Privacy Policy

1. Overview

Thoven Corp. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal information from parents, students, and teachers during our beta testing phase.

By using Thoven, you agree to the practices described below. This policy applies only to users located in the United States and only during our beta testing period.

2. What Data We Collect

We collect only the data necessary to deliver our services and improve the platform.

a. From Students (under 18)

• First name
• Age
• Music instrument interest
• Proficiency level
• Learning activity (e.g., file upload types, class progress)
• Account activity logs

Note: For users under 13, data is only collected after verifiable parental consent is obtained.

b. From Parents

• Full name
• Email address
• Government-issued ID (for identity verification)
• Profile photo
• Payment-related data (via Stripe)
• Interaction data with the child's account

c. From Teachers

• Full name
• Email address
• Profile photo
• Background check details (felony/sexual misconduct verification only)
• Payment-related data (via Stripe)
• Class activity and uploaded content
• Calendar integrations and availability settings

d. From All Users

• General location (for matching and marketplace relevance)
• Usage logs and file activity (type of file uploaded, not content itself)

3. How We Use Your Data

We use the data we collect to:

• Provide platform features (e.g., matching, scheduling, messaging)
• Facilitate secure payments
• Monitor usage to improve safety and product quality
• Comply with legal obligations (e.g., COPPA)
• Conduct background checks (for teachers only)
• Send administrative and notification emails

4. COPPA and Child Privacy

We comply fully with the Children's Online Privacy Protection Act (COPPA).

• For users under 13, only a parent can create the account
• We require verifiable parental consent before collecting any personal data
• Parents manage all key functions (e.g., payment, messaging, scheduling)
• Children may only use limited functions (e.g., file uploads, homework, progress tracking)
• Parents may contact us at thovie@thoven.co to review or delete their child's data at any time

5. Third-Party Services

We use third-party service providers to support key platform functionality. These include:

Platform Services

• Stripe – payment processing
• Calendly / calendar integrations – scheduling
• Persona / Checker – ID verification and background checks
• Google Risk API (future) – text moderation
• Google Image Detection / Microsoft PhotoDNA (future) – image safety
• Thorn (future) – file and link safety tools

Analytics and Advertising Services

We use the following analytics and advertising services to understand how users interact with Thoven and to measure the effectiveness of our marketing. All of these services are consent-gated — they are only active when a user has granted marketing consent.

• Mixpanel – Analytics and session recording. Purpose: understand usage patterns and improve the product experience. Consent-gated: only active when user grants marketing consent.
• Google Analytics 4 – Web analytics. Purpose: measure website traffic, understand user behavior, and improve site performance. Consent-gated: only active when user grants marketing consent.
• Google Ads – Advertising conversion tracking. Purpose: measure advertising campaign effectiveness. Consent-gated: only active when user grants marketing consent.
• Meta Pixel (Facebook) – Advertising conversion tracking. Purpose: measure advertising campaign effectiveness and retargeting. Consent-gated: only active when user grants marketing consent.

For users under 13: No personal data is shared with or collected by these third parties unless required for platform functionality and consented to by a parent.

6. Data Storage & Security

We use industry-standard safeguards to protect your data, including encryption, access controls, and secure data storage. Only authorized personnel have access to personally identifiable information.

Data may be stored on secure servers in the United States.

7. Data Retention

We retain user data only as long as necessary for educational or legal purposes. During beta, data may be periodically deleted or anonymized for testing resets or upgrades.

Parents may request data deletion at any time for their child by contacting thovie@thoven.co.

8. Data Sharing

We do not sell or rent personal information to third parties.

We may share data:

• With service providers for the purpose of platform functionality
• To comply with legal obligations (e.g., subpoenas)
• To protect the safety, rights, or property of users or Thoven

9. Your Rights and Controls

As a user or parent, you may:

• Access and review your data
• Request deletion or correction
• Withdraw consent (where applicable)
• Opt out of non-essential communications

To exercise these rights, contact us at thovie@thoven.co.

10. Changes to This Policy

We may update this Privacy Policy as we evolve. Material changes will be communicated to users via email or platform notice. Continued use of the platform indicates acceptance of any changes.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact: