Privacy Policy

Orleao ("we", "our", "the Platform") is an online English language learning platform operated by Orleao Ltd., connecting students in Latin America and beyond with qualified English teachers. Orleao is accessed at orleao.com and related subdomains.

This Privacy Policy applies to every part of the platform that links to it. By creating an account or using Orleao, you agree to the practices described here. If you do not agree, please do not use the platform.

Orleao is incorporated and operates under the laws of Canada. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), Peru's Ley N.º 29733 de Protección de Datos Personales, and comparable data protection laws in the other countries where our students live.

• •Students are the people who buy and attend lessons on Orleao.
• •Guardians are the parents or legal guardians who create and control an account on behalf of a student under 18.
• •Teachers are the independent contractors who deliver lessons through the platform. They are not employees of Orleao.
• •Personal information means any information that identifies you or can reasonably be linked to you.
• •Services means the Orleao website, applications, lessons, and everything we offer through them.

Information you give us

• •Account data — your name, email address, phone number, password, country, and preferred language and currency.
• •Profile data — anything you choose to add to your profile, including your learning goals and level.
• •Lesson data — the teachers you book, your schedule, attendance, package and credit balance, and any transfers between teachers.
• •Communications — messages you exchange with teachers or with our team, reviews you write, and support requests.
• •Teacher onboarding data — for teachers only: government-issued ID, qualifications, work history, and payout details, collected to verify identity and pay you.

Payment information

All payments are processed by Stripe. Orleao never sees or stores your full card number. We keep a record of each transaction — amount, currency, date, the last four digits of the card, and the billing country — so we can handle refunds, credits, and accounting.

Information collected automatically

• •Device and browser type, operating system, and screen size.
• •Approximate location derived from your IP address, used to set your default currency and timezone.
• •Pages viewed, searches run, and features used, so we can understand how the platform is working.

What we do not collect

• •We do not record lessons, and we do not store lesson video or audio.
• •We do not knowingly collect sensitive information such as health, religious, or political data. Please do not share it with us.
• •We do not sell your personal information, and we never have.

Orleao is designed for adults. A person under 18 may use the platform only with the express permission of a parent or legal guardian, who must create the account, provide consent, and remain responsible for it. Users under the age of 13 are not permitted to use Orleao.

A guardian who consents on behalf of a minor may, at any time, review the personal information we hold about that minor, ask us to correct it, withdraw consent to further collection, or ask us to delete the account entirely. Write to hola@orleao.com and we will verify your identity before acting on the request.

• •To create and manage your account and keep you signed in.
• •To help you find a teacher, book lessons, and manage your schedule, credits, and package transfers.
• •To process payments, issue refunds, and apply the cancellation policy set out in our Terms.
• •To send transactional messages — booking confirmations, reminders, receipts, password resets, and notices about changes to our policies.
• •To provide customer support and resolve disputes between students and teachers.
• •To send marketing emails about lessons, teachers, and offers, where you have not opted out.
• •To verify teacher identity and credentials, and to detect and prevent fraud, abuse, and off-platform solicitation.
• •To understand how the platform is used in aggregate so we can improve it.
• •To comply with legal, tax, and accounting obligations.

Where a legal basis is required, we rely on: performance of our contract with you (delivering lessons and payments), your consent (marketing email and, for minors, guardian consent), our legitimate interests (safety, fraud prevention, and improving the service), and compliance with legal obligations.

We share personal information only in the circumstances below. We do not sell it, and we do not share it with advertising networks.

• •With teachers — your name, profile, lesson history with them, and your messages, so they can teach you. Teachers are independent contractors and are contractually prohibited from contacting you off-platform or using your information for anything other than delivering lessons.
• •With service providers — Stripe for payments, our email service provider for transactional and marketing email, and our hosting, analytics, and customer support providers. Each is bound by contract to use your information only on our instructions and to keep it secure.
• •For legal and safety reasons — where we are required to by law, or where disclosure is necessary to investigate fraud, protect the safety of a student or teacher, or enforce our Terms.
• •In a business transfer — if Orleao is involved in a merger, acquisition, or sale of assets, your information may transfer to the successor, who will remain bound by this policy.
• •With your consent — for anything else, we will ask first.

