Privacy Policy

1. Overview

Thoven Corp. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share personal information from parents, students, and teachers during our beta testing phase.

By using Thoven, you agree to the practices described below. This policy applies only to users located in the United States and only during our beta testing period.

2. What Data We Collect

We collect only the data necessary to deliver our services and improve the platform.

a. From Students (under 18)

• First name
• Age
• Music instrument interest
• Proficiency level
• Learning activity (e.g., file upload types, class progress)
• Homework submissions, including audio recordings, video recordings with sound, and photos
• Account activity logs

Only the student, the student's parents or guardians on Thoven, and the teacher of that class can see a homework submission. Submissions are stored with Google Cloud Storage. Section 7 says how long we keep them. We also delete a homework submission when the teacher of that class closes their Thoven account. Class names, homework assignments and class materials that a teacher writes belong to the teacher's account. They stay with the teacher when a family deletes their account.

Note: For users under 13, a parent must create and consent to the account before the child uses Thoven. Email-plus verification is planned but not yet live.

b. From Parents

• Full name
• Email address
• Government-issued ID (for identity verification)
• Profile photo
• Payment-related data (via Stripe)
• Interaction data with the child's account

c. From Teachers

• Full name
• Email address
• Profile photo
• Background check details (felony/sexual misconduct verification only)
• Payment-related data (via Stripe)
• Class activity and uploaded content
• Calendar integrations and availability settings

d. From All Users

• General location (for matching and marketplace relevance)
• Usage logs and file activity. In analytics we record the type of file uploaded, not its content. Homework recordings and photos themselves are covered in section 2a.

3. How We Use Your Data

We use the data we collect to:

• Provide platform features (e.g., matching, scheduling, messaging)
• Facilitate secure payments
• Monitor usage to improve safety and product quality
• Comply with legal obligations (e.g., COPPA)
• Conduct background checks (for teachers only)
• Send administrative and notification emails

3A. SMS Communications

Thoven supports two-way, education-related SMS communications between parents or guardians and their child's teacher. Message frequency varies based on conversations and account activity. Message and data rates may apply. Reply STOP to opt out or HELP for assistance. You may also contact thovie@thoven.co for support.

We do not sell or rent mobile phone numbers, SMS opt-in data, or SMS consent, and we do not share them with third parties or affiliates for their marketing or promotional purposes. Messaging providers may process this information on Thoven's behalf only to deliver messages and manage messaging preferences.

4. COPPA and Child Privacy

We design our child privacy practices around the Children's Online Privacy Protection Act (COPPA).

• For users under 13, only a parent can create the account
• We require parent account creation and consent before a child under 13 uses the platform. Email-plus verification is planned but not yet live; this privacy policy must be updated again when that verification flow ships.
• Parents manage all key functions (e.g., payment, messaging, scheduling)
• Children may only use limited functions (e.g., file uploads, homework, progress tracking)
• Parents may contact us at thovie@thoven.co to review or delete their child's data at any time

5. Third-Party Services

These companies receive personal information from Thoven, including information about children, so the service can work. Each line says what the company gets and why.

Platform Services

• Daily – video lessons. Receives the audio and video of a live lesson, each participant's first name and an internal participant id, to run the lesson call.
• Google Cloud Storage – uploaded files. Stores homework audio, video, photos and other uploaded files, so the student, their parents and their teacher can open them.
• Neon – database. Stores account data, including children's profiles, so the service works.
• Render – backend and background jobs. Runs our servers. All account data passes through it so the service works.
• Vercel – website hosting. Serves the website. Every page request passes through it.
• Stripe – payments. Receives parents' payment details and our internal id for the student a payment is for, to take and record payments.
• Twilio – text messages and in-app messaging. Receives phone numbers and message text, which can include a child's first name, to deliver texts and messages between parents and teachers.
• SendGrid – email. Receives email addresses and email content, which can include a child's first name, to send account and lesson emails.
• Google Calendar – teacher calendar sync. When a teacher connects their Google Calendar, their lessons appear in it with the student's first name.
• Google Maps – address lookup. Receives an address while a parent or teacher types it, to suggest matching addresses.
• Sentry – error reports. Receives error details, the page address with children's ids removed, browser details and an account id, to find and fix bugs. Outside student pages it may also record a session with all text hidden.

Other Service Providers

• Persona / Checker – ID verification and background checks
• Cloudflare – domain DNS

Analytics and Advertising Services

We use these analytics and advertising services to understand how people use Thoven and to measure our marketing. None of them load on student pages. Each service's line below says where it loads.

• Mixpanel – product analytics. Receives the pages viewed, clicks and an account id, with children's ids removed, to see how Thoven is used and improve it. Session recording is off on parent, teacher and student pages. Not used for advertising. It loads on every page except student pages.
• Google Analytics – web analytics. Receives the pages visited and device and browser details, with children's ids removed, to measure site traffic. It loads on every page except student pages.
• Google Ads – ad measurement. Receives the pages visited and device and browser details, with children's ids removed, to measure which ads bring visitors. It loads on every page except student pages.
• Meta (Facebook) – ad measurement. Gets your IP address and browser details when its script loads. Its script loads only on Thoven's public marketing pages. It never loads on signed-in pages, so it cannot see a signed-in page or internal ids from one. Only after you accept marketing cookies does it receive the pages you visit, which can include our internal ids, to measure ads and show them again to past visitors.

For users under 13: No personal data is shared with or collected by these third parties unless required for platform functionality and consented to by a parent.

6. Data Storage & Security

We use industry-standard safeguards to protect your data, including encryption, access controls, and secure data storage. Only authorized personnel have access to personally identifiable information.

Data may be stored on secure servers in the United States.

7. Data Retention

A child's data is deleted 12 months after the family's last lesson or login. We email the parent 30 days before. A parent can ask us to delete their child's data at any time, and we delete it within 30 days.

We retain user data only as long as necessary for educational or legal purposes. During beta, data may be periodically deleted or anonymized for testing resets or upgrades.

To ask us to delete your child's data, email thovie@thoven.co.

8. Data Sharing

We do not sell or rent personal information to third parties.

We may share data:

• With service providers for the purpose of platform functionality
• With the analytics and advertising services in section 5, to understand how Thoven is used and to measure our marketing. None of them load on student pages.
• To comply with legal obligations (e.g., subpoenas)
• To protect the safety, rights, or property of users or Thoven

9. Your Rights and Controls

As a user or parent, you may:

• Access and review your data
• Request deletion or correction
• Withdraw consent (where applicable)
• Opt out of non-essential communications

To exercise these rights, contact us at thovie@thoven.co.

10. Changes to This Policy

We may update this Privacy Policy as we evolve. Material changes will be communicated to users via email or platform notice. Continued use of the platform indicates acceptance of any changes.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact: