Privacy Policy
Last updated: [date]
Pastel Language School ("Pastel," "we," "us") provides English-language teaching and self-study tools through this website. This policy explains what information we collect from students and teachers who create an account, how we use it, and how it's protected.
Information we collect
When you create an account, we collect:
- Your name, email address, and password (stored as a one-way cryptographic hash — we never store or can see your actual password).
- Optionally, a phone number, if you choose to add one to your profile.
- Your CEFR level, learning goals, and answers to our onboarding questionnaire.
- Content you create while using the platform: vocabulary lists, study logs, saved articles, placement-test answers (including written responses), homework submissions, and booking history.
- For students: payment status and amount for enrolled course packages, recorded by your teacher or the school administrator.
How we use your information
We use the information above only to operate the school:
- To create and secure your account, and keep you signed in between visits.
- To match you with an appropriate CEFR level, track your progress, and personalize content (like recommended podcasts and vocabulary).
- To let your teacher review your placement test, homework, and progress, and give you feedback.
- To track course enrollment, session attendance, and payment status for billing purposes.
We do not sell your information, and we do not share it with advertisers or data brokers. We do not run third-party analytics or advertising trackers on this site.
Who can see your information
- You can always see your own data.
- Teachers can see the profile, homework, bookings, vocabulary, and progress of students they teach, so they can plan and give feedback on lessons.
- The school owner/administrator can see all student and teacher records, for running the school and reviewing overall activity.
- We never share your personal information with anyone outside Pastel.
Where your data is stored
This platform is self-hosted — your data is stored on our own server, not with a third-party cloud provider. Passwords are hashed with bcrypt and never stored in plain text. Your session is kept in a single secure, encrypted cookie used only to keep you signed in; we do not use third-party or advertising cookies.
Payments
Payments are currently handled manually via Iranian bank card transfer, outside of this website. We do not collect or store your card number or banking credentials anywhere on this platform — only the payment status and amount your teacher or the administrator records against your course package.
Accounts for minors
[Placeholder — Pastel teaches both adults and younger students. Describe here how you handle accounts and data for students under 18: whether a parent/guardian creates and controls the account, what additional consent is obtained, and any extra protections in place for minors' data.]
How long we keep your data
We keep your account and learning records for as long as your account is active, so your progress and history remain available to you and your teacher. [Placeholder — specify how long data is retained after a student stops attending, and your process for permanently deleting an account on request.]
Your choices
You can update most of your profile information yourself from your dashboard. To request a copy of your data, ask a question about this policy, or request that your account be deleted, contact us at [contact email].
Changes to this policy
If we make meaningful changes to this policy, we'll update the date at the top of this page.