Security and privacy basics

Sign-in: there are no passwords. You sign in with a one-time link emailed to you (it works for 30 minutes) and stay signed in on that device for up to 60 days. Keep your email account secure, since it's your key. "Log out on all devices" is at the bottom of every page.

Who sees what: owners and admins see the studio's data; tutors see only their own students (no prices or invoices); parents see only their own children, and only what you share. Private notes, progress ratings and private files are never shown to families.

Private links: invoice, family portal and calendar links are private, so don't post them publicly. If a calendar link leaks, use "Make a new link".

Your data: you own it, and LessonPaid processes it on your behalf. It's never sold or used for advertising, and there are no tracking cookies. It's kept with established providers (Vercel for hosting, Supabase for the database and files, Resend for email, Stripe for payments), mainly in the United States, over encrypted connections.

Students who are minors: LessonPaid is for teachers and parents, not children. Get a parent's or guardian's permission where the law requires it, add only what you need to teach and bill, and never add sensitive details like health information, government ID numbers or bank or card numbers.

Full details are at lessonpaid.com/privacy and lessonpaid.com/terms. Questions, or a worry about a leaked link or login: hello@lessonpaid.com.