Privacy Policy
Last updated: October 15, 2026 · Version 1.0
1. Who we are
Just Start LA, Inc. is a California corporation. We provide executive function coaching, academic tutoring, group Lock In Hour study sessions and workshops. We operate the website and booking platform at juststartla.com. In this policy, "we", "us" and "our" mean Just Start LA, Inc.
| Company | Just Start LA, Inc., a California corporation |
| Address | 4505 Las Virgenes Road, Suite 107, Calabasas, CA 91302 |
| juststartla@gmail.com | |
| Phone | 818-835-2565 |
| Website | juststartla.com |
We are the only operator that collects or keeps personal information through this site. Send every privacy question, request or complaint to juststartla@gmail.com.
2. The short version
This is a summary. The sections below give the detail, and the detail controls.
- We do not track you. There are no advertising pixels, no analytics tools, no session recorders and no third-party trackers on this site. The one exception is our older client portal page, which loads TutorBird. See Section 6.1.
- We do not sell personal information, and we never have. We do not share it for advertising. We do not run advertising.
- We collect what we need to run a coaching and tutoring business. That is your name and contact details, your student's name, grade and date of birth, what you bought, which sessions you booked, and attendance.
- Coaches write notes on a student record. These are academic and behavioral notes for our staff. You can ask to see them, correct them or delete them.
- We keep technical records when you sign in and when you accept the waiver. These include your IP address and your browser's user agent.
- Payments go to Stripe. We never see or store your card number.
- Children under 13 cannot have an account. A parent or guardian creates the family account and enters the student's information.
- Parents are in control. A parent or guardian can review their child's information, have it deleted, and tell us to stop collecting more.
- You have California privacy rights. Email us and we answer within 45 days.
- We tell you before a material change to this policy takes effect.
3. What we collect
We tell you what we collect when we ask for it. A short notice sits beside each form that asks for personal information. It says what the form collects, why, and how long we keep it, and it links to this page.
3.1 Information from parents and guardians
| Category | What it includes |
|---|---|
| Account details | Your name, email address and whether it is verified, phone number, how you heard about us, your marketing preference, your role on the platform, and your Stripe customer identifier. If you sign in with Google, the profile picture link Google provides. |
| Guardian contacts | The name, email address, phone number and relationship to the student (for example, mother, father or grandparent) of each guardian on a household. We may hold a second guardian's contact details before that guardian has a login. |
| Purchases | The plan you bought, the sessions it includes, membership start and end dates, a record of each session used, returned or adjusted, and refunds. We also store the Stripe identifiers for your customer record, subscription, payment and invoices. |
| Bookings | Which session you booked, the date and time, the coach, the seat, cancellations and the reason, no-show records, standing weekly spots and waitlist entries. |
| Waiver acceptance | The student, the person who accepted, the waiver version, the date and time, your IP address and your browser's user agent. A waiver acceptance is a record of who agreed to what and when, so we keep these technical details with it. |
| Messages to us | If you use the contact form, your first and last name, email address, phone number, the service you ask about and your message. The form sends your message to our email inbox. It does not save it in our database. |
| Workshop registrations without an account | Some workshop registrations and bookings can be made without an account. For these we collect the parent's name and email address, the student's name and grade level, and the payment result from Stripe. |
3.2 Information about students
A parent or guardian gives us this information when they create or edit a student record.
| Category | What it includes |
|---|---|
| Student record | First and last name, grade band, grade, the school year for that grade, date of birth, whether the student is a minor, and an optional student email address and phone number. Date of birth is required for every student. |
| Student login | For a student aged 13 or over who has their own login, a link between the student record and that login. |
| Coaching notes | Notes that coaches and staff write about a student's academic work and habits: what the student is working on, what helped and what did not. |
| Student requests | If a student with their own login asks a guardian to buy a session or a membership, the student's message and the guardian's reply. |
| Invitations | When a guardian invites a student to create a login, the student's email address and a hashed invitation code that expires. |
About coaching notes. Coaching notes are not clinical records. We instruct our staff not to write diagnoses, medications or referrals to clinicians in them. If health information does appear in a note, it is sensitive personal information under California law. Section 9 explains your right to limit how we use it.
