Privacy Policy

Effective Date: September 1, 2026

This Privacy Policy describes how ClassCam ("we," "us") collects, uses, and protects information when you use the Service. ClassCam is built to minimize data collection: we don't collect or store any student data at all.

1. Information We Collect

From Teachers (Account Holders)

• Account information: email address, a securely hashed password (never stored in plain text), and the classroom "room name" you choose.
• Billing information: handled directly by Stripe. We store only a Stripe customer/subscription reference, not your card details.
• Usage data: basic activity like last login time, upload counts, and account tier, used to operate the Service.

Photos You Upload

Photos captured through the Service are temporarily stored to display them on your classroom board and are automatically and permanently deleted no later than 90 minutes after upload. We do not use uploaded photos for any purpose beyond displaying them during that window, and we do not use them to train any AI models.

From Students

Students do not create accounts and are not asked for any personal information. A student viewing the classroom display uses a PIN-protected, read-only link that a teacher provides; we don't collect names, emails, or any identifying information from students through this feature.

2. How We Use Information

• To provide, operate, and maintain the Service;
• To process payments and manage subscriptions;
• To send account-related emails (password resets, receipts, district-admin invitations) via Resend;
• To maintain the security of the Service and prevent abuse.

We do not sell your information, and we do not use it for advertising or targeted marketing to third parties.

3. Third-Party Service Providers

We use the following providers to operate ClassCam. Each processes only the information necessary for its function:

• Stripe — payment processing for Pro subscriptions.
• Resend — sending transactional emails (password resets, account/invite links).
• Cloudflare — hosting, domain services, database, and temporary photo storage.

4. Data Retention

• Photos: deleted automatically, no later than 90 minutes after upload.
• Account data: retained while your account is active. You can request deletion at any time (see Section 8).
• Inactive free accounts: automatically deleted after 30 consecutive days without a sign-in, with a warning email sent at least 7 days beforehand. This does not apply to active Pro subscriptions or district/school admin accounts.
• Password reset tokens: expire after 1 hour and are deleted after use.

5. Security

Passwords are stored using salted PBKDF2 hashing, never in plain text. Sessions use HttpOnly cookies. We use Cloudflare's infrastructure for encrypted transmission (HTTPS) of all data.

6. Children's Privacy

ClassCam is not directed at children and does not knowingly collect personal information from children. Accounts are only available to teachers and school staff (18+). Students access a read-only classroom display with no data collection.

7. Schools and FERPA

Because ClassCam does not collect, store, or process student data, FERPA's data-handling requirements generally don't apply to how the Service itself operates. That said, we recognize school districts may still require a signed Data Privacy Agreement as part of their vendor approval process — see our Data Privacy page for schools for details.

8. Your Rights

You can access or update your account information at any time by signing in. To request deletion of your account and associated data, contact support@classcam.us. If you are a California resident, you may have additional rights under the CCPA, including the right to know what personal information we hold and to request its deletion — the same contact applies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a new effective date.

10. Contact

Questions about this Privacy Policy can be sent to support@classcam.us.