Privacy Policy

ClassHarbor is a classroom-management tool for teachers. Students never create accounts or use the app directly. Every piece of classroom information in the app is entered, owned, and controlled by the teacher (or school) who created the account.

When a school or district licenses ClassHarbor, we act as a processor of education records on the school’s behalf, following the school’s instructions. When an individual teacher signs up, the teacher controls their own data and is responsible for using it in line with their school’s policies.

• Account information: your name, email address, and sign-in credentials. Passwords are handled exclusively by our managed authentication provider and are never visible to us.
• Classroom information you enter: student names, parent/guardian names, email addresses, and phone numbers, attendance and absence records, behavior records, learning supports and profile notes, gradebook records, schedules, seating assignments, class jobs, parent communication logs, and conference bookings.
• Parent-submitted information: when a parent uses a conference booking link you send, we collect the email they use to verify and the slot they choose — nothing more.
• Payment information: checkout is handled by Stripe. Card numbers never touch our servers. We store only your subscription status and plan.
• Technical information: essential cookies that keep you signed in, and privacy-safe product analytics (event counts with no student or parent personal information). Analytics can be disabled.

Classroom data is collected in three ways: information you type into the app, rosters you import from your own CSV or spreadsheet files, and details parents submit through your private conference booking links. We do not scrape, buy, or combine data from outside sources.

You (and, where applicable, your school or district) own all classroom data you store in ClassHarbor. We claim no ownership of your content and use it only to provide the service to you.

Your records are isolated to your account. Access is enforced on the server for every request, so no other teacher can ever read, change, or delete your classroom data — and we do not view your records except as strictly needed to operate, support, or secure the service.

Parents who receive a conference booking link can see only their own child’s booking details, and only after verifying their email against the invite.

All traffic to and from ClassHarbor is encrypted in transit, and stored data is encrypted at rest. Sign-in is managed by a dedicated authentication provider with one-time-code email verification, and Google sign-in is available. Conference booking links are token-gated, stop working automatically a week after the conference date, and stop working immediately when you revoke them.

We apply least-privilege access internally: no team member has routine access to classroom records, and any access needed for support or security is limited to what the task requires.

Operational secrets — payment credentials, email-signing keys, and other integration keys — are held in a managed, access-controlled secrets store on the server side. They are never embedded in the app’s public code, never sent to your browser or device, and never exposed in logs. Conference invite links are protected by unguessable single-use tokens combined with email verification, so a forwarded link cannot be used by anyone else.

We use a small set of established providers, and only these receive data — each receives only what its job requires:

• Stripe — payment processing. Receives your email and subscription details. Governed by Stripe’s privacy policy.
• Google Calendar — only if you choose to connect your own account, to sync conferences you ask us to sync. You can disconnect at any time.
• Our email delivery provider — receives the addresses you send conference invites and confirmations to.
• Our AI language-model provider — receives only the classroom text you explicitly ask us to draft from (for example, when you request a report card comment draft). See the AI features section below.
• Our hosting and storage provider (Base44/Wix infrastructure) — stores the app’s databases and files.

We never sell, rent, or trade your data, and we do not share it with advertisers, data brokers, or any other third party. Our providers are permitted to process data only to deliver the service, and we do not use classroom data to build profiles of students.

ClassHarbor includes optional AI assistance: it can draft report card comments from the sources you choose to give it — a student’s profile notes, learning supports, behavior summaries, and your own comment bank phrases. The AI sees only what you send for that single request, and the draft is shown to you before anything is saved.

Your classroom data is never used to train or improve AI models, and AI is never used to make decisions about a student. It does not grade, score, or evaluate anything on its own.

AI drafting is optional and off by default: it requires your explicit consent before first use, and every AI generation is recorded in an internal audit log you can review on request. AI output is a starting point, not a final judgment. The teacher remains the professional of record: every AI-generated draft should be reviewed and edited in conjunction with your own professional assessment of the student, and used only where it aligns with your school’s policies. Nothing AI-generated is sent to parents, recorded in official documents, or synced anywhere unless you choose to use it.

ClassHarbor displays no advertisements, participates in no ad networks, and uses no cross-site tracking or web beacons for advertising. There is nothing to opt out of because your data is never shared for marketing.

We set only the cookies needed to keep you signed in and keep the app secure. We do not use advertising or third-party tracking cookies, so your browser’s cookie controls work without affecting any features.

We keep your classroom data only while your account is active. You can delete individual students, records, or entire classes at any time from within the app, and you can download a copy of all of your data at any time from the Settings screen.

When you request account deletion from the Settings screen, we give you a 7-day recovery window in case of a mistake or a change of heart. After that window, every classroom record, parent contact, behavior record, schedule, and conference associated with your account is permanently and irreversibly purged.

ClassHarbor is designed to support schools under FERPA’s school official exception: we perform an institutional service, use education records only for the educational purpose the school intends, and never re-disclose or use them for any other purpose. Schools and districts that need a written Data Privacy Agreement (DPA) can request one — we’re happy to sign.

ClassHarbor is a professional tool and is not directed to children under 13. We do not knowingly collect personal information directly from students. All student information in the app is entered and controlled by the responsible teacher or school.

If we make material changes to this policy, we will notify you in the app or by email before the change takes effect. The current version is always available at classharborapp.com/privacy.

Questions about privacy, a school data review, or a DPA request? Reach us at hello@classharborapp.com and we’ll respond promptly.