Privacy Policy

• Prospective families who submit an inquiry.
• Parents and guardians who create an account and enroll a student.
• Students, including minors, whose information is provided by their parent or guardian.

You provide to us:

• Contact and account information: name, email address, phone number, time zone, and profile photo (optional).
• Inquiry information:the prospective student's name and age, experience level, preferred lesson length, preferred days and times, and any message you send us.
• Student information: student name, experience level, preferred lesson duration, and lesson notes, provided by the parent or guardian account holder.
• Scheduling information: lessons booked, times, and related notes.
• Payment information: invoice amounts and payment status, and, when you pay online, payment details you enter directly with our payment processor (see Section 4). We do not store your full card number on our systems.
• Bank-account connection (planned): if you choose to connect a bank account to pay tuition, you will do so through Plaid. Plaid collects your banking information directly and shares limited account and payment information with us as needed to process payments. We do not receive or store your online-banking password.

Collected automatically:

Basic technical data needed to operate and secure the Service (for example, authentication session data and standard server and log information from our hosting provider). We do not use advertising trackers.

From third parties:

If you sign in with Google, we receive basic profile information (name, email) from Google to create or access your account.

We use personal information to:

• Respond to inquiries and evaluate enrollment.
• Create and manage accounts and student profiles.
• Schedule and manage lessons.
• Issue invoices and process tuition payments.
• Send service communications (for example, scheduling notices and account and payment notifications, including browser push notifications if you enable them).
• Secure the Service, prevent fraud and abuse, and comply with legal obligations.

We do not sell personal information, and we do not use it for third-party advertising.

Online card payments are processed by Stripe. Bank-account connections (once available) are handled by Plaid. When you make a payment, you provide your payment details directly to these processors, who handle that data under their own privacy policies:

• Stripe — stripe.com/privacy
• Plaid — plaid.com/legal

We receive confirmation of payment and limited, non-sensitive transaction details necessary to reconcile your account.

Piano students may be minors. Accounts are created and controlled by a parent or guardian, who provides any information about their child. We do not knowingly allow children to create their own accounts, and we collect a child's information only from the supervising parent or guardian for the purpose of providing lessons.

We do not use children's information for advertising or sell it. A parent or guardian may review, update, or request deletion of their child's information at any time by contacting us. If you believe a child provided us information without parental involvement, contact us and we will delete it.

[Confirm with counsel: obligations under COPPA (U.S., children under 13) and any state student-privacy laws that apply]

We share personal information only as follows:

• Service providers (sub-processors) who process data on our behalf, listed below.
• Payment processors (Stripe; Plaid once integrated) to process payments.
• Legal and safetyreasons — to comply with law, enforce our terms, or protect the rights and safety of our students, staff, and others.
• Business transfer— if the Studio is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

We do not sell or rent personal information.

We keep personal information only as long as needed for the purposes described here, or as required by law. In summary, we retain account and student records while the account is active and for a limited period afterward, and payment and invoice records for the period required for tax and accounting purposes. You may request deletion as described in Section 9.

We protect personal information using encryption in transit (TLS 1.2+), encryption at rest, role-based access controls, and multi-factor authentication for administrative access. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to withdraw consent. To exercise any of these, contact us. We will verify your request and respond within the timeframe required by applicable law.

California residents: [Confirm with counsel: CCPA/CPRA rights and whether the CCPA applies based on your business size and revenue]

You can also:

• Update your profile information in your account.
• Turn browser push notifications on or off in your browser or device settings.
• Disconnect a linked bank account (once the Plaid feature is available).

We operate in the United States and store data with U.S.-based providers. If you access the Service from outside the United States, your information will be processed in the United States.

We use only the cookies and similar technologies necessary to keep you signed in and to operate the Service. We do not use advertising or cross-site tracking cookies.

We may update this policy from time to time. We will post the updated version here and change the “Last updated” date. Material changes will be communicated as required by law.

ABA Music Academy
[legal entity name and mailing address]

Email: arpine@abamusicacademy.org
Phone: 818-836-2322

For studio policies (cancellations, payments, scheduling), see our Studio Policies page.