3.3 Information we collect automatically
| Category | What it includes |
|---|---|
| Sign-in records | When you sign in, we create a session record with a session token, an expiry time, your IP address and your browser's user agent. A session lasts 30 days unless you sign out first. |
| Sign-in codes and links | You sign in with Google, with a one-time link we email to you, or with a six-digit code. For a link or a code, we store only a hashed version, and it expires after 15 minutes. |
| Google sign-in | If you sign in with Google, we store the sign-in tokens Google issues and their expiry times. We ask Google only for your identity, email address and basic profile. We do not ask for access to your calendar, contacts, files or mail. |
| Hosting logs | Our hosting provider keeps request logs, which include IP addresses. |
| Staff action log | We log what our staff do in the system: who acted, what they did, which record they changed and when. |
We use IP addresses and user agents to keep accounts secure and to tell a real sign-in from an attack. We do not use them to build a profile of you or to find your location.
3.4 Legal categories
California law groups personal information into categories. The information above falls into these categories:
| California category | Examples from this policy |
|---|---|
| Identifiers | Name, email address, phone number, IP address, account and Stripe identifiers |
| Customer records | Contact details, education information such as grade, and payment records |
| Commercial information | Purchases, memberships, bookings and attendance |
| Internet or network activity | Sign-in records, user agent, waiver acceptance technical details, staff action log |
| Professional information | Roles and permissions of our staff and coaches |
| Sensitive personal information | Account sign-in credentials, and any health information that appears in a coaching note |
3.5 What we do not collect
- No advertising or analytics trackers. No third party watches your visit. Our footer links to our own pages on LinkedIn, Instagram, TikTok, YouTube and Facebook. These are plain links. They load nothing on our pages. When you click one, you leave our site and that company's privacy policy applies. The client portal pages load a sign-up and sign-in form from TutorBird. See Section 6.1.
- No card numbers. You enter card details on Stripe's own checkout page. We never receive them.
- No precise location. We do not ask for your device location.
- No biometric information.
- No government identifiers, such as a Social Security number, driver's license number or passport number.
- No session recordings. Virtual sessions run on Google Meet. We do not record them and we do not keep transcripts. Our system is not connected to Google Meet. We show you a join link, and we send Google no roster, booking or attendance record.
- No profiling and no automated decisions. Nothing on this site scores a student or makes a decision about you automatically.
- No purchased data. We do not buy lists or data about you.
4. Where the information comes from
| Source | What we get |
|---|---|
| You | What you type into sign-up, onboarding, booking, profile and message forms. |
| A parent or guardian, about their child | Most student information. A parent or guardian enters their child's name, grade, date of birth and contact details. |
| A student aged 13 or over | A student with their own login can edit their profile, book sessions in a plan the family bought, and send a request to a guardian. |
| Your device | IP address and user agent when you sign in and when you accept the waiver. Request logs at our hosting provider. |
| Google, if you sign in with Google | Your name, email address, profile picture link and sign-in tokens. Nothing else. |
| Stripe | Payment, subscription and invoice status, and the identifiers that link them to your account. Never your card number. |
| Our staff | Coaching notes, attendance and no-show records, and session adjustments with the reason for each. |
5. How we use it
We use personal information only for the purposes in this table.
| Purpose | Information we use |
|---|---|
| Create and run your account | Name, email, phone, Google sign-in details, role, household membership |
| Keep accounts secure | Session token, IP address, user agent, sign-in limits, duplicate account checks |
| Prepare coaches for sessions | Student name, grade band, grade, school year, date of birth, coaching notes |
| Apply our age rules | Date of birth and minor status, so we can apply the rules in Section 7 |
| Take payment and run single sessions and memberships | Stripe identifiers, plan, price, sessions included and used, membership dates |
| Book seats, run waitlists and hold standing weekly spots | Booking records, seats, student and household links |
| Send emails you need | Name, email and booking details, for confirmations, cancellations, reminders, waitlist notices, invitations and receipts |
| Run virtual sessions | We show you the Google Meet join link. We send nothing about you to Google. |
| Record waiver acceptance | Student, accepting user, waiver version, date and time, IP address, user agent |
| Apply our cancellation rules, including refunds of single sessions cancelled in time | Booking record, cancellation time, no-show record, Stripe payment identifier. We charge no cancellation fee and no no-show fee. |
| Answer your questions | What you put in your message |
| Let a student ask a guardian to buy sessions | The student's message, the plan requested, the guardian's reply |
| Support families and fix problems | Staff access to household records, which we log |
| Keep a record of staff actions | Who acted, what they did, which record, when |
| Meet our legal duties | Tax and accounting records, mandated reporting (Section 6), privacy requests, and defense of legal claims |
| Marketing, if we ever send it | Your marketing preference and email address |
Marketing. We do not send marketing email today. If we start, we will send it only to adults who opted in. We will never send it to a student's own email address. Every marketing email will have a working unsubscribe link. Students under 18 do not see the marketing option, and it is always off for them.
