Privacy policy
Effective: 2026-05-06
Classify ("we", "us") is operated by [data controller - TBD]. This policy explains what we collect, why, and your rights under the GDPR.
WHAT WE COLLECT
• Account: email, username, display name, optional photo URL, role (teacher or student), and a list of classes you belong to.
• Workspace content: chat messages, notes you write, file attachments you upload, calendar events, and class metadata you create.
• Technical: IP address and basic request logs from our hosting provider, used to diagnose abuse and outages.
WHY WE COLLECT IT
• To operate the service you signed up for (legitimate interest).
• To send you account-related notifications and to enforce our terms (legitimate interest).
• To respond to your support requests (consent, given by writing to us).
WHO WE SHARE IT WITH
• Google (Firebase): authentication, database (Firestore), file storage. Data is stored in the EU multi-region.
• Vercel: hosting and request routing.
We do not sell your data, ever.
HOW LONG WE KEEP IT
While your account is active. If you delete your account, we delete your profile, username reservation, class memberships, and personal notes within 30 days. Backups are purged within 90 days.
YOUR RIGHTS
• Access, rectification, erasure, portability, restriction, objection.
• Lodge a complaint with your supervisory authority.
To exercise these rights, write to [contact email - TBD].
COOKIES
We use a single first-party cookie ("classify_session") to keep you signed in. We do not use marketing or analytics cookies in this version.
CHANGES
We post material changes here at least 7 days before they take effect.