Privacy Policy

Last updated October 28, 2026

This policy explains what information Icaro Paiva Guitar Academy keeps about you, why, who can see it, and what you can ask us to do with it. The short version: we only collect what we need to run your lessons, we never sell it, and we don't use advertising or tracking cookies.

Who is responsible for your data

Halen Jolley (the State of Texas, USA) runs Icaro Paiva Guitar Academy and is responsible for your personal data (the "controller"). For any privacy question or request, contact halendfj@gmail.com.

What we collect

Your account: name, email, password (stored only in scrambled, hashed form), the country you live in (and when you confirmed it), and if you add them, your phone number, level, goals and timezone.
Your lessons: bookings, what you'd like to focus on, your teacher's notes and practice suggestions, and your lesson credits.
Messages and files you send to your teacher, including in the lesson room.
Video courses: which course videos you've opened and when, and which you've marked as done.
Purchases: what you bought, when, the price and any discount code. Card details go straight to Stripe; we never see your full card number.
Reviews you choose to write, shown with your first name and last initial.
Teachers: the profile and photo you publish, your hours, and your earnings and payout records.
Basic technical data such as your IP address in our server logs, used to keep the site secure and working.

Video lessons

Lesson calls connect your browser directly to your teacher's. We don't record calls, and the video and sound aren't stored on our servers. To help the two browsers find each other, they briefly contact a connection service (currently run by Google), which sees your IP address but not the call itself. On some strict networks, the call may pass through a relay server in encrypted form.

Why we use it

To provide your lessons and courses (to carry out our agreement with you): your account, bookings, the lesson room, messages, payments and emails about your lessons.
To keep things running well (our legitimate interests): preventing fraud and abuse, fixing problems, and understanding which teachers, courses and gear links are popular, using our own records only.
To meet legal duties: for example keeping payment records for tax and accounting.
Reminder and message emails can be turned off any time in your account settings.

Who can see your information

Your teacher sees your name, email, phone, level, goals, your lessons with them, and your messages with them.
The site owner can see all accounts, lessons, payments and conversations, to run the site, pay teachers, and help sort out problems. We only look at conversations when there's a reason to, such as a complaint.
Other students only see reviews you choose to post.
Services that help us run the site, who may only use your data to provide their service to us: our hosting provider (stores the site and its data), Stripe (payments), our email provider (sends emails) and the call connection service described above.
We never sell your data or share it for advertising.

Cookies

We only use cookies that the site needs to work: one keeps you logged in, and staff accounts have one that remembers which teacher's pages they're viewing. There are no analytics, advertising or tracking cookies, so there's nothing to accept or decline. Our fonts are served from our own site, not a third party.

Transfers outside Europe

Some of the services above are based in, or use servers in, the United States. Where that happens, they're covered by the EU's approved safeguards (the EU–US Data Privacy Framework or Standard Contractual Clauses).

How long we keep it

Your account, messages, files and reviews: while your account is open. You can delete your account yourself under Account (or ask us to), and they're deleted straight away. Lessons and payments stay, without your name or contact details, for teachers' and tax records.
Payment records: as long as tax and accounting law requires (usually up to 10 years).
Server logs and backups: a few weeks, after which they are overwritten.

Your rights

You can ask us to:

give you a copy of your data, or send it to you in a portable format;
correct anything that's wrong (you can also edit most details yourself under Account);
delete your data, or limit how we use it;
stop using it for something you object to.

Contact halendfj@gmail.com and we'll reply within one month. If you're unhappy with how we've handled your data, you can also complain to the data protection authority where you live.

Users in Brazil (LGPD)

If you're in Brazil, Brazil's General Data Protection Law (LGPD) applies. We use your data on the same bases described above: to carry out our agreement with you, for our legitimate interests, and to meet legal duties. Under the LGPD you can ask us to confirm whether we hold your data; give you access to it or a portable copy; correct it; anonymize, block or delete data that isn't needed; tell you who we share it with; and withdraw any consent you've given.

Our data protection contact ("encarregado") is Halen Jolley, reachable at halendfj@gmail.com.
Your data is stored and processed outside Brazil (see the services above), with safeguards the LGPD recognizes for international transfers.
If you're unhappy with how we've handled your data, you can complain to Brazil's data protection authority, the ANPD.

Children

Students under 16 need a parent or guardian to set up their account. If you think a child has signed up without that, please contact us and we'll sort it out.

Changes

If we change this policy in a way that matters, we'll tell you by email or on the site first.