Privacy Policy
Effective date: August 22, 2026
STAFFS Prep, LLC ("STAFFS Prep," "we," "us," or "our") provides test-preparation, tutoring, scheduling, and related educational services. This Privacy Policy explains how we collect, use, store, protect, share, and delete personal information when you use staffsprep.com and our related applications and portals.
Information we collect
Depending on how you use our services, we may collect information you provide, such as your name, email address, telephone number, school, grade, account credentials, tutoring or course selections, scheduling information, communications, test-preparation activity, and transaction-related information. Payment-card details are processed by our payment providers and are not stored in full by STAFFS Prep.
We may also collect device, browser, IP address, cookie, and usage information needed to operate, secure, diagnose, and understand use of our services.
Google user data: raw data we access, collect, and store
A tutor may optionally connect a Google Account and select calendars that should affect tutoring availability. When a tutor enables this feature, STAFFS Prep requests read-only access to the tutor’s Google Calendar list and events.
The raw Google user data the application accesses is limited to: the connected account email; calendar identifier and display name; whether a calendar is primary and whether the tutor selected it; and, for events on selected calendars, the event identifier, title, start and end time, status, transparency, and the connected user’s own response status when needed to exclude events the tutor declined.
From that raw data, STAFFS Prep stores the connected account email; encrypted OAuth access and refresh tokens; encrypted and hashed calendar identifiers; calendar display names and primary/selected settings; one-way event identifier hashes; encrypted event titles; event start and end times converted to Eastern time; synchronization status and timestamps; and a tutor’s decision to override a particular slot conflict. Raw event identifiers are not stored.
STAFFS Prep does not request, collect, or store Google Calendar event descriptions, locations, conference or meeting links, organizers, attachments, or other attendees’ names, email addresses, or response details for this feature.
How we use raw and derived Google user data
We use the raw and stored Google Calendar data solely to:
- let the connected tutor choose which calendars affect availability;
- identify tutoring time slots that overlap a busy event;
- show the event title and source calendar privately to the authenticated tutor so the tutor can decide whether to override a conflict; and
- prevent students from booking non-overridden conflicting time slots.
The only student-facing derived result is whether a particular tutoring slot is available. Students and the public are never shown a tutor’s connected account email, calendar identifiers or names, event titles, event times, or the reason a slot is unavailable.
STAFFS Prep does not create or retain aggregated or anonymized datasets derived from Google user data. We do not combine Google Calendar data across tutors for analytics, audience measurement, benchmarking, advertising, artificial-intelligence or machine-learning training, or any purpose unrelated to the connected tutor’s scheduling. The per-slot available/unavailable result is used only to operate the booking calendar and is not retained as a separate analytics dataset.
Google Calendar data storage and security
OAuth access and refresh tokens, calendar identifiers, and event titles are encrypted at rest. Calendar and event identifiers are also represented by one-way hashes where matching is required. Busy start and end times, connected account email, and calendar display names are stored in the application database so availability can be checked reliably. Google user data is transmitted using HTTPS.
Access is limited by role and purpose. Event titles and calendar names are available only to the authenticated tutor whose Google Account is connected. Authorized STAFFS Prep personnel may access specific Google user data only with that tutor’s explicit consent for a specific support request, when necessary to investigate a security incident, or when required by law. We use authentication, access controls, encryption, least-data collection, and operational monitoring designed to protect the data. No method of transmission or storage is completely secure.
Retention, disconnection, and deletion
OAuth tokens, the connected account email, calendar-source records, and calendar selection settings are retained while the tutor keeps the Google Calendar connection active. The event cache is limited to a rolling scheduling window from 14 days in the past through 180 days in the future. On each successful synchronization, the prior busy-event cache for selected calendars is deleted and replaced with data from that rolling window. Conflict overrides are retained only while the connection remains active and the related tutoring slot remains relevant.
When a tutor uses the portal’s Disconnect function, STAFFS Prep deletes the stored Google OAuth tokens, connected account email, calendar identifiers and display names, selected calendar sources, cached event hashes, encrypted event titles, busy periods, synchronization metadata, and associated conflict overrides from the active application database.
A tutor can revoke STAFFS Prep’s future access from the Google Account permissions page. Revocation stops further Google API access, but to ensure locally cached data is deleted the tutor should also use Disconnect or contact contact@staffsprep.com. We also accept requests to access, correct, or delete connected Google user data at that address, subject only to applicable legal requirements.
How we use other personal information
We use personal information to provide and support tutoring and educational services, authenticate accounts, process registrations and transactions, communicate about services, maintain safety and security, prevent fraud, comply with legal obligations, and improve the reliability and user experience of our services.
Sharing and disclosure
We do not sell Google user data. We do not use Google user data for advertising, retargeting, credit decisions, data brokerage, or training artificial-intelligence or machine-learning models. We do not share raw, derived, aggregated, or anonymized Google user data with advertisers, data brokers, analytics providers, other tutors, students, schools, or the public.
Google user data may be processed by our cloud hosting, database, and security/operations service providers only as necessary to host, transmit, back up, protect, or troubleshoot the scheduling feature. These providers act on our behalf and are subject to applicable confidentiality, security, and use restrictions. We may also disclose data to legal authorities if required by law or necessary to protect rights, safety, or application security. Other than those service-provider and legal disclosures, Google user data is not transferred to third parties.
Other personal information may be shared with service providers that support hosting, communications, analytics, payment processing, security, and business operations; with professional advisers; in connection with a business transaction; or when required to comply with law, enforce agreements, or protect rights and safety.
Google API Limited Use
STAFFS Prep affirms that its use and transfer of raw or derived user data received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Children’s privacy
We do not knowingly collect personal information directly from children under 13 without appropriate parental or guardian involvement. If you believe a child under 13 provided personal information without appropriate authorization, contact us so we can review and delete it as appropriate.
Your choices and rights
You may update certain account information through the applicable portal, disconnect Google Calendar through the employee portal, revoke Google access through Google, and contact us to request access, correction, or deletion where applicable. Rights vary by jurisdiction and may be subject to legal exceptions.
Changes to this policy
We may update this Privacy Policy as our services or legal obligations change. We will post the updated policy here and revise the effective date. If we materially change how connected Google user data is used, we will provide an appropriate notice and request additional consent when required.
Contact us
Questions or privacy requests may be sent to contact@staffsprep.com.