Effective: June 3, 2020
If you are a resident of the State of California, in the United States of America, and you purchase a Service or otherwise subject to our TOS, you have additional privacy rights described here.
Data Processor (or Service Provider) means any natural or legal person who processes the data on behalf of the Data Controller. We may use the services of various Service Providers in order to process your data more effectively.
Personal Data is any information about an individual from which that individual can be identified. Your name, address, phone number and bank account number are examples of personal data. It does not include data where the identity has been removed (anonymous data). We collect Personal Data from you in various ways, including when you visit the Site(s), create an account with us, purchase, enroll in and use our Services, use our Apps, answer surveys, participate in our social media communities, such as on Facebook, and when you send us feedback.
Data Subject is any living individual who is using our Service and is the subject of Personal Data.
When you create an account with StudySesh, we collect the information you provide us, such as your name, email address, phone number, birth date, and payment information. You may choose to share additional info with us and set up other preferences (such as your preferred pronouns).
When you rate and provide feedback, we collect all of the information you provide in your feedback for marketing purposes.
When you contact us or we contact you, we collect any information that you provide, including the contents of the messages or attachments you send us.
When you use the Services via the video camera or microphone on your device, whether computer or mobile phone, you agree and consent that we may use such applications on your devices to operate the Services. Further, you consent and agree that we may collect this information, including video and audio content. However, StudySesh is not permitted to sell any of the above-described information in this paragraph, including video and audio content.
Children under the age of 13 are not permitted to purchase or use the Services. Children under the age of eighteen (18) may provide information to StudySesh and participate in the Service only with consent of a parent or guardian.
When you log-on to our websites or to our App(s), we automatically receive information from your device, including your IP address and location. We and our service providers may use “Cookies” to keep, and sometimes track, information about you, and to create a personalized web experience.
When you access the Service with a mobile device, this Usage Data may include information such as the type of mobile device you use, your mobile device unique ID, the IP address of your mobile device, your mobile operating system, the type of mobile Internet browser you use, unique device identifiers and other diagnostic data.
We may use and store information about your location if you give us permission to do so (“Location Data”). We use this data to provide features of our Service, to improve and customize our Service. You can enable or disable location services when you use our Service at any time by way of your device settings.
A pixel tag is an electronic image, often a single pixel (1x1), that is ordinarily not visible to Site visitors and may be associated with cookies on the visitors’ hard drives. Pixel Tags allow us to count users who have visited certain pages of the Site, to deliver branded services, and to target our promotional or advertising campaigns and determine their effectiveness.
Examples of Cookies we use:
If your parent, school, employer or other third-party purchases Programs on your behalf, or if an agent refers you to StudySesh, such third parties may provide us with Personal Data about you, including your first name, last name and email address. We may also collect Personal Data about you from our business partners and other StudySesh owned companies.
StudySesh uses the collected data for various purposes:
StudySesh Inc. will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of our Service, or we are legally obligated to retain this data for longer periods.
We may employ third party companies and individuals to facilitate our Service ("Service Providers"), provide the Service on our behalf, perform Service-related services or assist us in analyzing how our Service is used.
These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
We may use third-party Service Providers to monitor and analyze the use of our Service.
For more information on the privacy practices of Google, please visit the Google Privacy & Terms page: Here
For more information on the privacy practices of Facebook, please visit Facebook's Data Policy page: Here
We may use third-party Service Providers to monitor and analyze the use of our Service. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Your Personal Data will be held in the Canada.
Your Personal Data may also be stored, processed and accessed in other countries where you are located. You consent to the transfer of your Personal Data outside your country, including Canada.
Under certain circumstances, StudySesh may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).
If you are using the Services as a tutor, StudySesh may disclose an image that may contain your facial features, likeness or any other personal detail pertaining to you, including but not limited your full name, your employment title, or your employer, for marketing purposes.
StudySesh may disclose your Personal Data in the good faith belief that such action is necessary to:
The security of your data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.
