Privacy Policy

One Talky adopts the principle of data minimization set forth in the Brazilian General Data Protection Law (Lei nº 13.709/2018 — LGPD). We collect only the data strictly necessary to operate the platform securely, and we process your data based on clear legal grounds: execution of a contract (to provide the service you hired), compliance with a legal obligation (e.g., issuing invoices), and consent (e.g., marketing cookies, which you may refuse at any time).

Under Article 41 of the LGPD, One Talky designates a Data Protection Officer responsible for handling data subject requests and communicating with the National Data Protection Authority (ANPD). To exercise your rights or ask questions about the processing of your data, contact us at support@onetalky.com or through the support channel available on the platform.

• Students: Full name, email, country, language of interest, declared level, and lesson minute consumption history.
• Tutors: Full name, email, country/time zone, profile photo, introduction video, public biography, and payment details (Upwork/Payoneer account details, or PIX/bank details when applicable) necessary for earnings payouts.
• Affiliates: Full name, email, and payment details (PIX key or bank details) necessary for commission payouts.

One Talky does not store, process, or have access to credit card data on its servers.

• All financial transactions are processed in a 100% encrypted and external manner by our payment partner Stripe.
• The user's card details are entered directly into a secure Stripe environment (PCI DSS Compliant) and never transit through One Talky's servers.
• One Talky receives only the payment status confirmation (approved/declined) and the transaction identifier, without any sensitive financial data.

Real-time lessons are enabled by the Agora.io WebRTC infrastructure, a cloud communication platform with international security standards.

• The audio and video transmission is direct (peer-to-peer) between student and tutor, with no video recordings stored by One Talky.
• The call duration logs (start time, end time, and total minutes) are kept on One Talky's servers strictly for internal audit purposes, reconciliation of the student's minute consumption, and calculation of payments owed to tutors.
• These duration logs are essential operational data for the provision of the service and are not shared with third parties beyond the tutor participating in the lesson.

We use essential cookies to maintain the authenticated user session securely in your dashboard.

We also use third-party analytics tools (such as Meta Pixel and Google tags) exclusively to monitor marketing campaign performance and browsing behavior on the public Landing Page, not in the authenticated user dashboard. You can manage your cookie preferences through the consent banner displayed on your first visit to the platform.

One Talky does not sell, rent, or share personal data with third parties for commercial purposes. We share data only with service providers essential to the platform's operation, to the strictly necessary extent:

• Agora.io — video call infrastructure;
• Stripe — processing of student payments;
• Hostinger — sending transactional emails (verification, notifications);
• Brevo — sending system emails;
• Cloudflare — web infrastructure protection and performance.

All these providers are contractually obligated to process your data only for the purposes described herein.

Since One Talky connects students and tutors from different countries, and some of our service providers (such as Agora.io) operate international infrastructure, your data may be processed outside Brazil. In such cases, we require providers to adopt data protection standards compatible with the LGPD.

We retain your data for as long as necessary to provide the service and comply with legal obligations (e.g., tax). Upon requesting the deletion of your account, your personal data will be removed or anonymized within a reasonable period, except where retention is required by law (e.g., financial records).

One Talky is intended for individuals aged 18 and over. We do not intentionally collect data from minors. If we identify that data from a minor has been collected without appropriate parental or guardian consent, we will take steps to delete it.

You may opt out of receiving promotional email communications at any time, through the unsubscribe link present in each message, without affecting the receipt of essential communications about your account and your lessons.

In the event of a security incident that may pose a relevant risk to data subjects, One Talky will notify the ANPD and the affected subjects, as required by Article 48 of the LGPD, informing them of the nature of the affected data and the measures taken.

Under the LGPD, you have the right to:

• Confirm the existence of processing of your data;
• Access your stored personal data;
• Correct incomplete or outdated data;
• Request the anonymization, blocking, or deletion of unnecessary data or data processed in violation of the law;
• Request the portability of your data to another provider;
• Revoke previously given consent, where applicable;
• File a complaint with the National Data Protection Authority (ANPD).

To exercise your rights, contact us through the official support channel available on the platform or via the email of the Data Protection Officer indicated in Section 2.

We may update this Policy periodically. Material changes will be communicated by email or notice on the platform before they take effect. Continued use of the platform after the effective date constitutes acceptance of the changes.

If One Talky undergoes a merger, acquisition, asset sale, or other corporate reorganization, your personal data may be transferred as part of that transaction, always respecting the protections set forth in this Policy and the LGPD.

We adopt technical and organizational measures to protect your data against unauthorized access, loss, or improper alteration. No data transmission over the internet, however, can be guaranteed to be 100% secure — we recommend that you protect your access credentials and notify us immediately in case of suspected unauthorized use of your account.

Our platform may contain links to third-party sites or services. We are not responsible for the privacy practices of those sites — we recommend reading each one's own privacy policy before providing any information to them.

To protect your account against fraudulent requests, we may ask for additional information to confirm your identity before fulfilling requests for access, correction, or deletion of data.