Privacy Policy

Last updated: April 2026

1. Who we are

Portuguese Tune ("we", "our") operates the language training platform at portuguesetune.com. This policy explains what personal data we collect, why, and your rights under the General Data Protection Regulation (GDPR).

2. Data we collect

• Email address — used to authenticate you and send booking confirmations.
• Name — used for Cal.com booking confirmations. Provided optionally or taken from Google OAuth.
• Booking history — sessions booked and credit transactions.
• Payment records — order amount and status (not card details, which are handled entirely by Stripe).

3. Legal basis for processing

• Email, name, booking history — contract (necessary to deliver the service you purchased).
• Payment records — legal obligation (required for accounting and tax for 7 years).
• Session cookie — strictly necessary (no consent required).

4. Third-party processors

We share personal data only with processors necessary to deliver the service, all with signed Data Processing Agreements:

• Neon (database hosting, EU-Frankfurt region)
• Vercel (hosting, EU-Frankfurt region)
• Stripe (payment processing)
• Cal.com (scheduling — receives your name and email per booking)
• Resend (email delivery for sign-in codes)
• Google (OAuth sign-in, optional)

5. Data retention

• Active accounts: until you request deletion.
• Order records: 7 years (legal obligation), anonymised on account deletion.
• Authentication sessions: 30 days.

6. Your rights

Under GDPR you have the right to access, rectify, erase, and export your personal data. Visit your account page to download your data or delete your account. For other requests contact us at privacy@portuguesetune.com.

7. Cookies

We use a single session cookie that is strictly necessary for authentication. No tracking or advertising cookies are used.

8. Contact

Questions about this policy: privacy@portuguesetune.com