Privacy Policy
Last updated: June 13, 2026
This Privacy Policy explains what personal information Tandria collects, how we use and share it, and the rights you have under the LGPD and the CCPA/CPRA.
1. Information we collect
We collect the following categories of personal information:
- Account & identifiers: name, email, password; for paid accounts, tax identifiers where legally required.
- Content you create: the schools, courses, lessons and materials you build, and your interactions inside the platform (posts, messages, events).
- Payment information: processed by our payment provider; we do not store full card numbers.
- Usage & device data: IP address, device and browser type, pages viewed, and product interactions.
- Cookies and similar technologies: see our Cookie Policy.
2. How we use your information
- To provide and operate the platform and its features.
- To run the AI that helps structure your school (see the AI section below).
- To process subscriptions, payments and billing.
- To personalize your experience and recommendations.
- To maintain security, prevent fraud, and meet legal obligations.
- To send service messages and, with your consent where required, product updates (you can opt out anytime).
3. How we share information — categories of third parties
We share personal information only with service providers that help us operate, and only as needed. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the CPRA. Our service providers include:
- Authentication: Clerk (login and account security).
- AI processing: OpenAI (powers the AI that structures schools and generates content from your inputs).
- Hosting & infrastructure: Railway (application hosting), Cloudflare (network, security and content delivery).
- Payments: Stripe (checkout, subscriptions, billing).
- Analytics: Google Analytics (usage measurement).
- Email: SendGrid (transactional and service emails).
- Live video: 100ms (live events and webinars inside schools).
We require these providers to protect your information and use it only to provide services to us.
4. Artificial intelligence and automated processing
Tandria uses AI to help structure your school — proposing positioning, names, identity, and course curricula based on the descriptions you provide. The AI produces suggestions that you review, edit, and approve; you remain in control of the final result. We do not use AI to make legal or similarly significant decisions about you without human involvement. Inputs you provide may be processed by our AI provider (OpenAI) to generate these outputs.
5. Your privacy rights
Depending on where you live, you may have the right to:
- Know and access the personal information we hold about you.
- Correct inaccurate information.
- Delete your information.
- Obtain a portable copy of your information.
- Opt out of sale or sharing — note: we do not sell or share your personal information.
- Limit the use of sensitive personal information — we do not use sensitive personal information for purposes that require this right.
California residents (CCPA/CPRA): you have the rights above and the right not to receive discriminatory treatment for exercising them. To exercise any right, contact us at [email protected]. We will verify your request and respond within the timeframes required by law.
6. Data retention
We keep your personal information while your account is active and as needed to provide the service, then delete or anonymize it unless a longer period is required by law. You may request deletion at any time.
7. Security
We use technical and organizational measures — encryption in transit, access controls, and backups — to protect your information. No method of transmission or storage is fully secure, and we cannot guarantee absolute security.
8. International data transfers
We operate from Brazil and use service providers in other countries. Where your information is transferred across borders, we take steps to ensure it remains protected consistent with this policy and applicable law.
9. Children's privacy
Tandria is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information.
10. Changes to this policy
We may update this policy from time to time. We will post the updated version here and, where appropriate, notify you by email or in the platform.
11. Contact
Questions or privacy requests: [email protected].