← Back to Classpace

Privacy Policy

Last updated: November 9, 2025

1. Introduction

Classpace ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, password (encrypted via Clerk)
  • Student Information: Student names, email addresses (optional), native language, learning language
  • Lesson Content: Audio recordings, lesson notes, topics, transcripts
  • Payment Information: Processed securely by Stripe (we don't store credit card details)
  • User Feedback: Feedback you provide through our in-app feedback form

2.2 Automatically Collected Information

  • Usage Data: Pages visited, features used, time spent on pages (via Vercel Analytics - GDPR compliant, no cookies)
  • Performance Data: Core Web Vitals, page load times (via Vercel Speed Insights)
  • Device Information: Browser type, operating system, IP address (anonymized)
  • Log Data: Access times, error logs for debugging

3. How We Use Your Information

We use your information to:

  • Provide the Service: Generate lesson feedback, transcribe audio, create vocabulary lists and homework
  • Manage Your Account: Create and maintain your account, process payments
  • Improve the Service: Analyze usage patterns, fix bugs, develop new features
  • Communicate: Send important updates, respond to support requests
  • Marketing: Send promotional emails (only if you've opted in, easy to unsubscribe)
  • Legal Compliance: Comply with legal obligations and enforce our Terms

4. Third-Party Services

We use trusted third-party services to operate our platform. Your data may be processed by:

4.1 Clerk (Authentication)

Purpose: User authentication and account management
Data Shared: Name, email, password (encrypted)
Privacy Policy: clerk.com/privacy

4.2 OpenAI (AI Services)

Purpose: Generate lesson feedback, corrections, vocabulary, and homework
Data Shared: Lesson transcripts, notes, student language information
Privacy Policy: openai.com/privacy
Note: OpenAI does not use your data to train their models (Enterprise API)

4.3 Gladia (Audio Transcription)

Purpose: Transcribe lesson audio recordings
Data Shared: Audio files
Privacy Policy: gladia.io/privacy-policy

4.4 Vercel (Hosting & Analytics)

Purpose: Host the platform, collect anonymous analytics
Data Shared: Usage data (anonymized), performance metrics
Privacy Policy: vercel.com/legal/privacy-policy
Note: Vercel Analytics is GDPR compliant, uses no cookies, stores no personal data

4.5 Stripe (Payments)

Purpose: Process subscription payments
Data Shared: Email, payment information
Privacy Policy: stripe.com/privacy
Note: We never see or store your credit card details

5. Data Storage and Security

Storage Location: Your data is stored securely on servers provided by Vercel and our database provider (PostgreSQL).

Security Measures: We use industry-standard security measures including:

  • Encrypted connections (HTTPS/TLS)
  • Encrypted data storage
  • Secure authentication (via Clerk)
  • Regular security updates
  • Access controls and monitoring

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your data as long as your account is active. If you delete your account:

  • Account data is deleted within 30 days
  • Audio files and transcripts are deleted immediately
  • Anonymized usage data may be retained for analytics
  • Financial records are retained as required by law (typically 7 years)

7. Your Rights (GDPR & CCPA)

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Deletion: Request deletion of your data ("right to be forgotten")
  • Portability: Export your data in a machine-readable format
  • Objection: Object to processing of your data
  • Restriction: Restrict how we process your data
  • Withdraw Consent: Opt out of marketing emails anytime

To exercise these rights, contact us at mnarboni@hanflow.co

8. Cookies and Tracking

Authentication: Clerk uses essential cookies for login/session management. These cannot be disabled as they're required for the Service to work.

Analytics: Vercel Analytics does NOT use cookies. It collects anonymized data without personal identifiers, making it GDPR compliant by default.

No Cookie Banner Needed: Since we only use essential cookies and cookieless analytics, no consent banner is required under GDPR.

9. Children's Privacy

Classpace is designed for teachers (ages 18+). We do not knowingly collect personal information from children under 18. Student information entered by teachers (names, languages) is not considered "personal data of children" as teachers are the account holders.

10. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

  • Using service providers that comply with GDPR
  • Standard contractual clauses approved by the EU
  • Ensuring adequate data protection standards

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the new Privacy Policy on this page
  • Updating the "Last updated" date
  • Sending an email notification for significant changes

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: mnarboni@hanflow.co

For GDPR-related requests (data access, deletion, etc.), please include "GDPR Request" in the subject line.