Lessons are delivered through third-party video conferencing tools. Orleao does not record lessons and does not store any lesson video or audio. The video provider processes the call under its own privacy policy, and we encourage you to read it.

Neither students nor teachers may record a lesson without the other party's explicit consent. Recording without consent is a breach of our Terms and may lead to account suspension.

We use essential cookies to keep you signed in and to remember your language, currency, and timezone. Without them the platform cannot function. We also use a small number of analytics cookies to understand, in aggregate, which pages people visit and where they get stuck.

You can clear or block cookies in your browser settings. Blocking essential cookies will prevent you from logging in.

We do not use advertising pixels or cross-site tracking technologies, and we do not participate in interest-based advertising.

Transactional email — booking confirmations, receipts, reminders, and policy notices — is part of the service and cannot be switched off while your account is active.

Marketing email is sent through a third-party email marketing provider and is optional. Every marketing message includes an unsubscribe link, and you can also write to hola@orleao.com to be removed. Unsubscribing does not affect your lessons or credits.

Orleao is operated from Canada. Your personal information may be transferred to, stored in, and processed in Canada, the United States, and other countries where our service providers operate. Data protection laws in those countries may differ from those in your country of residence.

Wherever your information travels, we require our providers by contract to protect it to a standard consistent with this policy and with PIPEDA. By using Orleao you consent to these transfers.

• •Account and profile data — for as long as your account is active, and for 24 months after closure in case you return.
• •Transaction and tax records — 7 years, as required by Canadian financial and tax law.
• •Lesson credits and purchase history — credits expire 12 months after purchase under our Terms; the record of the purchase is kept with our transaction records.
• •Support and dispute correspondence — 24 months after the matter is closed.
• •Marketing preferences — until you unsubscribe, plus a permanent suppression record so we do not email you again by mistake.

When a retention period ends we delete the information or irreversibly anonymise it.

Wherever you live, you can ask us to do the following with the personal information we hold about you:

• •Access — get confirmation of what we hold and a copy of it.
• •Correct — fix anything inaccurate or incomplete. Most of this you can do yourself in Account Settings.
• •Delete — close your account and have your information erased, subject to records we are legally required to keep.
• •Withdraw consent — stop marketing email, or, for guardians, withdraw consent for a minor's account.
• •Object or restrict — ask us to stop or limit a particular use of your information.
• •Portability — receive your information in a portable, machine-readable format.
• •Complain — raise a concern with your national data protection authority.

How to exercise a right

Write to hola@orleao.com with the request and the email address on your account. We will verify your identity before acting, and we will respond within 30 days. There is no charge unless a request is manifestly excessive or repetitive.

Your regulator

• •Canada — Office of the Privacy Commissioner of Canada (priv.gc.ca).
• •Mexico — INAI, which also administers your ARCO rights (Acceso, Rectificación, Cancelación, Oposición) under the LFPDPPP.
• •Peru — Autoridad Nacional de Protección de Datos Personales, under Ley N.º 29733.
• •Elsewhere in Latin America — your national data protection authority. Write to us and we will point you to the right office.

We encrypt data in transit, restrict internal access to the people who need it to do their jobs, and rely on Stripe's PCI-compliant infrastructure so that card details never touch our systems.

No method of transmission or storage is completely secure. Please protect your account by choosing a strong, unique password and never sharing it. If you believe your account has been accessed without your permission, tell us immediately.

If a breach occurs that creates a real risk of significant harm, we will notify affected users and the relevant regulators without undue delay, as PIPEDA and equivalent local laws require.

We may update this Privacy Policy from time to time. When we make material changes we will notify you by email and by posting a notice on the platform at least 14 days before the changes take effect. The date at the top of this page always shows when it was last updated.

Your continued use of Orleao after the effective date means you accept the revised policy.