Tutor LK, Privacy Policy

1. Introduction

This Privacy Policy describes how PERCS (PVT) LTD ("we," "our," or "us") collects, uses, and protects information when you use Tutor LK Learning Management System ("the Service"). This policy applies to all users, including students, teachers, administrators, and front-desk staff at institutions that use the Service.

2. Information We Collect

2.1 Personal information

We may collect:

• Name, email address, phone number, and contact details
• Educational institution affiliation, role, and permissions
• Academic records, attendance, payments, and progress data
• Profile information you or your institution provide

2.2 Technical information

• IP address, browser type, and device information
• Session cookies required for login and security
• System logs used for troubleshooting and abuse prevention

3. How We Use Information

• Providing and maintaining the Service
• Authenticating users and managing accounts
• Sending service notifications (e.g. class reminders, OTP login codes) when enabled
• Processing educational and administrative workflows
• Improving security, performance, and user experience
• Complying with legal obligations

4. Sign in with Google

If your institution enables Google Sign-In, we use Google OAuth to authenticate you. Google Sign-In is optional; you may always sign in with your registered email address and password instead.

When you choose Google Sign-In, Google may share the following information with Tutor LK:

• Your name
• Your email address
• A unique Google account identifier
• Basic profile information (such as profile picture, if available)

We use this information only for authentication, to verify your identity and link or create your Tutor LK account. We do not receive your Google password. We do not access Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google services or data beyond what is required for sign-in.

Google user information is never sold or used for advertising. Google's use of your data is governed by Google's Privacy Policy. You can revoke Tutor LK's access from your Google Account security settings.

To request deletion of personal information linked to your account, including data received from Google Sign-In, contact your institution administrator or email us at info@percs.lk.

5. Messaging (WhatsApp & SMS)

When enabled by your institution, we may send transactional messages to phone numbers on file (for example login credentials, class reminders, or payment notices) through third-party messaging providers. Message content is limited to service-related communications.

6. Data Protection and Security

We implement reasonable technical and organizational measures to protect personal information. Your institution is also responsible for managing user access, training staff, and complying with applicable data protection laws.

No online system is completely secure. PERCS (PVT) LTD shall not be liable for unauthorized access caused by factors outside our reasonable control.

7. Data Sharing

We may share information:

• With your educational institution for legitimate administrative and academic purposes
• With service providers that help operate the Service (hosting, email, SMS/WhatsApp, Zoom, payment systems)
• When required by law or to protect rights and safety

We do not sell personal information to third parties for marketing purposes.

8. Data Retention

We retain personal information for as long as needed to provide the Service and meet legal or contractual obligations. Your institution may request deletion subject to applicable record-keeping requirements.

9. Your Rights

Depending on applicable law, you may request access to, correction of, or deletion of your personal information. Contact your institution administrator or email us at info@percs.lk.

10. Cookies

We use essential cookies and session storage to keep you logged in and to protect against cross-site request forgery. You can control non-essential cookies through your browser settings.

11. Children's Privacy

The Service may process information about students, including minors enrolled by educational institutions. Institutions are responsible for obtaining any required parental or guardian consent.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last Updated" date on this page.

13. Governing Law

This Privacy Policy is governed by the laws of Sri Lanka. Disputes shall be subject to the exclusive jurisdiction of the courts of Sri Lanka.

14. Contact