Privacy Policy

Last updated: 1 September 2026

This document is a template prepared for Adesso Italian. It must be reviewed by a qualified legal professional before the service is offered to the public.

This policy explains which personal data we process when you use Adesso Italian, why we process it and which rights you have under the EU General Data Protection Regulation (GDPR).

1. Data controller

The data controller is the tutor operating Adesso Italian (Elio, Venice, Italy). You can contact the controller at hello@adessoitalian.com.

2. Data we collect

Account data: name, email address, password (hashed), preferred language and timezone, country.

Learning profile: your Italian level, goals, interests and lesson preferences, plus lesson notes and homework written by the tutor.

Booking data: lessons booked, cancelled or moved, attendance and credit balance.

Billing data: billing name and address, VAT/tax identifiers if you request invoices. Card details are handled exclusively by Stripe and never reach our servers.

Messages: the text you exchange with the tutor in the in-app chat.

Technical data: IP address, browser type and security logs, needed to run the service safely.

3. Purposes

Providing the service: creating your account, scheduling lessons, running video lessons, delivering messages and notifications.

Billing: processing subscription payments and issuing receipts and invoices.

Security and abuse prevention: authentication, rate limiting, audit logs.

Communication: transactional emails (confirmations, reminders, payment notices) and, only with your consent, occasional news.

4. Legal bases

Performance of a contract (Art. 6.1.b GDPR) for account, lessons, messaging and billing.

Legal obligation (Art. 6.1.c) for accounting and tax records.

Legitimate interest (Art. 6.1.f) for security, fraud prevention and service improvement.

Consent (Art. 6.1.a) for marketing emails, which you can withdraw at any time from Settings.

5. Processors and recipients

We rely on carefully selected service providers acting as processors under data-processing agreements:

Supabase (database, authentication and file storage) · Stripe (payments, receipts and invoices) · LiveKit (video lessons) · Resend (transactional email) · Vercel (hosting).

Some providers may process data outside the European Economic Area under Standard Contractual Clauses or an adequacy decision.

We never sell personal data.

6. Retention

Account and learning data are kept for as long as your account is active. When you delete your account, personal data is anonymised within 30 days.

Payment and invoicing records are kept for the period required by Italian tax law (currently 10 years).

Read notifications, processed webhook events and deleted messages are purged automatically after the retention windows configured for the service (by default 180, 90 and 30 days respectively).

7. Your rights

You can access, rectify, export (portability) and erase your data, restrict or object to processing, and withdraw consent at any time. Most requests can be completed directly from Settings (download my data, delete account) or by writing to hello@adessoitalian.com.

You also have the right to lodge a complaint with a supervisory authority; in Italy this is the Garante per la protezione dei dati personali.

8. Cookies

We use only technical cookies that are strictly necessary: session cookies for authentication and small preference cookies for language and theme. We do not use advertising or third-party analytics cookies, so no cookie banner is required.

9. Contact

For any question about this policy or your data, write to hello@adessoitalian.com.

Back to home