WP Tutoring Privacy Policy
Effective Date: July 8, 2026 Last Updated: October 15, 2026
This Privacy Policy explains how ByRivers Tech LLC (d/b/a WP Tutoring) ("Company," "we," "us") collects, uses, shares, and protects personal information when you use the WP Tutoring website, applications, and services (the "Service"). By using the Service you agree to this Policy.
1. Information We Collect
You provide:
- Account data — name, email address, password (stored hashed), and optional profile details.
- Billing data — plan, transaction history, and billing address. Payment card details are collected and processed directly by our payment processor ([PAYMENT PROCESSOR, e.g., Stripe]); we never store full card numbers.
- Communications — support requests, feedback, survey responses, and any content you submit (e.g., comments or questions).
Collected automatically:
- Usage data — courses viewed, tutorial and demo progress, quiz results, feature usage, timestamps.
- Device/log data — IP address, browser type, operating system, referring pages, and error/diagnostic logs.
- Cookies and similar technologies — session cookies for sign-in and security (essential), plus analytics cookies as described in Section 6.
We do not knowingly collect data from children under 16; the Service is not directed to children. If you believe a child provided us data, contact us and we will delete it.
2. How We Use Information
We use personal information to:
- provide, operate, and secure the Service, including authentication, progress tracking, and sandbox/demo session management;
- process subscriptions, payments, and refunds, and prevent fraud and abuse;
- respond to support requests and communicate service notices;
- improve the Service, including analyzing which tutorials and features are used and where users get stuck;
- send marketing emails about new courses or features only with your consent or as permitted by law — every marketing email includes an unsubscribe link;
- comply with legal obligations and enforce our Terms of Service and Acceptable Use Policy.
Where the GDPR or similar laws apply, our legal bases are: performance of our contract with you; our legitimate interests in operating, securing, and improving the Service; your consent (which you may withdraw); and compliance with legal obligations.
3. What We Do NOT Do
- We do not sell your personal information.
- We do not share your personal information with third parties for their own targeted advertising.
- We do not use your support requests or submissions to train third-party AI models without your consent.
4. Sharing
We share personal information only with:
- Service providers acting on our instructions — hosting and infrastructure, payment processing, email delivery, analytics, and customer support tooling — bound by confidentiality and data-protection obligations;
- Legal and safety recipients when required by law, subpoena, or to protect the rights, safety, or property of the Company, our users, or the public;
- Business transfers — a successor in a merger, acquisition, or sale of assets, subject to this Policy.
5. International Transfers
We are based in the United States and process data there. If you access the Service from outside the U.S., you understand your data will be transferred to and processed in the U.S. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for transfers from the EEA/UK.
6. Cookies and Analytics
Essential cookies are required for sign-in, security, and session state. We use Google Analytics to understand aggregate usage. We also use the Meta Pixel (Facebook) on the Service to measure whether our advertising leads to free sign-ups and purchases; it may set cookies and share limited device and event data (such as a page view or a completed sign-up) with Meta Platforms, Inc., which Meta may use according to its own privacy policy. You can opt out of Meta’s ad personalization in your Facebook ad settings. Where required by law, non-essential cookies are set only after you consent via our cookie banner, and you can withdraw consent at any time. Most browsers also let you block or delete cookies; blocking essential cookies may break sign-in.
7. The Training Videos Plugin and the MainWP Extension
This section covers two pieces of software you install on WordPress sites you run: the Training Videos plugin (the "plugin") and the Training Videos for MainWP extension for the MainWP Dashboard (the "extension"). Both talk to our licensing service at app.wp-tutoring.com. Neither one sends us the names, email addresses, or accounts of the people who log in to your sites, and neither one records which lessons anyone watches.
What the plugin sends us:
- The site's address (its WordPress home URL) and the plugin's version number, when it activates or verifies a license key, refreshes the lesson catalog, checks for or downloads a plugin update, or releases a key.
- Whether the site is part of a WordPress multisite network (yes or no), when it activates. We use this only to decide which license slot the site takes; we do not store it.
