This Privacy Policy describes how Class Companion, Inc. (“Class Companion,” “us,” “we,” and “our”) handles teacher and student personal information that we collect through our website, https://classcompanion.com, and the Class Companion platform (collectively, the “Service” or “Services”).
Class Companion respects and supports all applicable student data privacy laws. In that regard, we support schools in complying with the Family Education Rights and Privacy Act (FERPA), and we comply with the Children's Online Privacy Protection Act (COPPA). For specific questions, please contact [email protected].
We will not collect, maintain, use or share teacher and student personal information beyond that needed for authorized educational/school purposes, or as authorized by the parent/student. We adhere to the NIST Cybersecurity Framework ("NIST CSF").
We promise to:
We collect the minimal amount of information needed from teachers to deliver our Services. This information includes:
This information is protected by our rigorous data privacy protocols consistent with industry standards.
We and our service providers may automatically log information about you, your computer or mobile device, and your interactions over time with our Services, our communications, and other online services, such as:
We collect the minimal amount of student information needed to deliver our Services. This typically includes:
This information is protected by our rigorous data privacy protocols consistent with industry standards.
We do not rent, sell, or exchange teacher or student personal information to any third party. We do not advertise using teacher or student personal information. We do not build personal profiles of students other than for supporting authorized educational/school purposes or as authorized by a school or school district.
We first turn teacher and student personal information into anonymous data by removing information that makes the data personally identifiable to you. Then, we use this de-identify data for research and development purposes. The goal of research and development is to improve our Services. We may further aggregate the de-identified information. We may use de-identified data and share it with third parties for our lawful business purposes. We only share data with third parties that adhere to our policies, our contractural obligations, and applicable law and pledge to protect student privacy.
We do not rent, sell, or exchange teacher or student personal information to any third party or use such personal information for advertising purposes.
Data that you ask us to share. For users who belong to the same educational institution, we share personal information, that you ask us to share, with other authorized users of the Services. For example, teachers can view their own students’ completed assignments and conversations through the AI chatbot.
Approved service providers. We hold approved service providers to the same rigorous privacy and security requirements as ourselves. We only share information with third-party companies if it is necessary to deliver our Services (such as cloud hosting, database management, and email delivery) and if the third party company adheres to our policies and pledges to protect student privacy. We do not share teacher or student personally identifiable information with AI service providers. Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models. A list of our third-party service providers can be found here.
Government authorities. We may be required to disclose teacher or student personal information to law enforcement, government authorities, or private parties in order to comply with the law or a valid legal request.
Business transfers. In the event of an acquisition, merger, or reorganization or sale of assets, or in the event of bankruptcy or dissolution, we will require the acquiring company to act in accordance with this Privacy Policy or allow users a choice to send information to the future entity or have their information deleted.
Access, update, or delete your account information. You may access or update your personal information in your account by logging in and editing your information. Parents may inspect and correct information for students. Schools and districts may access, update, or delete student data maintained by the school or district. You can request that we delete your account by emailing us at [email protected]. We may retain de-identified data after you delete your account, in order to improve the operation of our Services; this data will not contain your personal information.
Opt out of emails. You may opt out of product update emails by following the opt-out or unsubscribe instructions at the bottom of the email. You may continue to receive critical Service-related emails.
Online tracking opt out. There are a number of ways to limit online tracking, which we have summarized below:
Note that because these opt-out mechanisms are specific to the device or browser on which they are exercised, you will need to opt out on every browser and device that you use.
Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals. To find out more about “Do Not Track,” please visit https://www.allaboutdnt.com.
We retain your information to deliver our Service, but we do not retain it longer than necessary to support the authorized educational/school purposes, or as authorized by the user.
You can deactivate your account by going to your account settings. When you deactivate an account, you will not be able to access it, there will be no further activity in your account, and other users will no longer see any information connected to your account. For students and teachers, this means your school will no longer be able to access information connected to your account. You may restore the account by contacting [email protected].
When you deactivate your account, we turn personal information into anonymous data by removing information that makes the data personally identifiable to you. We retain this de-identified data to improve our product. You may contact us if you would like your data to be permanently deleted.
In the case of school contracts, the school may request that we deactivate and de-identify accounts, and we will do so, unless there is a regulatory or valid legal need to retain certain information.
Protecting your privacy and security is important to us. We adhere to the NIST Cybersecurity Framework ("NIST CSF").
We use strict user access controls, multi-factor authentication, and a combination of technical and procedural safeguards to protect your data. We secure data in transit and at rest using encryption. We have an incident response plan in place and a break notification protocol.
Please note that any information you send to us electronically, while using the Services or otherwise interacting with us, may not be secure when it is transmitted to us. Do not use unsecure channels to communicate sensitive or confidential information to us.
If you use our Service outside of the United States, your data is collected in the country where you are located and then transferred to the United States where our servers are located.
If you are located within the European Union (EU), European Economic Area (EEA), or the United Kingdom (UK), you are afforded specific rights under the General Data Protection Regulation (GDPR) or the UK GDPR. These rights include the ability to access, rectify, erase, limit the processing of, or oppose the processing of your personal data. Should you wish to exercise any of these rights, please contact [email protected].
Furthermore, as an EU/EEA or UK resident, you possess the right to file a complaint with your local data protection authority regarding our handling of your personal information.
We may modify this Privacy Policy from time to time. If material modifications take place, we will provide prominent notice to the users and account holders and provide choices before data is used in any manner inconsistent with the original terms. This will be accomplished through a prominent statement stating that the policy has been changed the first time the user logs on following the change and users provide consent by continuing to use the service. We will not make changes to policies that are inconsistent with our contractual requirements. Data collected under a school or district contract supersedes individual consent to the Privacy Policy and Terms of Service.
Please direct questions or comments about this Policy or our privacy practices to: [email protected].
Last Updated: 22nd April, 2025