We do not use personal information for any other purpose, and we do not keep it for an undisclosed purpose.
6. Who we share it with
6.1 Service providers
These companies run parts of our service for us. Each one may use the information only to provide its service to us.
| Provider | What it does for us | What it receives |
|---|---|---|
| Neon | Hosts our database | The information described in Section 3 |
| Vercel | Hosts the website and application | Request logs, including IP addresses |
| Resend | Sends our transactional email | Name, email address, booking details |
| Stripe | Payments, subscriptions, invoices and the billing portal | The paying guardian's name and email address, and the card details you enter on Stripe's page. We create a Stripe customer record only for the paying guardian, at the first checkout. We never create one for a student. |
| Sign-in with Google, and Google Meet for virtual sessions | For sign-in, your Google account identity only. For Google Meet, only what you give Google when you join. We send Google no booking, roster or attendance record. | |
| Sanity | Manages the content of our public website, including the waiver text | No personal information. We keep family information out of Sanity. |
| TutorBird | Runs our older client portal for families who already use it, on the Client Portal pages | What you enter in its form, and your IP address and browser details when its form loads on those pages. TutorBird runs its own scripts and may set its own cookies there. Its own privacy policy applies to what you give it. |
6.2 Disclosures required by law
- Mandated reporting. Every member of our staff is a mandated reporter under California Penal Code sections 11164 to 11174.3. If a staff member reasonably suspects child abuse or neglect, they must report it. This duty overrides confidentiality.
- Legal process. We disclose information when a subpoena, court order or lawful government request requires it.
- Safety. We disclose information to deal with an emergency that involves a risk of death or serious injury.
- Sale or merger of our business. If the company is sold or merged, records may move to the buyer. The buyer must follow this policy for the information it receives.
6.3 What we do not do
- We do not sell personal information, and we never have. We have never disclosed personal information to anyone for money or other valuable consideration.
- We do not share personal information for cross-context behavioral advertising. We do not run advertising and we have no advertising partners.
- There are no advertising pixels and no third-party analytics on this site. No other company collects information about what you do here, except TutorBird on the Client Portal pages (Section 6.1). No one tracks you from this site to other sites.
We do not sell or share the personal information of anyone, so we do not sell or share the personal information of anyone under 16. We never use a minor's personal information to target minors for marketing of any kind.
6.4 Do Not Track and tracking by other parties
Some browsers send a "Do Not Track" signal. We do not respond to it, because there is nothing for it to turn off. We do not track your activity across other websites.
No other party collects personal information about your activities over time and across different websites when you use our site. TutorBird, on the Client Portal pages only, is covered by its own privacy policy.
7. Children and teens
7.1 Children under 13
Our website and booking platform are not directed to children under 13. They are built for parents and guardians to arrange coaching and tutoring, and for students aged 13 and over to manage their own bookings.
A child under 13 cannot hold an account on our site.
- We ask for date of birth before we create any account. If the person is under 13, we stop the sign-up. We create no account, keep no email record, and create no Stripe customer.
- Our server also refuses any sign-up by a person under 13.
- A parent or guardian cannot invite a student under 13 to have their own login. We check the student's age when the invitation is sent and again when it is accepted.
A parent or guardian provides the child's information. A parent or guardian creates the family account and enters the student's information. The child does not give it to us. Date of birth is required for every student, so we always know whether a student is under 13.
How we use a younger child's information. We use it only to deliver the coaching or tutoring the parent arranged. We do not use it for marketing and we do not use it to build a profile. We share it only with the service providers in Section 6 that we need to deliver the service. We do not ask for more information than the activity reasonably needs.
A parent's rights. A parent or guardian may at any time:
- Review the personal information we hold about their child.
- Have it deleted.
- Refuse further collection or use of it. This may mean we can no longer provide the service.
To make one of these requests, email juststartla@gmail.com from the address on the account, or call 818-835-2565. We verify that you are the child's parent or guardian before we act (Section 9.3). We answer within 45 days.
7.2 Teens aged 13 to 17
A student aged 13 or over may have their own login. A guardian creates the student record and invites the student to claim it.
