Last updated: 17 June 2026
Nefdak Hub (“Nefdak”, “we”, “us”, or “our”) operates the online learning marketplace at https://hub.nefdak.com (the “Platform”), which connects independent instructors with students for one-to-one live online tutoring sessions. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It also describes, in detail, how we access and use data from Google services.
Who we are
Nefdak Hub is an educational marketplace operated for the Nefdak project. You can contact us at [email protected] regarding any privacy question or request.
Information we collect
- Account information you provide when you register: name, email address, phone number, country, role (student or instructor), and, for instructors, professional details and documents you choose to upload.
- Course and booking information: courses you create or enrol in, the sessions you schedule, and related scheduling details.
- Payment information: payments are processed by our payment providers (for example WooCommerce and the connected payment gateway). We do not store full card details on our servers.
- Technical information: standard log data such as IP address and browser type, used to operate and secure the Platform.
Google user data (Google Calendar)
Instructors may choose to connect their own Google account so that their teaching availability and booked sessions stay in sync with their personal Google Calendar. This connection is made through our booking system (the Amelia booking plugin) using Google OAuth. It is entirely optional and is only initiated by the instructor.
When an instructor connects their Google account, we request the following Google Calendar permissions (scopes):
- https://www.googleapis.com/auth/calendar.readonly — see and download any calendar the instructor can access using Google Calendar.
- https://www.googleapis.com/auth/calendar.events — view and edit events on the instructor’s calendars.
We use this access strictly to provide the booking features of the Platform, specifically to:
- Read the instructor’s calendar availability so that times when the instructor is already busy are not offered to students, preventing double-booking.
- Create and update calendar events for sessions that students book, including generating a Google Meet video link for each session and adding the student as a guest so the session appears on both calendars.
- Update or remove those events when a session is rescheduled or cancelled.
We do not use Google Calendar data for advertising, we do not sell it, and we do not use it to build user profiles. We only access the calendar(s) of instructors who have explicitly connected their account.
Limited Use disclosure
Nefdak Hub’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we store and protect Google data
The access and refresh tokens issued by Google are stored securely on our server and are used only by the booking system to perform the actions described above on the instructor’s behalf. Access is limited to the functionality required to operate the booking and calendar-sync features.
Revoking access and deleting data
An instructor can disconnect their Google account from the booking section of their dashboard at any time; when they do, the stored Google tokens are removed and we no longer access their calendar. Instructors can also revoke access directly from their Google Account at https://myaccount.google.com/permissions. To request deletion of your account data, contact us at [email protected].
Sharing of information
We do not sell your personal information. We share information only as needed to operate the Platform — for example, a booked session’s calendar invitation is shared between the instructor and the enrolled student, and payment data is shared with our payment processor to complete a purchase. We may disclose information if required by law.
Data retention
We keep account and booking information for as long as your account is active or as needed to provide the service and meet legal obligations. Google tokens are retained only while your Google account remains connected.
Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the latest version, and material changes will be posted on this page.
Contact
For any question about this Privacy Policy or your data, contact us at [email protected].