Privacy Policy

ALTUS PLATFORM LLC operates Altus Language School and the learning platform at altusplatform.net and is responsible for the personal-data processing described here. Our online language-school services primarily serve Portuguese-speaking learners in Japan.

We handle personal data subject to applicable law, including Japan’s Act on the Protection of Personal Information (APPI) where applicable. The US address below is provided for company correspondence.

Company

ALTUS PLATFORM LLC

Responsible person

Matheus Ryohei Saito

US correspondence

525 Randall Ave Ste 100 - 1230, Cheyenne, WY 82001, United States

Japan contact address

6-43-2 Maruyamacho, Hekinan, Aichi 447-0066, Japan

Email

contact@altusplatform.net

We process information needed to provide lessons, run the platform, handle support and payments, maintain security and measure public advertising campaigns. This includes:

• Account and enrollment details: name, email, telephone where supplied, profile and course-contract details, and account credentials. Passwords are stored as hashes rather than readable passwords.
• Learning records: enrolled courses and classes, progress, exercise responses, assessment results, attendance, submitted work and questions or support messages.
• Speech-practice data: microphone recordings and recognized text when you choose a speech feature, and answers or results submitted to the learning platform.
• Profile pictures for teachers and administrators. Student accounts do not use profile pictures in the platform.
• Billing information: subscription status, payment references, invoices and contract records. Stripe handles card details; the school does not store the full card number.
• Security and administration data: access information, audit records and metadata about use of paid platform features.
• Public marketing-page events: visits, course and plan views, WhatsApp link clicks, page address, campaign parameters, IP address, browser information and available advertising identifiers.
• Additional campaign interactions: plan selection, coupon and FAQ opening, page scrolling, and the start or completion of a level test. Test answers, scores and results are not sent by our advertising integration.

• Create and secure accounts, arrange classes and provide course materials.
• Assess exercises, support speaking practice and track learning progress.
• Respond to questions, service requests and account-recovery requests.
• Administer contracts, collect payments and maintain invoice and accounting records.
• Protect the service, enforce access restrictions and investigate misuse.
• Meet applicable legal obligations and handle disputes.
• Understand interest in our courses and measure advertising campaigns on public sales pages.

Microphone access is requested when you choose a speaking feature. Depending on your browser and the activity, recognition may use a browser-provided speech service or send a short recording through our server to ElevenLabs for transcription.

For server transcription, the recording and its language are sent to ElevenLabs. The transcription endpoint does not save the audio or transcript as a recording archive; it retains usage metadata and returns the recognized text to the activity. Responses and results you submit may still be stored as part of your learning record.

Browser-provided recognition is handled according to the browser and its provider’s services and settings. You can manage microphone permission through your browser or device settings.

OpenAI processes the content required by AI-assisted functions. ElevenLabs also processes text used to generate pronunciation audio. We do not send the full student account, financial history or grade history to AI providers for these functions.

Provider processing and retention follow the applicable provider terms and service settings. We do not promise that an external provider deletes all data immediately. You may decline microphone access or choose not to use an AI feature; teacher-led lessons remain available, although the specific speech or AI function may be unavailable.

The altus_session cookie keeps you signed in. It is configured as httpOnly and SameSite=Lax, uses secure transport in production and has a seven-day lifetime. Removing it signs you out but does not erase saved learning progress.

Our public sales pages use Meta Pixel and Conversions API to measure visits and campaign interactions, including WhatsApp clicks. Advertising cookies such as _fbp and _fbc, when available, help relate a visit to an advertisement. Shared event identifiers avoid counting the same event twice.

Our Conversions API integration may send the public page address, campaign and event details, IP address, browser information and available Meta identifiers. These events can link activity to an advertising profile. This advertising integration does not track the private student or teacher areas.

The browser also stores a random identifier for the school’s own estimate of unique visitors and WhatsApp link clicks. That school-dashboard identifier is not sent to Meta. A recorded link click does not establish that a WhatsApp message was sent or identify the owner of the browser.

You can control cookies, local storage and tracking through browser or device settings. Blocking advertising measurement does not prevent use of the WhatsApp link.

Within the school, access depends on role and the work needed to provide the service. Assigned teachers can access relevant learning records and questions; administrators access information needed to manage the school.

We do not sell student learning records. Our advertising integration does not send study history, grades, payment details, form contents or WhatsApp message text to Meta. The public-page advertising events described above are shared with Meta.

Service providers receive information needed for their functions:

• Stripe: payment processing, payment-method management and billing services.
• OpenAI: content required to provide AI-assisted learning functions.
• ElevenLabs: pronunciation-audio generation and server-based speech transcription.
• Browser speech-service providers: speech recognition when provided through the browser.
• Meta / WhatsApp Business: messages and associated information when you choose to communicate through WhatsApp.
• Meta advertising services: public sales-page events, identifiers and connection details described in section 5.
• Hosting and email providers: operation of the platform, storage and delivery of account and service emails.

Our external providers operate across countries, including the United States. Using payment, AI, speech, email or advertising services may involve transferring relevant information outside your country, including outside Japan.

Data sent through our service is transmitted using encrypted connections. We limit the information sent to what is needed for the particular function. Contact us for questions about providers or international processing relevant to your account.

Our measures include HTTPS/TLS, password hashing, role-based access controls and restrictions on access to private course materials. Relevant administrative actions are recorded for accountability and investigation.

WhatsApp integration credentials are encrypted in storage, and private provider credentials are not included in public pages. Changing an account password invalidates earlier sessions.

No security measure guarantees that every incident can be prevented. Contact us promptly if you suspect unauthorized use of your account.

Account, learning, support and contract records are retained as needed to provide the service, maintain relevant educational history, meet legal and accounting obligations, and handle security issues or disputes.

Invoices and records subject to legal retention requirements may need to be kept after cancellation. Canceling a plan does not automatically delete an account or its learning history.

Account-deletion requests are handled by the school. We review which information can be deleted or anonymized and which must be retained; this is not an automatic deletion guarantee or a promise that every backup and provider copy disappears immediately.

Legacy campaign forms have been disabled. Previously received records may still be retained, and old form copies may remain in a visitor’s browser. Those legacy contact records are not sent by our current Meta advertising integration.

Speech-transcription processing is described separately in section 4. Retained usage metadata does not include an archive of the recording or transcript at that endpoint.

Contact contact@altusplatform.net to ask about your data. Subject to applicable law, you may request access or a copy, correction, deletion, or restriction of a particular use. We may need to verify your identity before acting.

We review requests and explain any legal or operational reason that prevents full fulfillment. The school’s published support commitment is to respond to privacy requests within 14 days.

You may also contact the relevant data-protection authority, including Japan’s Personal Information Protection Commission where applicable. You can manage microphone permissions and browser tracking settings directly on your device.

Learners under 18 require a parent or legal guardian’s consent to use the platform. The guardian should review this policy and may contact us about the learner’s information.

We use the same core account and learning-data categories to provide lessons to younger learners. Do not provide unnecessary sensitive information in exercises or support messages.

We update the effective date when this policy changes. Material changes to how we use personal data are communicated by email and within the platform before they take effect.

Company

ALTUS PLATFORM LLC

Email

contact@altusplatform.net

Phone

+81 90-4440-7834

Support hours

Monday to Friday, 10:00–18:00 Japan Standard Time (UTC+9), excluding holidays