1. Introduction
ClassVault is an educational software platform that helps teachers, students, and institutions manage classes, files, messages, announcements, attendance, and related academic workflows. This Privacy Policy describes how ClassVault collects, uses, stores, and protects information when you access the website, applications, and services offered under the ClassVault platform.
This policy applies to personal information processed in connection with ClassVault accounts, institution-managed deployments, and public-facing pages. Where an institution deploys ClassVault for its own members, that institution may also have separate policies, agreements, or legal obligations that affect how data is managed within its environment.
2. Information We Collect
We collect information needed to operate and secure the platform, including the following categories:
- Account information: name, email address, username, institution affiliation, and account role such as teacher, student, institution administrator, or super administrator.
- Usage data: class memberships, classes joined or created, files accessed, assignments viewed, attendance actions, and related product activity.
- Device and technical data: IP address, browser type, approximate device type, session metadata, and other technical diagnostics used to keep the service functioning reliably and securely.
- Content you create: messages, files, folders, announcements, class materials, AI prompts when optional AI features are used, and other content you upload or generate in the product.
3. How We Use Your Information
We use personal information to operate ClassVault as an education-focused software service.
- To provide the platform, authenticate users, manage classrooms, and deliver requested features.
- To improve reliability, usability, accessibility, and security of the service over time.
- To send important operational notifications, such as account, class, assignment, or security-related updates.
- To investigate misuse, enforce our Terms of Service, and maintain a safe product environment.
ClassVault does not sell personal data to third parties for advertising or unrelated commercial purposes.
4. Data Storage and Security
ClassVault data is stored on secure cloud infrastructure and protected using technical and organizational safeguards designed for a modern SaaS platform.
- Data is transmitted over encrypted connections.
- Where supported by our infrastructure providers, data is protected at rest through encryption and controlled storage services.
- Administrative access is limited through role-based access controls, account protections, and audit logging.
No security system is perfect, but we design our controls to reduce unauthorized access, misuse, and data loss risk.
5. Data Retention
We retain information for as long as it is needed to operate the service, satisfy institutional obligations, comply with law, or resolve disputes.
- Active accounts: information is generally retained while the account or institution deployment remains active.
- Deleted accounts: account-related data is generally removed within 30 days of confirmed deletion, except where retention is required for security, legal, or contractual reasons.
- Institution-managed data: institution records may be retained according to the institution’s subscription, agreement, or administrative instructions.
6. Your Rights
Depending on your location and relationship to the platform, you may have rights relating to your personal information, including the ability to:
- Request access to your data, including account-level exports where available.
- Correct inaccurate or incomplete account information.
- Request deletion of your account or personal data, subject to institutional, legal, or security requirements.
To exercise these rights, please use the Contact Us page and identify your request clearly.
7. Children's Privacy
ClassVault is not directed to children under 13 except through institution- or school-managed use with appropriate parental, school, or legal authorization where required.
When institutions use ClassVault for minors, the institution is responsible for ensuring that its deployment, permissions, and notices comply with applicable child and student privacy obligations.
9. Third-Party Services
ClassVault may rely on selected third-party providers to operate parts of the service. These may include:
- Azure Blob Storage: for secure file storage and delivery.
- Firebase: for push-notification delivery where those features are enabled.
- Google Gemini AI: for optional AI features, only when those features are enabled by platform administrators.
We use such services to support product functionality, not to sell your data or enable unrelated advertising.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect product changes, legal developments, or operational improvements.
For material changes, we will aim to provide at least 30 days' notice through the platform, email, or another reasonable method before the updated policy takes effect.
11. Contact Us
If you have privacy-related questions, requests, or concerns about how information is handled in ClassVault, please reach out through our Contact Us page.