We do not support Do Not Track ("DNT"). Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
We may provide paid products and/or services within the Service. In that case, we use third- party services for payment processing (e.g. payment processors).
PCI-DSS requirements help ensure the secure handling of payment information.
The Provider requires the Customer to accept the provisions of this Data Processing Addendum ("DPA") which is intended to meet the data protection adequacy and security requirements of the GDPR-Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC. Therefore, if the GDPR applies to the Customer's activity (for instance because the Customer is established in the European Union or established outside the European Union but the Customer offers good or services to data subjects who are in the European Union) — the Customer needs to accept these Data Processing Addendum terms to be compliant with GDPR so that the Customer can process such GDPR-eligible personal data with the Provider. Unless the Customer accepts the Agreement involving this DPA, the Customer's contract with the Provider will lack those terms therefore if GDPR applies to the Customer's activity the Customer must refrain from using the Provider's Service unless the Customer accepts this DPA.
Persons with disabilities may obtain this notice in alternative format upon request by contacting us at email@example.com
California residents are entitled once a year, free of charge, to request and obtain certain information regarding our disclosure, if any, of certain categories of personal information to third parties for their direct marketing purposes in the preceding calendar year. We do not share personal information with third parties for their own direct marketing purposes.
The California Consumer Privacy Act (“CCPA”) provides California residents with rights to receive certain disclosures regarding the collection, use, and sharing of “Personal Information”, as well as rights to know/access, delete, and limit sharing of Personal Information.
The CCPA defines “Personal Information” to mean “information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.” Certain information we collect may be exempt from the CCPA because it is considered public information (i.e., it is made available by a government entity) or covered by a specific federal privacy law, such as the Gramm–Leach–Bliley Act, the Health Insurance Portability and Accountability Act, or the Fair Credit Reporting Act. Your rights are described below:
Right to Notice at Collection Regarding the Categories of Personal Information Collected.
You have the right to receive notice of the categories of Personal Information we collect, and the purposes for which those categories of Personal Information will be used. This notice should be provided at or before the time of collection. The categories we use to describe the information are those enumerated in the CCPA.
We may use any of the categories of information listed above for other business or operational purposes compatible with the context in which the Personal Information was collected.
You have the right to request access to Personal Information collected about you over the past 12 months and information regarding the source of that information, the purposes for which we collect it, and the third parties and service providers with whom we share it. You may submit such a request as described below. To protect our users’ Personal Information, we are required to verify your identity before we can act on your request.
You have the right to request in certain circumstances that we delete any Personal Information that we have collected directly from you. You may submit such a request as described below. To protect our users’ Personal Information, we are required to verify your identity before we can act on your request. We may have a reason under the law why we do not have to comply with your request, or why we may comply with is in a more limited way than you anticipated. If we do, we will explain that to you in our response.
You may submit a request to exercise your rights to know/access or delete your Personal Information by sending us an email at firstname.lastname@example.org.
Only you or your authorized agent may make a verifiable consumer request related to your personal information. If you use an authorized agent to submit a request on your behalf, we may require that you (1) provide the authorized agent written permission to do so, and (2) provide a copy of the authorization or provide a copy of a power of attorney that complies with California Probate Code sections 4000 to 4465 so that we can verify the identity of the authorized agent.
In verifying requests, we employ reasonable measures to detect fraudulent requests and prevent unauthorized access to your personal information. To meet our obligations, we are required to verify your identity, and the identity of your authorized agent, if the request is submitted via an agent, by associating the information provided in your request to personal information previously collected by us.
If we suspect fraudulent or malicious activity on or from the password-protected account, we may decline a request or request that you provide further verifying information.
You may only make a verifiable consumer request twice within a 12-month period. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify your identity or authority to make the request.
You have the right to opt out of any sale of your Personal Information by Graham Holdings to third parties. We do not sell information to third parties.
You have the right to be free from discrimination based on your exercise of your CCPA rights. We do not discriminate against anyone who chooses to exercise their CCPA rights.