- A license key to prove the site is licensed: the private license key on a site licensed directly, or the site's own domain-locked public key on a site managed through MainWP, which also checks its license with us once a day. We store only a one-way hash of private keys.
- When a lesson plays, the viewer's browser loads our video player from app.wp-tutoring.com, and the player's address includes the site's public key and address. Like any web request, it also carries the viewer's IP address and browser details. The video then streams from our video-hosting provider.
What the extension sends us from your MainWP Dashboard:
- Your license key, with each request, to authenticate.
- The address of each client site you deploy to, so we can register it against your license, issue its domain-locked key, and create a one-time link for that site to download the plugin. When a client site reports that it is part of a multisite network, the extension passes that on as well.
- Your Dashboard's own address, when it checks your key. This check does not use one of your license slots.
- Which courses and lessons you have hidden for each client site, so our player enforces your choices.
- The extension's version number. WordPress's standard web requests also identify the Dashboard's WordPress version and address.
What we store about your sites: for each registered site, its address (the hostname, plus the path for a site installed in a subdirectory), its public key, when it was registered, the plugin version it last reported and when, whether it was set up through MainWP or directly, and the courses and lessons hidden on it. For each one-time plugin download link we keep the site it was made for, when it expires, and, once it is used, the IP address and user agent of the server that used it. Releasing a site (from your account, with the plugin's "Remove this key" button, or with Remove in the extension) deletes its registration and its hidden-lesson list. Our servers also keep the device and log data described in Section 1.
What stays on your own sites and is not sent to us:
- On each site with the plugin: the license key (encrypted), the site's public key, the account name, plan, and features our service returned, the cached lesson catalog, which lessons are hidden, which users may watch, and any logo or videos of your own you add. Deleting the plugin removes these from the site.
- On your MainWP Dashboard: your license key (in MainWP's encrypted key store, or as a WordPress setting if that store is not available), your account summary, the cached catalog, your default and per-site settings, the business name, support link, support message, and logo address you enter, your own video list, and a log of the extension's last 50 actions. Deleting the extension from the Plugins screen removes these from the Dashboard. Client sites keep the plugin and their last settings until you remove it from them.
- Settings the extension sends to client sites travel over MainWP's own connection between your Dashboard and each site. They do not pass through us.
Content you add from elsewhere: logos and videos of your own (from YouTube, Vimeo, Wistia, Loom, or a direct file link) load in the viewer's browser from wherever they are hosted, under that provider's own privacy terms. We do not receive or store them.
8. Retention
We keep personal information for as long as your account is active and as needed for the purposes above. After account deletion, we delete or anonymize personal information within [90] days, except records we must retain for legal, tax, billing-dispute, or security purposes, which are kept only as long as required.
9. Security
We use reasonable technical and organizational safeguards, including encryption in transit (TLS), hashed passwords, access controls, and tenant isolation. No system is perfectly secure; you are responsible for keeping your credentials confidential. If a breach affecting your personal information occurs, we will notify you and regulators as required by law.
10. Your Rights
Depending on your location (e.g., EEA/UK GDPR; California CCPA/CPRA; other U.S. state privacy laws), you may have rights to: access a copy of your personal information; correct it; delete it; port it; object to or restrict certain processing; opt out of marketing; and not be discriminated against for exercising these rights. Where processing is based on consent, you may withdraw it at any time.
To exercise any right, email service@wp-tutoring.com from your account email or use in-app account settings. We will verify and respond within the time required by applicable law. EEA/UK residents may also lodge a complaint with their supervisory authority; California residents may use an authorized agent.
We do not sell or "share" (as defined by the CPRA) personal information, so no "Do Not Sell or Share" opt-out is required; we honor Global Privacy Control signals where legally required.
11. Changes to This Policy
We may update this Policy from time to time. Material changes will be announced by email or in-app notice and by updating the date above. Continued use after the effective date constitutes acceptance.
12. Contact
ByRivers Tech LLC (d/b/a WP Tutoring) 9565 Cliffdale Rd. #167, Fayetteville, NC 28304 Email: service@wp-tutoring.com