A teen's login can:
- See their own sessions.
- Book a seat in a membership the family already bought.
- Join a waitlist and set a standing weekly spot.
- Edit their own profile.
- Send a request to a guardian to buy a single session or a membership.
A teen's login cannot pay for anything. Only a guardian can buy. We create Stripe customer records only for paying guardians.
Marketing. We do not send marketing to a student's email address. Students under 18 do not see the marketing option, and it is always off for them.
Removal of content a minor posted. California law gives a registered user under 18 the right to remove, or to ask us to remove, content or information they posted on our site. Our site has no public posting feature: no forum, no public profile and no comment field. If a student under 18 wants something they typed on our site removed, including a message to a guardian, email juststartla@gmail.com. We will remove it from public view and from the student's record. Removal may not be complete or comprehensive. A copy may remain in our backups, in our staff action log, or with a service provider. A copy may also remain where another person posted or republished it.
7.3 What a guardian controls
A parent or guardian manages the household. A guardian can:
- Create and edit a student record, including name, grade, date of birth and contact details.
- See the student's bookings, attendance, no-show records, membership and sessions used.
- Read and correct the coaching notes on the student's record.
- Accept or decline the liability waiver for the student.
- Buy single sessions and memberships, and cancel a membership.
- Invite a student aged 13 or over to have their own login, and remove that login.
- Add or remove a second guardian.
- Ask us to review, correct or delete anything we hold about their child.
Communications with minor students. Communications between our staff and a minor student may be shared with the parent or guardian. No confidentiality privilege applies to them. We are coaches and tutors, not clinicians.
8. How long we keep information
We keep personal information only as long as we need it for the purposes in Section 5. We then delete it.
| Information | How long we keep it | Why |
|---|---|---|
| Account details | 24 months after the later of your last session and your last sign-in | To run your account and let you return easily |
| Guardian contacts | Same as account details | To reach a parent about a student |
| Student records | 24 months after the student's last session | To deliver coaching and let a family resume |
| Coaching notes | 12 months after the student's last session | To help a coach prepare for the next session |
| Information about a child under 13 | Deleted within 30 days after the child's participation ends | We do not keep a young child's information longer than we need it |
| Waiver acceptance records | Until the student's 22nd birthday | To defend a legal claim. A minor's claim can be brought for some time after they turn 18, so we keep these records separately and longer than the student record. |
| Payments, invoices, session records and fees | 7 years after the transaction | Tax, accounting and payment disputes |
| Automatic renewal consent records | 3 years after consent, or 1 year after the membership ends, whichever is longer | Required by California law |
| Bookings, attendance and no-show records | 7 years | They are part of the payment records |
| Sign-in records, including IP address and user agent | 90 days after the session expires | Security and investigation of misuse |
| Google sign-in tokens | Until you disconnect Google sign-in or close your account, whichever is first | To keep you signed in |
| Staff action log | 3 years | To show who changed what |
| Workshop registrations without an account | 12 months after the last booking | To run the workshop and handle follow-up |
| Contact form messages | 12 months after the conversation ends | To answer your question and any follow-up |
| Email delivery records at Resend | Up to 30 days | Delivery troubleshooting |
| Request logs at Vercel | Up to 30 days | Security and availability |
| Marketing opt-out list, if we ever send marketing | Kept indefinitely | So we never contact you again by mistake after you opt out |
When a period ends, we erase the information or make it permanently de-identified.
9. Your California privacy rights
9.1 Your rights
You have these rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:
- Right to know. You may ask what personal information we collected about you, where we got it, why we collected it and who we disclosed it to. You may also ask for a copy. You may ask twice in any 12-month period.
- Right to delete. You may ask us to delete the personal information we hold about you. Some exceptions apply (Section 9.4).
- Right to correct. You may ask us to correct inaccurate personal information.
- Right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of. For this reason there is no "Do Not Sell or Share My Personal Information" link on this site.
- Right to limit use of sensitive personal information. We use sensitive personal information only to provide the service and to keep your account secure. We do not use it to infer things about you. If you want a coaching note removed or restricted, ask us and we will do it.
- Right to equal treatment. We will not refuse you service, charge you a different price or give you a lower level of service because you used a privacy right. We offer no financial incentive for personal information.
- Right to use an authorized agent. Another person may make a request for you (Section 9.3).
9.2 How to make a request
Use any of these:
- Email: juststartla@gmail.com, with "Privacy" in the subject line. Tell us which right you want to use.
