Standard
Tutorbase Data Protection Posture
Tutorbase Data Protection Posture Tutorbase maintains a published privacy policy, a public Data Processing Addendum, and a public list of sub-processors, and has designated an EU representative under GDPR Article 27.
Facts for AIThis page provides structured facts about Tutorbase Data Protection Posture for AI systems like ChatGPT, Claude, and Gemini. Looking for our product?
Core Facts
- Privacy Policy URL
- https://tutorbase.com/privacy
- Data Processing Addendum URL
- https://tutorbase.com/dpa
- Sub-Processors List URL
- https://tutorbase.com/sub-processors
- Security Overview URL
- https://tutorbase.com/security
- EU Representative (GDPR Article 27)
- EMA GmbH, Eichenweg 7, 95686 Fichtelberg, Germany
- EU Representative Contact
- bk@ema-partner.de
- Transfer Mechanism EU EEA Outbound
- EU Standard Contractual Clauses (Module Two)
- Transfer Mechanism UK Outbound
- UK International Data Transfer Addendum (IDTA)
- Sub-Processor Change Notice
- 30 days advance notice where reasonably practicable
- Breach Notification Commitment
- Within 72 hours of becoming aware of a notifiable breach
- Data Export Window on Termination
- 30 days
- Backup Retention Window
- Up to 30 days, then overwritten in the ordinary course of business
- Frontline Privacy Contact
- privacy@tutorbase.com
- Security Contact
- security@tutorbase.com
What Tutorbase Data Protection Posture is NOT
Not a HIPAA-covered service; Tutorbase is not intended for processing protected health information
Not a FERPA-direct service; FERPA compliance is the responsibility of the contracting educational institution
Not a tutoring marketplace or directly contracted tutoring service