Privacy Policy

1. Who We Are

Classvero is an AI-assisted instructional platform designed exclusively for educators, school staff, and instructional leaders in the United States and internationally. We are committed to responsible data stewardship under applicable laws including FERPA, COPPA, and GDPR where applicable.

Data Controller contact: support@classvero.com

2. Information We Collect

2a. Information You Provide

• Account registration data (name, email, role)
• Professional profile data (grade level, subjects, school type)
• User-generated content (lesson inputs, AI prompts, generated outputs)
• Support communications
• Beta program application data

2b. Information Collected Automatically

• Usage data (features used, pages visited, session duration)
• Device and technical data (IP address, browser type, operating system)
• Cookies and similar technologies for essential functionality and analytics
• Login timestamps for security audit logs

2c. Student Live Check Session Data

When teachers run Live Lessons or Live Checks, students join using a short-lived access code and an optional name or display name (up to 30 characters). No student account is created. Email addresses and phone numbers are refused, and teachers may ask students to use a first name, initials or a nickname instead of a full name. Closing a Live Check deletes its student session and response records immediately.

3. Lawful Basis for Processing (GDPR)

For users subject to GDPR (e.g., EU/EEA), our lawful bases are:

• Contract performance — processing your account and generating requested content
• Legitimate interests — security, analytics, and platform improvement
• Legal obligation — compliance with applicable laws
• Consent — where explicitly obtained (e.g., optional communications)

4. How We Use Information

• Provide, maintain, and improve the Service
• Generate AI-powered instructional content you request
• Authenticate users and manage accounts
• Monitor for security incidents and fraud
• Fulfill legal obligations and respond to legal process
• Send service-related communications (no marketing without consent)
• Aggregate analytics to improve platform reliability

We do not sell personal data or use educator/student content to build advertising profiles. AI processing is subject to the configured platform/provider terms and account-level data controls described in our agreements and subprocessor disclosures.

5. Data Sharing

We do not sell personal data. We share limited data only with:

• Infrastructure providers — cloud hosting and database services, under confidentiality agreements
• AI processing providers — to generate requested content under the applicable platform/provider data-processing terms and configured account controls
• Analytics providers — aggregated/anonymized usage data only
• Legal authorities — when required by valid legal process

A full subprocessor list is available upon request at support@classvero.com.

6. FERPA Compliance

When Classvero is used by educators under a school or district agreement, it may act as a "school official" with a legitimate educational interest as defined under FERPA (20 U.S.C. § 1232g). In this capacity:

• We process only de-identified or teacher-provided instructional data
• We do not use any student data for advertising, profiling, or commercial purposes
• We do not disclose student data to third parties outside the scope of the Service
• Schools/districts retain control over any student education records

See our School/District DPA for formal contractual obligations.

7. COPPA (Children Under 13)

Classvero is designed for educators (adults 18+). We do not knowingly request personal information directly from children under 13. Student Live Check participation is designed around class aliases rather than direct identifiers. If you believe a child under 13 has provided personal data, contact us immediately at support@classvero.com and we will delete it promptly.

8. Data Retention

• Account data: retained while account is active; deleted within 30 days of account closure upon request
• User-generated content: retained while active or until deleted by the user
• Student Live Check and Live Lesson sessions: deleted immediately when a teacher closes supported sessions where applicable; expired student session/response records are also configured for scheduled cleanup after a seven-day grace period.
• Analytics/logs: aggregated or anonymized; retained up to 12 months
• Legal/compliance records: retained as required by applicable law

9. Security

We implement administrative, technical, and organizational safeguards including:

• Encryption in transit (TLS) and at rest
• Role-based access controls and least-privilege principles
• Authentication controls and session management
• Incident response and breach notification procedures

See our Security Overview for more detail. In the event of a breach affecting your data, we will notify you within 72 hours as required.

10. Your Rights

Depending on your location, you may have the following rights:

• Access — request a copy of data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data ("right to be forgotten")
• Portability — request your data in a portable format
• Objection/Restriction — object to certain processing or restrict it
• Withdraw Consent — where processing is based on consent, you may withdraw at any time

Submit requests to support@classvero.com. We respond within 30 days. EU/EEA users may also lodge a complaint with their local supervisory authority.

11. International Data Transfers

Classvero is operated in the United States. If you access the Service from outside the US, your data may be transferred to and processed in the US. We implement appropriate safeguards (e.g., Standard Contractual Clauses for EU data) to ensure adequate protection during such transfers.

12. Cookies & Tracking

We use essential cookies for authentication and session management. We may use analytics cookies to understand aggregate usage patterns. You can control cookies through your browser settings; disabling essential cookies may affect Service functionality.

13. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email or in-app notice at least 14 days before taking effect. The "Last Updated" date reflects the most recent revision. Continued use after the effective date constitutes acceptance.