Privacy Policy

1. Overview

Thoven Corp. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal information from parents, students, and teachers during our beta testing phase.

By using Thoven, you agree to the practices described below. This policy applies only to users located in the United States and only during our beta testing period.

2. What Data We Collect

We collect only the data necessary to deliver our services and improve the platform.

a. From Students (under 18)

• First name
• Age
• Music instrument interest
• Proficiency level
• Learning activity (e.g., file upload types, class progress)
• Account activity logs

Note: For users under 13, data is only collected after verifiable parental consent is obtained.

b. From Parents

• Full name
• Email address
• Government-issued ID (for identity verification)
• Profile photo
• Payment-related data (via Stripe)
• Interaction data with the child's account

c. From Teachers

• Full name
• Email address
• Profile photo
• Background check details (felony/sexual misconduct verification only)
• Payment-related data (via Stripe)
• Class activity and uploaded content
• Calendar integrations and availability settings

d. From All Users

• General location (for matching and marketplace relevance)
• Usage logs and file activity (type of file uploaded, not content itself)

3. How We Use Your Data

We use the data we collect to:

• Provide platform features (e.g., matching, scheduling, messaging)
• Facilitate secure payments
• Monitor usage to improve safety and product quality
• Comply with legal obligations (e.g., COPPA)
• Conduct background checks (for teachers only)
• Send administrative and notification emails

4. COPPA and Child Privacy

We comply fully with the Children's Online Privacy Protection Act (COPPA).

• For users under 13, only a parent can create the account
• We require verifiable parental consent before collecting any personal data
• Parents manage all key functions (e.g., payment, messaging, scheduling)
• Children may only use limited functions (e.g., file uploads, homework, progress tracking)
• Parents may contact us at andres@thoven.co to review or delete their child's data at any time

5. Third-Party Services

We use third-party service providers to support key platform functionality. These include:

• Stripe – payment processing
• Calendly / calendar integrations – scheduling
• Persona / Checker – ID verification and background checks
• Google Risk API (future) – text moderation
• Google Image Detection / Microsoft PhotoDNA (future) – image safety
• Thorn (future) – file and link safety tools

For users under 13: No personal data is shared with or collected by these third parties unless required for platform functionality and consented to by a parent.

6. Data Storage & Security

We use industry-standard safeguards to protect your data, including encryption, access controls, and secure data storage. Only authorized personnel have access to personally identifiable information.

Data may be stored on secure servers in the United States.

7. Data Retention

We retain user data only as long as necessary for educational or legal purposes. During beta, data may be periodically deleted or anonymized for testing resets or upgrades.

Parents may request data deletion at any time for their child by contacting andres@thoven.co.

8. Data Sharing

We do not sell or rent personal information to third parties.

We may share data:

• With service providers for the purpose of platform functionality
• To comply with legal obligations (e.g., subpoenas)
• To protect the safety, rights, or property of users or Thoven

9. Your Rights and Controls

As a user or parent, you may:

• Access and review your data
• Request deletion or correction
• Withdraw consent (where applicable)
• Opt out of non-essential communications

To exercise these rights, contact us at andres@thoven.co.

10. Changes to This Policy

We may update this Privacy Policy as we evolve. Material changes will be communicated to users via email or platform notice. Continued use of the platform indicates acceptance of any changes.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact: