Privacy policy

Who is responsible for your data

The controller of the personal data described in this policy is MLJ, SASU, the company that publishes TutorCredits, registered in Paris under SIREN 934 769 837. The publication director is Jimenez Julien. Full publisher details are on the legal notice. Any question about this policy, and any request to see, correct or delete your data, goes to jimenezjulien42@gmail.com and is answered by a person, not by an automated system.

What this website collects

This site has one place where you can give us personal information: the request form in the contact section of the home page. When you submit that form, the following named fields are transmitted and stored.

• name: your full name, so we know who we are replying to.
• email: your work email address, which is where the reply is sent.
• company: the name of your tutoring practice or center.
• role: your role, chosen from a short list such as independent tutor or center director.
• request: the kind of reply you want, such as a demo, early access or a quote.
• size: how many tutors teach under your name, chosen from a range.
• message: whatever you write about how you track package balances today.
• consent: the record that you ticked the box agreeing to be contacted.
• subject and recipient: two hidden routing fields that tell us which site the message came from and where to deliver it.
• bot-field: an empty honeypot field used to catch automated spam. A human never fills it in.

The form submission also carries technical information supplied by your browser and by our host, including the time of submission and the internet protocol address the request came from. We do not ask for and do not want payment card details, student names, grades, dates of birth or any other information about a child. Please keep student information out of the message box.

Why we are allowed to hold it

We rely on two legal bases. The first is your consent, given by ticking the consent box before you submit the form, which you may withdraw at any time by writing to us. The second is our legitimate interest in answering a business enquiry that you addressed to us and in keeping a record of commercial correspondence. Where you are in the European Union, these are the bases under Article 6 of the General Data Protection Regulation. Where you are in the United States, we treat your submission as information you provided to us in order to obtain a business service.

How long submissions are kept

A submission that leads to no further contact is deleted 24 months after it arrives. A submission that turns into a customer relationship is kept for the life of that relationship and then for the period required by French commercial and accounting law, which is ten years for records that support an invoice. You can ask for earlier deletion at any point and we will carry it out unless a legal retention duty prevents it, in which case we will tell you which one and when it expires.

Who processes the data with us

This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, United States. Netlify Forms receives, processes and stores every submission from the contact form, and forwards a copy by email to the address of the publication director. Netlify acts as our processor and handles the data on our written instructions. We also use a standard business email provider to read and answer the messages that arrive. We do not sell, rent, trade or otherwise share your details with data brokers, advertising networks or list buyers, and we never will.

Cookies, trackers and analytics

This website sets no advertising cookies and no third party analytics cookies. There is no tracking pixel, no marketing tag, no social network widget that phones home and no cross site profiling of any kind. The pages load two font files from Google Fonts and nothing else from a third party. Because we set no non essential cookies, there is no consent banner to click through. Our host keeps short lived technical logs for security and abuse prevention, and those logs are not used to build a profile of you.

International transfers

MLJ, SASU is established in France and our host is established in the United States, so a submission sent from Europe is transferred to the United States. That transfer is covered by the European Commission standard contractual clauses included in our agreement with Netlify, together with the technical measures Netlify applies, including encryption in transit and at rest. If you would like a copy of the clauses that apply to your submission, ask us and we will send them.

Your rights in the United States

Depending on where you live, state privacy law may give you specific rights over the information described above. Residents of California hold rights under the California Consumer Privacy Act as amended, including the right to know what is collected, the right to delete, the right to correct and the right not to be discriminated against for exercising a right. Residents of Colorado, Connecticut, Utah and Virginia hold comparable rights under their own state statutes, including access, correction, deletion and portability, and the right to opt out of targeted advertising and of any sale of personal information. We do not sell personal information and we do not use it for targeted advertising, so there is nothing to opt out of, but the request will always be honored and confirmed in writing. To use any of these rights, write to jimenezjulien42@gmail.com from the address you used on the form, or tell us enough for us to find your record. We reply within 45 days.

Your rights in the European Union and the United Kingdom

Under the General Data Protection Regulation and the United Kingdom equivalent you may request access to your data, correction of anything inaccurate, erasure, restriction of processing, portability in a machine readable format, and you may object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting what was lawful before the withdrawal. If you believe we have handled your data badly you may complain to your national supervisory authority, which in France is the Commission Nationale de l'Informatique et des Libertes.

Children

TutorCredits is business software sold to tutors and tutoring centers, and this website is directed at adults acting for a business. We do not knowingly collect personal information from anyone under 16 through this site, and the form asks for nothing about a student. If you believe a child has sent us information through this website, write to us and we will delete it without delay. Practices that use the product to record student progress remain the controller of their own student records, and their agreement with families governs that relationship.

Security

Submissions travel over HTTPS and are stored encrypted by our host. Access to the form inbox is limited to the publication director and is protected by two factor authentication. We keep the number of people who can read a submission as small as it can reasonably be, which today is one. If a breach ever affects your data, we will tell you and the relevant authority within the deadlines the law sets.

Changes to this policy

When this policy changes we update the date at the top of the page and describe what moved. Material changes that affect how a past submission is handled are also emailed to the address that sent it. This version is dated March 2, 2026 and replaces every earlier version.

Written and kept current by Jimenez Julien, publication director at MLJ, SASU. More about him on the author page.