Privacy Policy

Privacy Policy

What personal information we collect, why we collect it, and the rights you have under POPIA / GDPR.

1. What we collect

When you use the Platform we collect the following categories of personal information:

• Account data: name, email address, password hash, role, profile picture, and company/team membership.

• Usage data: pages viewed, classrooms generated, learners enrolled, AI credits consumed, and technical logs.

• Payment data: transaction metadata from our payment providers (Stripe, PayPal, PayFast, PayGate, Flutterwave, M-Pesa, etc.). We never store raw card numbers.

• Content you submit: course descriptions, prompts, uploaded media, chats with the AI tutor, ratings and reviews.

2. Why we use it

We use the information to operate the Platform, generate AI classrooms you request, personalise recommendations, process payments, prevent abuse, send transactional and, where you opted in, marketing email, and comply with our legal obligations.

3. Sharing

We share limited personal information with: AI model providers (OpenAI, Anthropic, Google, and others) strictly to generate the output you requested; payment providers to process transactions; email providers for transactional delivery; and hosting/log infrastructure. We do not sell your personal information.

4. Your rights

Under POPIA (South Africa) and GDPR (EU/UK) you can request access to your data, correction, deletion, portability, or to object to certain processing. Email support@classroom.study and we'll respond within a reasonable time.

5. Retention & security

We keep personal information only for as long as needed to provide the service and meet our legal obligations. Passwords are hashed. Payment tokens are held by our providers. Backups are encrypted.

6. International transfers

Some service providers process data outside South Africa. Where that happens we rely on the provider's adequacy decision, standard contractual clauses, or your explicit consent, as applicable.