Privacy Policy

Effective October 27, 2023

‍

In this Privacy Policy, we describe how we process the personal information we collect from you when you visit the website www.classtime.com ("the Website") or when you use the learning platform or other services offered through the Website (the "Services"). 

Who is responsible for your personal data?

In this Privacy Policy, we describe how we, Classtime Inc. ("Classtime", "we", "us", "our“) process your personal data when you:

  • visit our website at www.classtime.com (the "Website"), 
  • use the Classtime software (the "Software") or other services offered through the Website (collectively, the "Services"), either as a student or as a teacher.

We process your personal data either:

  • as a data controller which means that we are responsible to you for your personal data, or
  • as a processor/service provider in performance of a service agreement with your teacher, school, company, or other institution. In this case, your teacher, school, company, or other institution is primarily responsible to you for your personal data.

Contact details
Classtime Inc.
513 E De La Guerra St
Santa Barbara, CA 93103
UNITED STATES
support@classtime.com
+1 805 331 5555

What personal data do we process for which purposes?

1. When you visit our Website

When you visit our Website, the server automatically logs general technical data. This includes your IP address, browser type, internet service provider, referring pages, operating system and date/time stamp. 

We use essential cookies to ensure that our Website and Services function properly (for example, cookies to remember your language preferences and for user authentication when logging in). We do not use any non-essential cookies (e.g. for marketing purposes).

You can find an overview of the cookies used here.

If you contact us through the Website, book a software demo, or sign up for our newsletter, we process your contact details and other personal data you provide us with, as well as, if applicable, technical data that may accrue during the use of the respective means of communication.

2. When you use our Services

When you use our Services, we collect the following personal data: 

Teachers:

  • Login/profile data: When you register to use our Services, we collect your contact details and other relevant personal data that you provide to us on that occasion. If you authenticate through an existing account (Microsoft, Google, or similar), we receive the necessary personal data (e.g., name, email address) from these services. 
  • Data from Integrated Services: If you link the Software to a third-party service (such as Google Classroom, Clever, or Microsoft Teams) (each, an "Integrated Service“), we process your account data, class data, and student data from the Integrated Service to the extent necessary for its interaction with the Software. The exact data we receive from the Integrated Service varies by Integrated Service and is evident at the time of linking. You may revoke our access to your Integrated Service account at any time by updating your Integrated Service account settings.
  • Communication data: We store communications between you and us, such as service-related emails regarding account management, and communications regarding technical issues or changes to the Services.
  • Other personal data: We process any other personal data that you store in the Software of your own accord or that results from your use of the Software.
  • General technical data and usage data: We process your IP address and general technical data. For more information on this and on our use of cookies see 1.) above. We also collect and process technical data in connection with your use of the Services (in particular, events and other usage data). 

Students:

  • Login/profile data: We collect the personal data you provide when you log in to use our Services, which may include your username, name, email, picture, and preferred language. Log in with a pseudonym only is possible. If you authenticate through an existing account (Microsoft, Google, or similar), we receive the necessary personal data from these services. 
  • Personal data provided by your teacher: Your teacher may provide us with certain personal data about you, including your username, name, email, picture, and preferred language. Sometimes we receive this information because the teacher grants us access to their account on an Integrated Service (like Google Classroom, Clever, or Microsoft Teams) so that we can receive information about the classes they teach and the students in those classes.
  • Personal data arising from your use of the Services: We process information on the activities you participate in through the Software (including your test results), any personal data you may include in answers submitted through the Software, and other personal data resulting from the use of the Software.
  • General technical data: We process your IP address and general technical data. For more information on this and on our use of cookies see 1.) above.

We process your personal data for the following purposes: 

  • Our primary purpose of processing your personal data is to provide you with our Services. 
  • Furthermore, we may process your personal data if we need to do so in order to comply with legal obligations. 
  • We may also process your data in specific cases if we have a legitimate interest in doing so, for example, to ensure IT security and data protection or to enforce or defend legal claims. 
  • Teachers only:
    - If you have a teacher account, we evaluate data on your use of the Services to improve our Services. Your personal data will be pseudonymized before the evaluation.
    - As part of providing you with our Services and based on our interest in informing people interested in our Services about our offers as well as new developments, we may send you a newsletter with tutorials, tips and tricks, information about new features, etc., as well as specific mailings with information to support you in using our Services (e.g., how to create questions, how to start sessions, etc.). You have the option to opt out of receiving this newsletter and these mailings at any time.

We do not intentionally collect sensitive personal data (such as your religious beliefs, sexual orientation, racial background, financial information, etc.) through our Services. If you submit sensitive personal information through your use of the Services anyway, we will only process that data as set forth above.

In which cases and how do we share your personal data with third parties?