- Phone: 818-835-2565.
- Mail: Just Start LA, Inc., 4505 Las Virgenes Road, Suite 107, Calabasas, CA 91302.
For a request about your child, tell us which child. Email from the address on the account if you can.
What happens next:
- We confirm that we received your request within 10 business days.
- We verify your identity (Section 9.3).
- We answer within 45 days after we receive the request. We do not extend this period.
If we cannot do what you ask, we tell you why. We keep a record of each request, our decision and the date.
9.3 How we verify a request
We verify your identity before we act on a request.
- Your own information: we match the request to the email address or phone number on your account.
- A review or correction request about a child: the request must come from an email address that belongs to a guardian or household member on that child's household.
- A deletion request about a child: we need the match above, plus one of these: a reply from the account holder's email address, or a confirmation by phone to the number on file.
- An authorized agent: the agent must give us written permission signed by you. We also verify your identity and ask you to confirm directly that you authorized the agent.
9.4 What we may need to keep
A deletion request may not reach everything. We may keep:
- Records we need to complete a transaction you asked for, or to provide a service you still use.
- Payment and tax records the law requires us to keep.
- Waiver acceptance records, for the period in Section 8.
- The staff action log, which is a security control.
- A marketing opt-out entry, so that we do not contact you again by mistake.
- Information in a backup, until that backup is replaced. We do not restore a backup to bring back information you asked us to delete.
When we delete your information, we also tell our service providers to delete it.
10. Security
We use reasonable administrative, technical and physical measures to protect personal information. These include:
- Our database is encrypted at rest.
- Card numbers never reach us. You enter them on Stripe's own page.
- We keep family information out of our website content system.
- Sign-in attempts are limited, and session cookies are secure.
- Our own cookies have only two purposes. Sign-in cookies keep you signed in for up to 30 days. An age check cookie lasts 24 hours and stops a child under 13 from retrying the sign-up age check. Neither one tracks you or is used for advertising.
- We act on payment messages only when their signature proves they came from Stripe.
- Invitation codes, one-time sign-in links and email codes are stored as hashes and expire after 15 minutes.
- Staff access depends on role, and we log staff actions.
- Our site sends security headers that limit which browser features a page can use and stop other sites from embedding our pages.
Staff access. Our staff can see your household's records. A coach needs this to prepare for a session, and our team needs it to fix a booking problem. To solve a problem, an owner can sign in as a user. We record any action taken this way as a staff action, not as yours.
No system is perfectly secure. We cannot guarantee that an attacker will never get in. If a breach of your unencrypted personal information occurs, we will notify you as California law requires, within 30 calendar days after we discover it.
If you think something is wrong with your account, email juststartla@gmail.com or call 818-835-2565.
Accessibility. We want this site to work with a keyboard and a screen reader. If something on the site blocks you, email juststartla@gmail.com and tell us what happened.
11. Changes to this policy
When we change this policy:
- Any change: we update the "Last updated" date at the top and add a line to the version history below.
- A material change: this is a change to what we collect, why we use it, who we share it with, or how long we keep it. We email the address on your account and post a notice on the site at least 30 days before the change takes effect.
- A change that affects a child's information: if we want to use or disclose a child's information in a materially different way, we ask the parent's consent again first.
If you continue to use the site after a change takes effect, the new version applies to you. A change does not remove any right you already had. It does not apply to information collected before the change in a way that is less protective.
Version history
| Date | Version | What changed |
|---|---|---|
| October 15, 2026 | 1.0 | First published version |
12. Contact us and complaints
| For | Contact |
|---|---|
| Any privacy question or request | juststartla@gmail.com, subject line "Privacy" |
| A request about your child | juststartla@gmail.com. Tell us which child, and email from the address on the account if you can. |
| Phone | 818-835-2565 |
| Just Start LA, Inc., 4505 Las Virgenes Road, Suite 107, Calabasas, CA 91302 |
If you are not satisfied with our answer, tell us first. Email juststartla@gmail.com with "Privacy complaint" in the subject line and tell us what we got wrong. We will look at it again and reply.
You may also contact:
- The California Privacy Protection Agency, at cppa.ca.gov.
- The California Attorney General, at oag.ca.gov/contact/consumer-complaint-against-business-or-company.
- The Federal Trade Commission, at reportfraud.ftc.gov.
Nothing in this policy waives any right you have under California or federal privacy law.