This Privacy Policy describes how Class Bridge ("Company," "we," "us," or "our") collects, uses, stores, and shares information when you use our website, applications, and related services (collectively, the "Service"). By accessing or using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.
1. Information We Collect
We collect several types of information in connection with the Service:
1.1 Account Information
When you create an account, we collect information such as:
- Full name
- Email address
- Password (stored in encrypted form via Netlify Identity)
- Account type (family or provider)
- Phone number (if provided)
1.2 Profile Data
Depending on your account type, you may provide additional profile information:
- Families: Children's names and ages, school district, ESA program enrollment details, educational needs and preferences, and location information.
- Providers: Business name, professional qualifications, certifications, licensing information, service descriptions, pricing, availability, photographs, ESA eligibility status, and business contact information.
1.3 Booking Data
When you use the Service to book or schedule educational services, we collect information about those transactions, including the services requested, dates, times, provider selected, and any notes or special requirements.
1.4 Messages
We collect and store messages sent between users through the platform's messaging system, including message content, timestamps, and sender/recipient information.
1.5 Usage Data
We automatically collect certain information about how you access and use the Service, including:
- IP address and approximate geographic location
- Browser type and version
- Device type and operating system
- Pages visited and features used
- Search queries and filters applied
- Date and time of visits
- Referring website or source
- Click patterns and interaction data
2. How We Use Information
We use the information we collect for the following purposes:
2.1 Facilitating Connections
- Matching families with appropriate educational service providers
- Displaying provider profiles and listings to families
- Enabling communication between families and providers
- Processing and managing service bookings
2.2 Improving the Service
- Analyzing usage patterns to enhance platform functionality and user experience
- Developing new features and services
- Conducting research and analytics to understand user needs
- Diagnosing technical issues and maintaining platform performance
2.3 Communications
- Sending account-related notifications (registration confirmation, password resets, security alerts)
- Delivering booking confirmations and reminders
- Providing customer support
- Sending updates about new features, providers, or resources relevant to your interests (with your consent, where required)
2.4 Safety and Compliance
- Enforcing our Terms of Service and other policies
- Detecting, preventing, and addressing fraud, abuse, or security issues
- Complying with applicable legal obligations and regulatory requirements
- Responding to legal processes or government requests
4. Data Security
We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction.
Our security measures include:
- Encryption: Data transmitted between your browser and our servers is encrypted using industry-standard TLS/SSL protocols.
- Secure Authentication: User authentication is managed through Netlify Identity, which provides secure credential storage, encrypted password hashing, and support for multi-factor authentication.
- Access Controls: Access to personal information is restricted to authorized personnel on a need-to-know basis.
- Infrastructure Security: Our platform is hosted on Netlify's secure infrastructure, which maintains industry-standard security certifications and practices.
- Regular Monitoring: We monitor our systems for potential vulnerabilities and security incidents.
While we strive to protect your information, no method of electronic transmission or storage is completely secure. We cannot guarantee the absolute security of your data, and you use the Service at your own risk.
5. Children's Privacy
5.1 COPPA Compliance
Class Bridge is committed to complying with the Children's Online Privacy Protection Act (COPPA). Our Service is not directed to children under the age of 13, and we do not knowingly collect personal information directly from children under 13.
5.2 Parental Management
Because Class Bridge is an ESA marketplace designed to help families find educational services for their children, we recognize that certain information about children may be provided by parents and legal guardians in the course of using the Service. All accounts for minors are created and managed by their parents or legal guardians.
Parents and guardians are responsible for:
- Creating and maintaining accounts on behalf of their children
- Providing consent for any information about their children that is shared through the Service
- Supervising their children's interactions with any educational services booked through the platform
- Reviewing and managing any information about their children stored on the platform
5.3 Parental Rights
Parents and guardians have the right to review, correct, or request deletion of their child's personal information at any time by contacting us at hello@classbridge.com. If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will promptly delete that information.
