1. Who we are
SuperClasse is an AI-assisted teaching platform. This policy explains what personal data we collect, why, and your rights regarding that data. For any privacy question, contact us at hello@superclasse.com.
2. What we collect
- Account data. Email address, name, and profile preferences you provide during sign-up and onboarding.
- Course content. Courses, teaching plans, sessions, and materials you create on the platform.
- API keys. Third-party AI provider keys you optionally add, stored encrypted.
- Usage data. Platform AI credit consumption (token counts) to enforce plan limits. No AI prompt content is logged for this purpose.
- Billing data. Subscription status and Stripe customer ID. Full payment details are held by Stripe, not us.
3. How we use it
We use your data solely to operate and improve SuperClasse:
- Providing and personalising the teaching and learning features.
- Managing your account, subscription, and AI credit usage.
- Sending transactional emails (account confirmation, billing receipts).
- Diagnosing issues and improving platform reliability.
We do not sell your data to third parties, and we do not use it for advertising.
4. API keys
API keys you add are encrypted with AES-256-GCM before storage. They are used server-side only to make requests to your AI provider on your behalf and are never returned in plain text via the API. You can delete them at any time from Settings → Account.
5. Third-party services
- Supabase. Database and authentication, hosted in the EU. Data is stored at rest with encryption.
- Stripe. Payment processing. Your card details are held by Stripe under their own PCI-compliant terms. We receive only a customer ID and subscription status.
- AI providers. When you use platform AI features, your prompts and content are sent to the relevant provider (OpenAI, Anthropic) to generate responses. Their data policies apply to that processing.
6. Data retention
We retain your account data for as long as your account is active. If you delete your account, personal data is removed within 30 days, except where we are required by law to retain billing records (typically 7 years for financial records).
7. Your rights
Under GDPR and applicable data-protection law, you have the right to:
- Access a copy of your personal data.
- Request correction of inaccurate data.
- Request deletion of your account and associated data.
- Object to or restrict certain processing.
- Request data portability in a machine-readable format.
To exercise any of these rights, email hello@superclasse.com. We will respond within 30 days.
8. Cookies
We use essential cookies only — session cookies required for authentication. No tracking, analytics, or advertising cookies are set.
9. Changes to this policy
We may update this policy. Material changes will be communicated by email or an in-app notice. The "last updated" date at the top reflects the most recent revision.