The law we operate under
Kalbot Solutions is a Canadian company based in Quebec, and Pillar OS is operated from Canada. Personal information is handled in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Quebec’s Act respecting the protection of personal information in the private sector, as amended by Law 25.
Law 25 matters here in a way it does not for most tutoring software, because most tutoring software is American. It gives individuals in Quebec rights that a US-hosted platform is not built around: access, correction, portability, the withdrawal of consent, and a say in automated decisions. Pillar OS is built by a Quebec company that has to comply with it, in both official languages, rather than treating French as a translation layer.
What we hold, and who controls it
Your tutoring business is the one that decides what goes into Pillar OS and how long it stays. We process it on your behalf. You can export it, and you can ask for it to be deleted.
We do not sell personal information. It is disclosed only to the service providers who help operate the platform, to you as the customer, at your direction, or where the law requires it.
Safeguards
We maintain reasonable administrative, technical and physical safeguards designed to protect personal information against loss, theft, and unauthorized access, use, or disclosure. That is the commitment in our privacy policy and this page does not stretch it: no method of transmission or storage is completely secure, and any vendor who tells you otherwise is selling something.
The web layer is the part you can verify yourself without taking our word for it, so it is listed below.
Third parties
Pillar OS relies on outside services to function: a CRM and messaging layer, video conferencing, cloud hosting and database infrastructure, payment processing, an AI provider that drafts progress-report summaries from tutor notes, and analytics. Each is governed by its own terms, and we share only what a service needs to do its job.
The current list is maintained in the privacy policy rather than duplicated here, so there is one place to keep accurate.