We may disclose your personal data to third parties in the following cases: 

  • Our affiliate, Classtime AG, provides certain data processing and customer-management services on our behalf. As part of those services, Classtime AG engages third parties to perform certain business-related functions (each, a “Vendor”), including but not limited to IT (for example, maintaining databases, sending messages, providing and developing certain features of the Services, maintenance, and security), payments, billing, and collections. Here you can find a list of these Vendors. Classtime AG only provides each Vendor with the information it needs to perform its specific function.
  • Information that students submit through the Software will be viewable by the teacher(s) administering the relevant activity in the Software.
  • We may share anonymized data with research partners for scientific research purposes.
  • Classtime and its affiliate may disclose personal data if and to the extent necessary to (i) comply with a legal obligation, (ii) protect and defend Classtime’s or its affiliate’s rights and property or the rights and property of our users (including, without limitation, against liability claims), or (iii) protect the security or integrity of the Services.
  • Classtime and its affiliate may disclose your personal data to third parties to whom the entity transfers its business or parts thereof or with whom the entity merges.

We do not rent or sell your personal information to third parties.

Children’s Personal Information & COPPA 

Students under 13 use our Services at the invitation of their teachers, and teachers use our Services in their classrooms as a result of service agreements that we sign either with the teachers or with schools/school districts. This means that we collect and process student personal data for the use and benefit of students, teachers, their schools, and school districts. When teachers or schools/school districts sign an agreement with us for their schools to use our Services, the teachers and schools/school districts (as applicable) act on behalf of parents to give us consent to collect and process their students’ personal data as described in this Privacy Policy. 

We do not knowingly collect or process any other personal data from children under the age of 13. If we learn that we have inadvertently collected personal data from a child under the age of 13 without the appropriate consent, we will delete it immediately.

We do not enable children to make their personal data publicly available through our Services.

Data Security

Our database is stored on certified servers operated either by us, our affiliate Classtime AG, or by a commissioned IT Vendor.

Our technical and organizational security measures are designed to protect your personal data against accidental, unlawful or unauthorized manipulation, deletion, alteration, access, disclosure, use or loss and include, in particular:

  • Connections between app and server as well as to the database are encrypted (TLS),
  • Data in the database is stored encrypted ("encrypted at rest"),
  • only select employees have access to the database,
  • 2-factor authentication is possible using Google or Microsoft SSO (single sign-on), for example,
  • daily backups.

How long do we keep your personal data?

We only store your personal data for as long and to the extent necessary for the purposes described in this Privacy Policy or for legal reasons. 

Personal data stored in user accounts can be restored up to 6 months after their deletion or after the deletion of the corresponding account. Subsequently, they will be permanently deleted.

You can contact us at any time if you wish to exercise your right to have your personal data deleted (see below, "What rights do you have in connection with your personal data?").

What rights do you have in connection with your personal data?

If Classtime is a controller of your personal data, Classtime grants you the following rights in relation to your personal data:

  • Right to Know: The right to request that we disclose to you the personal data we collect, use, disclose, and information about our data practices. 
  • Right to Request Correction: The right to request that we correct inaccurate personal data that we maintain about you.
  • Right to Request Deletion: The right to request that we delete your personal data that we have collected from or about you. You may not request the removal of de-identified, anonymous, or aggregate data from our databases.
  • Right to Portability: The right to request that we provide you with your personal information in a common file format.
  • Right to Opt Out of Automated Decision Making: The right to opt out of our use of your personal information for certain types of automated decision making.
  • Right to Non-Discrimination: The right not to receive discriminatory treatment for exercising your privacy rights.

Please note that exceptions apply to these rights. For example, we may need to further process your personal data in order to fulfill the service agreement, to protect our own legitimate interests such as the assertion, exercise or defense of legal claims, or to comply with legal obligations. In these cases, we may or must therefore refuse certain requests or comply with them only to a limited extent. 

If you are a parent of a student who is using the Software and is less than 13 years of age, you have the right under COPPA to review or have deleted your child‘s personal data and to refuse the further collection or use of your child‘s personal data. In addition, you can refuse our disclosure of your child’s personal data to third parties in situations where the disclosure is not an inherent part of our Services. We will not require your child to disclose more information than is reasonably necessary to use our Services.

To exercise any of the rights identified above, please contact us by email at support@classtime.com.

If you would like to exercise rights you may have with respect to your data, but your rights do not fit within the scenarios identified above, we will forward your request to your teacher, school, company, or other institution so that they may respond to your request in accordance with applicable law.

Links to other websites

Our Website links to third-party websites that are not operated or controlled by us. We are not responsible for whether and how these third parties comply with data protection laws.

How do we respond to Do Not Track signals?

We do not track you or collect your information across third party websites or online services. Thus, we do not receive Do Not Track signals or other similar signals. To the extent that we do receive any such signals, we will not comply with them as it is not an aspect of the functionality of the Services.

Amendment of this privacy policy

We may change this Privacy Policy at any time. New versions will become effective for you as soon as we have notified you by publication on our Website.