Privacy Policy

KoreduHub is a SaaS platform for tutoring academies. The legal operator of the Service is Antreprenor Independent Mihai Chior, Republic of Moldova. When you sign up as a Director, your academy (the “Company”) is the Data Controller for the personal data of its students, staff and contacts. KoreduHub acts as the Data Processor on the Company's behalf.

Account data: name, email, role, language preference, hashed password.

Company data: academy name, logo, address, tax details, subscription plan and payment records.

Operational data: students and their contact details, teachers, lessons, groups, homework, lesson summaries and attachments, financial ledger entries, notifications and activity logs.

Technical data: IP address, browser and device information, error and diagnostic logs used to keep the Service secure and functional.

To provide the Service, authenticate users, deliver notifications, generate reports and process subscription payments.

To secure the platform: fraud prevention, abuse detection, incident response and audit logging.

To communicate with Company administrators about product updates, security notices and support requests.

KoreduHub complies with the legislation of the Republic of Moldova regarding the protection of personal data and, where applicable, the General Data Protection Regulation (GDPR) for users located in the European Union.

Performance of a contract (Art. 6(1)(b) GDPR) for account creation, Subscription billing and Service delivery.

Legitimate interest (Art. 6(1)(f) GDPR) for platform security, fraud prevention and product improvement.

Legal obligation (Art. 6(1)(c) GDPR) for accounting, tax and mandatory record-keeping.

Consent (Art. 6(1)(a) GDPR) for optional marketing communications, which you can withdraw at any time.

Every Company workspace is isolated by row-level security enforced at the database layer. Data is encrypted in transit with TLS 1.2 or higher, and at rest with AES-256.

Lesson attachments live in a private object store and are only accessible through per-user, short-lived signed URLs generated on demand.

Access to production systems is restricted, logged and requires multi-factor authentication.

Operational data is kept for the duration of the Subscription. After termination we retain data for 30 days for export, then delete it.

Financial records are retained for the period required by applicable tax and accounting law.

Diagnostic logs are kept for a maximum of 90 days.

We rely on a limited set of vetted sub-processors to operate the Service: managed database and object storage (Supabase / Cloudflare in the EU), application hosting, email delivery for transactional notifications, and payment processing. An up-to-date list is available on request.

Under GDPR you have the right to access, rectify, erase, restrict, port and object to processing of your personal data, and to lodge a complaint with a supervisory authority.

If you are a student, teacher or administrator inside a Company workspace, please contact your academy Director first; they control the personal data inside that workspace. You can also write to koreduhub@gmail.com and we will assist.

We use only essential cookies and local storage. See our Cookie Policy for details.

We may update this Policy from time to time. Material changes will be announced in-app or by email at least 15 days before they take effect.

Operator: Antreprenor Independent Mihai Chior. Country: Republic of Moldova. Email: koreduhub@gmail.com.