6. Education Savings Account Data
6.1 ESA-Specific Information
Given the nature of our marketplace, we may collect and process information related to your Education Savings Account, including:
- ESA program enrollment status and state of participation
- Types of services eligible under your specific ESA program
- Service booking history for ESA-funded services
- Provider ESA eligibility and compliance information
6.2 Handling of ESA Data
We treat ESA-related data with heightened care and handle it in accordance with applicable state education privacy laws and regulations. ESA data is:
- Used solely for the purpose of facilitating connections between families and eligible educational service providers
- Not shared with third parties for marketing or advertising purposes
- Stored securely and accessible only to authorized personnel
- Subject to all applicable state and federal privacy protections related to education records
6.3 State Program Compliance
Class Bridge endeavors to comply with the privacy and data handling requirements of each state ESA program in which we operate. If specific state regulations impose additional data protection requirements, we will adhere to those requirements for users in the applicable state.
8. Data Retention
We retain your personal information for as long as reasonably necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting obligations.
Specific retention periods include:
- Active Accounts: Account information and profile data are retained for the duration of your account's active status.
- Closed Accounts: Upon account closure, we may retain certain information for up to 36 months to comply with legal obligations, resolve disputes, and enforce our agreements.
- Booking Records: Records of bookings and transactions may be retained for up to 7 years for tax, legal, and regulatory compliance purposes.
- Messages: Messages are retained for the duration of the relevant accounts' active status and may be retained for up to 12 months following account closure.
- Usage Data: Aggregated and anonymized usage data may be retained indefinitely for analytics and service improvement purposes.
When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data handling procedures.
9. Your Rights
Depending on your jurisdiction, you may have certain rights regarding your personal information. These may include:
9.1 Right of Access
You have the right to request a copy of the personal information we hold about you. We will provide this information in a commonly used, machine-readable format within a reasonable timeframe.
9.2 Right of Correction
You have the right to request that we correct any inaccurate or incomplete personal information. You can update most of your information directly through your account settings, or you may contact us for assistance.
9.3 Right of Deletion
You have the right to request the deletion of your personal information. We will comply with deletion requests unless we are required to retain the information for legal, regulatory, or legitimate business purposes.
9.4 Right to Restrict Processing
In certain circumstances, you may request that we restrict the processing of your personal information, such as when you contest the accuracy of the data or object to our processing.
9.5 Right to Data Portability
Where technically feasible, you may request that we transfer your personal information to another service provider in a structured, commonly used format.
9.6 Exercising Your Rights
To exercise any of these rights, please contact us at hello@classbridge.com. We will respond to your request within 30 days and may ask for verification of your identity before processing the request. We will not discriminate against you for exercising any of your privacy rights.
10. Third-Party Services
Our Service relies on and integrates with certain third-party services. While we carefully select our partners, each has its own privacy practices:
10.1 Netlify Platform
Class Bridge is built on and hosted by the Netlify platform. Netlify provides our hosting infrastructure, identity and authentication services (Netlify Identity), and serverless functions. Information processed through Netlify is subject to Netlify's Privacy Policy.
10.2 Anthropic AI
Our Service may include an AI-powered chatbot feature provided by Anthropic. When you interact with the chatbot, your messages may be processed by Anthropic's systems to generate responses. Chatbot interactions are governed by Anthropic's Privacy Policy. We recommend reviewing their policy to understand how your data is handled during chatbot interactions.
10.3 Other Third-Party Links
The Service may contain links to third-party websites, services, or resources that are not operated by Class Bridge. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through links on our platform.
11. Changes to Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Post the revised Privacy Policy on the Service
- Where appropriate, notify you via email or through a prominent notice on the Service prior to the changes taking effect
Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy. If you do not agree with the revised policy, you should discontinue your use of the Service.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
12. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: hello@classbridge.com
- Website: classbridge.com
For privacy-specific inquiries, please include "Privacy" in the subject line of your email so we can direct your request to the appropriate team. We aim to respond to all privacy-related requests within 30 days.