Privacy Policy

1. Our Commitment to Privacy

ClassClarus (“we,” “us,” or “our”) prioritizes the privacy of educators and students. We do not sell user data to any third party, nor do we transfer data to third parties for marketing or commercial purposes.

2. Information We Collect

We collect information necessary to provide educational tools, maintain security, and ensure FERPA compliance.

Account Data

On cloud (app.classclarus.com), when you sign in with Google, we collect:

• First name and last name
• Email address
• Google profile photo URL

On cloud, when you sign in with email, or on desktop and self-host installs, we collect:

• Email address
• Optional: First name and last name are optionally set by the user
• Optional: Avatar image is optionally set by the user

Student and Class Data

The following data is optionally created or provided by the teacher to manage their classroom about their students. This data is only visible to the teacher, their students, and their parents or guardians, and school/district administrators:

• First and last names
• Roster numbers
• Seat assignments
• Gender
• Behavior records
• Academic metrics: grades, reading scores, tasks, and assignments
• Administrative data: attendance and expectations
• Point redemption and reward records
• Group assignments
• Team assignments

Third-Party Services

On cloud, we use Google OAuth for sign-in. We do not import data from Google Classroom.

Cloud subscriptions are processed by Polar. Polar handles payment details, tax calculation, and invoicing — ClassClarus does not store your card information.

On desktop and self-host installs, billing is disabled and classroom data (users, classes, uploads) is stored locally on the teacher's machine or your Docker volume, not on our cloud infrastructure.

Usage Logs

To comply with FERPA audit requirements and ensure platform security, we log:

• IP address and User ID
• Access timestamps
• Specific data records viewed by the user

3. Family Educational Rights and Privacy Act (FERPA)

ClassClarus is designed to meet FERPA requirements regarding the protection of student education records.

• Administrative Control: Schools and districts maintain absolute control over their data. Administrators have the authority to manage, modify, or delete data at any time.
• Data Access & Transparency: All student data is immediately available to authorized users, including school/district administrators, the student's assigned teacher(s), and their verified parents or guardians.
• Auditability: Our usage logs provide a clear record of which authorized users have accessed specific educational data, supporting school compliance audits.

4. Data Security and Infrastructure

We employ rigorous technical measures to ensure your data remains secure:

• Storage: All data is stored on Amazon Web Services (AWS) in the US East-1 region.
• Encryption at Rest: Data stored on our servers is encrypted at rest using industry-standard AES-256 protocols.
• Encryption in Transit: All communication between the server and client is encrypted via TLS and HTTPS.

5. Data Retention and Deletion

Users maintain control over the lifecycle of their data.

• Immediate Deletion: Upon a request for deletion by an authorized official, data is removed from our active databases immediately.
• Data Portability: Users may export their data in our supported format prior to deletion if they wish to retain records.

6. Children's Privacy (COPPA)

We comply with the Children's Online Privacy Protection Act (COPPA). We rely on the school's authorization to act on behalf of parents to provide consent for the collection of student information for educational purposes, known as School Consent.

7. Contact Us

For questions regarding security protocols or compliance, please contact:

ClassClarus
Email: admin@classclarus.com