Legal
Privacy Policy
Effective Date: April 1, 2026
This Privacy Policy explains how ClassSync collects, uses, stores, shares, and protects personal data when you use the ClassSync platform, website, and related services.
Philippine privacy-law approach
ClassSync is based in Aparri, Cagayan, Philippines and aims to handle personal data in a manner consistent with the Data Privacy Act of 2012, its implementing rules, and applicable issuances of the National Privacy Commission, to the extent they apply to the relevant processing activity.
Our privacy approach is guided by transparency, legitimate purpose, and proportionality. In practice, this means we aim to explain relevant processing clearly, use data for specific and lawful platform or academic-service purposes, and limit processing to what is reasonably necessary for those purposes.
What data we may collect
Depending on how ClassSync is used, we may collect account information such as names, email addresses, role assignments, and institution associations.
We may also process academic and student-related data such as student names, student numbers, contact details, classlists, grades, engagement records, exports, and related workflow data.
We may collect contact form submissions, support messages, technical logs, browser or session data, and inputs or outputs associated with AI-assisted features.
How we use personal data
We use personal data to operate, maintain, secure, and improve ClassSync; manage accounts and permissions; support academic workflows; respond to inquiries; and monitor abuse, security, and service reliability.
Where AI-assisted features are used, data may be processed to generate summaries, recommendations, or other assistive outputs, as well as to maintain or troubleshoot those features.
Institution-managed accounts and student data
Many ClassSync accounts and records are managed by instructors, schools, departments, or institutions. In those cases, the relevant institution or instructor may determine what data is entered into the platform, who receives access, and when records are updated or deleted.
Student accounts are not intended for unrestricted direct self-signup. Student access is expected to be created, invited, or authorized by an instructor or institution.
Where minors or student records are involved, the relevant instructor or institution is responsible for ensuring that use of the platform is authorized and compliant with applicable law and policy.
Sharing and third-party services
We may share personal data with service providers who help us operate ClassSync, including hosting, email, security, payments, analytics, or infrastructure providers, only as reasonably necessary for those services.
We may also share data with the instructor, department, school, or institution that manages the relevant account or academic workflow, and with lawful authorities where required by law or legal process.
ClassSync does not sell personal data as part of the normal operation of the platform.
Retention and security
We retain data only for as long as reasonably necessary for service delivery, security, support, legal compliance, backups, dispute resolution, and enforcement.
School-managed or institution-managed data may be retained until the relevant institution, department, or authorized administrator requests deletion, unless retention is required by law or a separate agreement.
We use reasonable and appropriate administrative, technical, physical, and organizational safeguards to protect personal data, but no system can guarantee absolute security.
Where an incident rises to the level of a notifiable personal-data breach under applicable law, we will assess the event, take containment and remediation steps, and provide notice where required.
Your requests and contact information
Depending on applicable law and the nature of the account relationship, you may request access, correction, deletion, objection, restriction, or other action regarding your personal data.
Where Philippine privacy law applies, this may include the right to be informed, the right to object, the right to access, the right to correct, the right to erasure or blocking where legally available, and the right to data portability where applicable.
If your data is controlled by an instructor, department, school, or institution through an institution-managed account or academic workflow, you may need to direct your request first to that instructor or institution.
For privacy questions or requests, contact ClassSync Support at support@classsync.app.