date and time of visit, pages accessed, IP address, and device/browser information for administration, security, and service improvement purposes.
6.2 Cookies
Our website uses cookies to recognise returning visitors, remember preferences, and analyse usage. You can configure your browser to refuse cookies. Disabling cookies may affect some functionality.
6.3 Cloudflare CDN
Our Platform loads on-demand libraries (PDF rendering, formula rendering, board export tools) from the Cloudflare CDN. Standard request data including IP address may be collected by Cloudflare in accordance with its own privacy practices.
6.4 Third-Party Links
Tutors may share links to external resources (e.g. Google Drive or Dropbox) during sessions. TutorGator stores only the URL. We are not responsible for the privacy practices of third-party platforms accessed through those links.
7. How Our Platform Works and What Data Is Stored
7.1 Authentication (Firebase Auth)
All accounts are authenticated through Google Firebase Authentication. Student accounts are created by TutorGator administrators only, students cannot self-register. Firebase Auth stores email addresses and manages secure login credentials. Firebase Auth is operated by Google and processed in accordance with Google's privacy terms.
7.2 Session and Whiteboard Data (Cloud Firestore)
All session data is stored in Google Cloud Firestore, including: user profiles, class and session records, all whiteboard content (every stroke, shape, text, image, PDF, and formula), session chat messages, and shared file links. Whiteboard data syncs in real time between tutor and student. All data remains accessible to the tutor, the student, and TutorGator administrators after the session ends.
7.3 Board Templates (Browser localStorage)
Tutors may save board templates for reuse. These are stored in the tutor's own browser using localStorage and are never transmitted to TutorGator's servers.
7.4 Live Video (Jitsi)
Live video is delivered through Jitsi via meet.ffmuc.net, a community-operated public Jitsi server in Germany. Video is transmitted as a direct peer-to-peer WebRTC stream. No video is recorded or retained by TutorGator. Connection metadata may be processed by the meet.ffmuc.net server operator. TutorGator intends to migrate to a self-hosted Jitsi instance for production use.
7.5 Platform Hosting (Netlify)
The Platform application is hosted on Netlify. Standard web access logs may be collected by Netlify. No session data or personal information is stored on Netlify infrastructure.
7.6 Payments (Stripe, Coming Soon)
TutorGator intends to integrate Stripe for payment processing. When active, Stripe will handle all payment card data under PCI-DSS standards. TutorGator will not store payment card details on its own systems. This section will be updated when Stripe integration is live.
8. How We Use Your Personal Information
We use personal information to: create and manage user accounts; authenticate users; match students with tutors; schedule sessions and send communications; deliver live sessions through the Platform; prepare and share session notes with parents; process enrolment payments; manage tutor payroll; assess tutor applications and WWCC compliance; respond to inquiries; improve our platform; send marketing communications where consented; comply with legal obligations; and detect and prevent fraud.
9. When We Disclose Personal Information
9.1 Platform Infrastructure Providers
- Google Firebase (Firebase Auth + Cloud Firestore): authentication and all session data
- Jitsi / meet.ffmuc.net: live video (connection data only during active sessions)
- Netlify: platform hosting (standard web access logs only)
- Cloudflare CDN: on-demand library delivery (standard request data)
9.2 Tutors
Student names, year levels, and session details are shared with the assigned tutor to the extent necessary to deliver sessions. Tutors do not receive payment card information or full residential addresses.
9.3 Parents and Guardians
Where a student is under 18, session notes, progress updates, and relevant session information may be shared with the enrolling parent or guardian.
9.4 Legal and Regulatory Disclosure
We may disclose personal information where required by law, including to government agencies, regulatory bodies, law enforcement, or child protection authorities.
9.5 Business Transfers
In the event of a sale, merger, or acquisition, personal information may be disclosed to prospective acquirers. We do not sell personal information for marketing purposes.
10. Data Retention and Destruction
- Student and parent enrolment records: retained for seven years following the last enrolment
- Session data in Firestore (whiteboard content, chat, session records): retained for the duration of the enrolment and a reasonable period thereafter. Parents may request earlier deletion by contacting us.
- Board templates in browser localStorage: remain on the tutor's device until the tutor deletes them. TutorGator has no access to or control over locally stored template data.
- Tutor records (qualifications, WWCC, payment records): retained for a minimum of seven years after the engagement ends.
- Financial and payment records: retained for seven years in accordance with Australian taxation law.
11. Overseas Disclosures
Some of our infrastructure services store or process data outside Australia, including: Google Firebase (USA); Jitsi via meet.ffmuc.net (Germany); Netlify (USA and globally distributed); and Cloudflare (globally distributed). We take reasonable steps to ensure overseas recipients protect personal information consistently with the APPs. By using our services, you consent to your personal information being stored or processed outside Australia by these services.
12. Marketing Communications
With your consent, we may use your contact information to send information about TutorGator programs, term dates, updates, and educational content. You may opt out at any time by clicking the unsubscribe link in any email or contacting admin@tutorgator.com.au. We will process opt-out requests within five business days.
13. Storage and Security of Personal Information
Our security measures include: Firebase Authentication with JWT-based access control; Firestore security rules restricting each user's access to their own session data; HTTPS encryption enforced by Netlify's automatic SSL; admin-only student account creation; and restricting personal information access to staff and tutors who require it. No system can guarantee complete security. If you have concerns, contact us immediately.
14. Accessing and Correcting Your Personal Information
You are entitled to access the personal information TutorGator holds about you. Contact us at admin@tutorgator.com.au with your request. We will respond within 30 days. If information we hold is inaccurate, incomplete, or out of date, contact us and we will take reasonable steps to correct it. There may be limited circumstances in which we cannot provide access; if so, we will explain the reason.
15. Notifiable Data Breaches
In the event of a data breach, TutorGator will assess whether it is likely to result in serious harm in accordance with the Notifiable Data Breaches (NDB) scheme under the Privacy Act 1988 (Cth). Where a breach is likely to result in serious harm, we will notify affected individuals and the OAIC promptly. If you believe your personal information has been involved in a breach, contact us immediately at admin@tutorgator.com.au.
16. Privacy Complaints
If you believe TutorGator has handled your personal information inconsistently with this policy or the APPs, contact us in writing at admin@tutorgator.com.au. We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you may escalate to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or 1300 363 992.
17. Updates to This Privacy Policy
TutorGator may update this policy from time to time. Where changes are significant, we will notify you by email or via a notice on our website. The most current version is always available at tutorgator.com.au/privacy-policy.
18. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy:
| admin@tutorgator.com.au | |
| Phone | 1300 042 867 |
| Address | Level 27, International Towers, 100 Barangaroo Avenue, Sydney NSW 2000 |
| Website | tutorgator.com.au |
TutorGator Pty Ltd
ABN 38 667 820 680 | ACN 667 820 680
Level 27, International Towers, 100 Barangaroo Avenue, Sydney NSW 2000