Privacy

What we store

• Your account: name, email, and password (stored as a one-way hash — we never see the password itself).
• Your learning activity: credit packages, bookings, class sessions, course progress, messages with teachers and staff, and teaching notes your teachers keep about your progress.
• Session cookies that keep you signed in: an HttpOnly session cookie (15 minutes, renewed silently while you use the site) and an HttpOnly refresh cookie (7 days). We use no advertising cookies.
• Usage analytics: first-party events (pages viewed, quiz steps, bookings) stored on our own servers, plus Google Analytics measurement when it is enabled — used only to understand how the site is used, never to advertise.

Who processes it

• Stripe processes payments. Your card details go directly to Stripe; we keep only purchase records.
• Brevo sends transactional email (sign-in invites, password resets, booking confirmations, class reminders).
• Google provides optional Google sign-in and the Google Meet links used for live classes.
• OpenRouter powers Diego, the optional AI placement chat. What you tell Diego is used to estimate your level and point you to the right course or class.

Your data: export and erasure

There is no self-serve export or deletion tool yet. To request a copy of your data or ask us to delete it, email hola@thriveinspanish.com and we will handle it personally.