CLASSCREW — PRIVACY POLICY
Last Updated: 1/7/2026
1. Overview
ClassCrew ("we," "our," or "the Service") provides an AI-assisted grading tool that integrates with Canvas LMS. This Privacy Policy explains what information we collect, how we use it, how we protect it, and the rights available to Users ("you," "Instructor," or "User").
By creating an account, connecting a Canvas API token, or using ClassCrew, you consent to the practices described in this Privacy Policy.
2. Information We Collect
We collect only the minimum information required to operate the Service.
A. Account Information
- Name
- Email address
- Password (encrypted)
B. Canvas Connection Data
- Canvas API token (encrypted at rest)
- Canvas domain/subdomain
- Course IDs
- Course Subject
- Assignment IDs
- Submission metadata (submission dates, file names)
C. Grading Workflow Data
During the grading process, we temporarily process:
- Submission files (e.g., PDFs, documents)
- Rubrics
- AI-generated feedback
All submission files are deleted immediately after grading.
D. Payment Information
Payment details are processed by third-party providers (e.g., Stripe). ClassCrew does not store credit card numbers or full billing details.
E. Technical and Session Data
We collect:
- Session logs (IP addresses, user agents for security)
- Error reports (to diagnose technical issues)
- Basic usage metrics (to improve service reliability)
This data is used solely for security, debugging, and service improvement. We do not use this data for advertising, profiling, or behavioral marketing.
3. Information We Do NOT Collect or Store
ClassCrew does not:
- Permanently store student submissions
- Store PDF assignment files
- Train AI models on your data
- Sell or rent data to third parties
- Build student profiles
- Track activity outside our Service
- Use tracking cookies for advertising or behavioral marketing (we only use essential authentication and session cookies)
We also do not use your Canvas API token for any purpose outside of grading-related operations (fetching courses, assignments, and submissions necessary for grading).
4. How We Use Information
We use your information solely to:
A. Operate the Service
- Authenticate your account
- Connect to Canvas
- Grade submissions using AI
- Fetch courses, assignments, and submissions from Canvas (necessary for grading)
- Post scores, rubric assessments, and feedback back to Canvas
B. Provide Support
- Troubleshoot issues
- Respond to inquiries
- Deliver product updates
C. Process Payments
- Manage subscriptions
- Invoice you for services
D. Improve the Platform
- Identify bugs
- Improve performance
- Enhance reliability
We do not use your data for advertising or marketing without consent.
5. How We Protect Your Information
We take security seriously.
A. Encryption
- Canvas API tokens encrypted at rest
- All data transmitted over HTTPS
- Passwords hashed and salted
B. Temporary Processing
Submission files are:
- Processed only in memory or temporary storage
- Automatically deleted immediately after grading
C. Access Controls
Only authorized personnel with legitimate business needs can access system logs or encrypted tokens.
D. Data Breach Notification
In the event of a data breach that may affect your personal information, we will notify affected users and relevant authorities as required by law, typically within 72 hours of discovery.
6. Sharing of Information
We only share data with:
A. AI Processing Vendors
We use third-party AI service providers to process student submissions for grading purposes. We may use various AI models and providers (such as Anthropic, OpenAI, Google, or other qualified providers) to deliver grading services. We select providers based on quality, reliability, and privacy standards.
All AI providers we use:
- Process submissions only for grading purposes
- Operate in no-training mode (submissions are not used to train or improve AI models)
- Use ephemeral caching that does not retain your content
- Maintain strict privacy and security standards
We may change AI providers or models at any time to improve service quality, performance, or cost-effectiveness. Current AI providers' privacy policies are available upon request by contacting classcrewbiz@gmail.com.
B. Backend Service Provider
- Convex (database and API hosting)
We use Convex as our backend service provider to store account information, Canvas tokens (encrypted), and temporary grade data. Convex operates under strict security standards and processes data in accordance with our instructions.
C. Payment Processors
- Stripe (or equivalent)
ClassCrew does not receive or store full payment details.
D. Legal or Safety Requirements
We may disclose information when required by law or to prevent harm, fraud, or misuse.
We never sell or rent personal information.
7. FERPA Compliance
ClassCrew operates as a service provider/vendor acting at the direction of educational institutions. We process student information only as necessary to provide grading services and in accordance with FERPA's service provider requirements. We do not use student data for any purpose other than providing the grading services requested by instructors.
We:
- Access only the information required to perform legitimate educational functions
- Delete student submissions immediately after grading
- Do not store or share student data
- Follow instructor and institution direction regarding data access and deletion
8. Data Retention
We retain only:
- Account information (until account deletion)
- Subscription and billing history (as required by law)
- Logs necessary for security and debugging
We do not retain:
- Submission files (deleted immediately after AI processing)
- PDFs or document attachments (deleted immediately after processing)
- Grades and AI-generated feedback (deleted after posting to Canvas)
We temporarily store grades and feedback in our database until you choose to post them to Canvas, after which they are automatically deleted. If you do not post grades, they remain in our system until you delete them or close your account.
Data Retention Periods:
- Account information: Until account deletion
- Grades (unposted): Until posted to Canvas or manually deleted
- Canvas tokens: Until account deletion or token revocation
- Security logs: 90 days
- Session data: Until session expiration (typically 30 days)
- Payment records: As required by law (typically 7 years)
9. Your Rights
You may:
- Delete your Canvas API token
- Close your account
- Request deletion of all data associated with your profile
- Request access to the information we have collected
- Request information about data processing and storage locations
- Export your data in a machine-readable format
- Unsubscribe from communications
To exercise these rights, contact classcrewbiz@gmail.com.
10. Cookies and Tracking Technologies
We use only essential cookies required for:
- User authentication and session management
- Security and fraud prevention
We do NOT use:
- Advertising cookies
- Third-party tracking cookies
- Behavioral profiling cookies
- Analytics cookies for marketing purposes
You can control cookies through your browser settings, though disabling essential cookies may affect Service functionality.
11. Children's Privacy
ClassCrew does not provide accounts to individuals under 13 years old. Any access to student information occurs only through instructors using the Service.
12. International Data Transfers
ClassCrew operates primarily in the United States, but some of our service providers may process data in other countries. We ensure that all data transfers comply with applicable data protection laws and that appropriate safeguards are in place, including standard contractual clauses where required.
13. Changes to This Privacy Policy
We may update this Privacy Policy as needed to reflect changes in our practices or legal requirements. Material changes will be communicated via email to registered users and a prominent notice on our dashboard at least 30 days before changes take effect. The "Last Updated" date at the top of this policy indicates when it was last revised. Continued use of ClassCrew after material changes constitutes acceptance of updated terms.
14. Contact Information
For questions or concerns, contact: