Privacy Policy

Introduction

Zion English ("we", "us", or "our") operates the Zion English Admin Portal, an internal management system for ESL teaching operations. This Privacy Policy explains how we collect, use, store, and protect information when authorized teachers and administrators use the portal.

Information We Collect

We collect information necessary to operate the admin portal, including:

• Teacher accounts: name, email address, password (stored hashed), profile details, uploaded documents and avatars, and optional Zoom or Google Calendar OAuth tokens when a teacher connects those integrations.
• Student records: names, contact details, rates, currency, status (active or inactive), and assigned teachers.
• Class and schedule data: class dates, times, duration, status (conducted, cancelled, or rescheduled), and related notes.
• Sheet processing: Google Sheet URLs provided by teachers and the class data extracted from those sheets for payroll processing.
• System logs: audit logs of user actions and processing logs for sheet imports.
• Affiliate product imports (superuser): Shopee affiliate batch CSV filenames, file sizes, and product metadata from those files (names, prices, shop names, product links, and offer links). Commission fields in the CSV are stored for internal admin use only and are not shown on public product cards.
• Session data: a secure HttpOnly cookie (session_token) used to keep you signed in.

Affiliate Links and Product Images

The portal may display Shopee affiliate product recommendations with an "Affiliated" label, including compact placements configured by superusers (for example top, side, or bottom slots on portal pages). Product images may be loaded from Shopee content delivery networks when you view those cards. Clicking a product opens a third-party Shopee page using an affiliate (offer) link. We do not sell your personal data through these links. Affiliate commissions may be earned by the developer to help support operation and maintenance of the system.

How We Use Information

We use collected information to:

• Authenticate users and enforce role-based access (superuser or teacher).
• Manage students, teachers, classes, and schedules.
• Process class sheets from Google Drive and generate payroll exports.
• Create Zoom meetings when teachers have connected Zoom and schedule classes that require a meeting room.
• Create Google Calendar events when teachers have connected Google Calendar and schedule classes with a start time.
• Maintain audit trails for accountability and troubleshooting.
• Send in-app announcements and notifications to authorized users.

Third-Party Services

The portal integrates with third-party services that may process data on our behalf:

• Google Drive / Google Sheets: Teachers provide sheet URLs; class data is downloaded from Google for processing. Use of Google services is subject to Google's privacy policies.
• Zoom: Teachers may optionally connect Zoom via OAuth to enable automatic meeting creation. Zoom's use of data is governed by Zoom's privacy policy.
• Google Calendar: Teachers may optionally connect Google Calendar via OAuth to sync scheduled classes to a dedicated Zion English calendar. Google's use of data is governed by Google's privacy policy.

We do not sell personal information to third parties. See Sharing, Transfer, and Disclosure of Google and Zoom User Data below for who may receive Google or Zoom user data obtained through these integrations.

Sharing, Transfer, and Disclosure of Google and Zoom User Data

This section describes how we share, transfer, or disclose Google user data and Zoom user data collected when teachers connect Google Calendar or Zoom, or when teachers provide Google Sheet URLs for payroll processing.

Google user data we handle

• Google Calendar (OAuth): Google account email address, OAuth access and refresh tokens, and calendar events created or updated in a dedicated Zion English calendar (event title, date, time, and duration tied to scheduled classes).

Zoom user data we handle

• Zoom account user ID, OAuth access and refresh tokens, and meeting details created through the portal (meeting ID, join URL, passcode, topic, start time, and duration tied to scheduled classes).

With whom we share, transfer, or disclose this data

• Google (Google LLC): We transfer Google user data to Google only as needed to operate the integrations: OAuth authentication, creating and managing calendar events in the teacher's Google account, and downloading sheet data from URLs teachers provide. Google's handling of data is governed by Google's Privacy Policy.
• Zoom (Zoom Video Communications, Inc.): We transfer Zoom user data to Zoom only as needed to operate the integration: OAuth authentication and creating, updating, or deleting meetings on the teacher's Zoom account. Zoom's handling of data is governed by Zoom's Privacy Policy.
• Zion English administrators: Authorized superusers may access operational data related to these integrations, such as connection status, class schedules, and Zoom meeting links, to manage teaching operations and provide support within the organization.

We do not sell, rent, or share Google or Zoom user data with advertisers, data brokers, or other third parties for their own purposes. We do not use Google or Zoom user data for advertising, creditworthiness, or lending decisions.

Google OAuth tokens are encrypted and stored in the portal database on infrastructure controlled by Zion English. Zoom OAuth tokens are encrypted and stored the same way. We disclose or transfer Google or Zoom user data only to the parties listed above and only to provide the portal's teaching-operations features described in this policy.

Zion English Admin's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data Storage and Security

Data is stored in a SQLite database on servers we control. Access to the portal is restricted to authorized users with valid credentials. Passwords are hashed; session tokens are signed and transmitted via secure cookies. While we take reasonable measures to protect information, no system is completely secure.

Data Retention

We retain operational data for as long as needed to support Zion English's teaching operations, comply with legal obligations, and resolve disputes. Logs may be retained for auditing and troubleshooting purposes.

Your Rights

Authorized users may request access to or correction of their account information through Zion English administrators. If you believe your data has been handled incorrectly, contact us using the details below.

Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when the policy was last revised. Continued use of the portal after changes constitutes acceptance of the updated policy.

Contact

For privacy questions or technical support related to the admin portal, contact InnovaTech at itservices.innovatech@gmail.com.