Privacy Policy

1. Scope and who we are

This Privacy Policy describes how Classmade, operated by Grid Creative Advertising Inc., handles personal information when people use Classmade, a Classmade-powered storefront, seller tools, buyer services or support.

A Seller is independently responsible for personal information the Seller collects or uses outside Classmade and for any legal obligations that apply to the Seller’s own business. This Policy covers Classmade’s processing, not a Seller’s separate website, mailing list or offline records.

2. Information we collect

Seller information can include name, email address, account and store details, uploaded content, support communications, plan and payout status, transaction records and information returned by payment or infrastructure providers that is needed to operate the service.

Buyer information can include email address, order history, download and library records, support communications, marketing-consent status and limited payment metadata returned by Stripe. Classmade does not store full card numbers.

We process limited technical information needed for security, rate limiting, fraud prevention, authentication, delivery and service reliability. Depending on the feature, this can include an IP address or request metadata. Our Plausible analytics integration is configured without advertising cookies and is designed not to send names, email addresses, URLs containing personal data or file names as analytics properties.

If an enabled AI feature is used, the prompt, selected context and generated output needed to provide that feature may be processed by the configured AI provider. Do not submit student data or sensitive personal information to AI features.

3. Why we use information

We use information to create and secure accounts, operate storefronts, process and reconcile orders, deliver downloads, support Sellers and Buyers, send transactional communications, administer plans and payouts, prevent fraud and abuse, enforce our rules, comply with legal obligations and improve Classmade.

Where marketing communications require consent, we use the consent or other legal basis that applies to that communication and provide an unsubscribe method. Transactional messages such as receipts, security notices and download links are not treated as marketing merely because they are sent by email.

4. Student and child information

Classmade seller and buyer accounts are intended for adults and organizations, not students or minors operating their own accounts. Sellers must not upload identifiable student information, education records, student photos, grades, IEP information, health information or other student personal data to Classmade or place it in AI prompts.

If you believe a child’s or student’s personal information has been submitted to Classmade, contact hi@classmade.co so we can review and take appropriate steps. We may remove the information or restrict the account while we investigate.

5. How information is shared

We share information with service providers only as reasonably needed to operate Classmade. Current categories include Supabase for database, authentication and storage; Vercel for hosting and delivery; Stripe for payments and payouts; Resend for email delivery; Plausible for privacy-focused analytics; and the configured AI provider when an enabled AI feature is used.

When a Buyer purchases from a Seller, the Seller receives order information reasonably needed to identify, support and account for the transaction. Sellers must use that information only for lawful business purposes and in accordance with their own obligations.

We may disclose information when required by law, legal process or a valid government request, or when reasonably necessary to investigate fraud, security incidents, infringement, threats to safety or serious misuse. We may also transfer information as part of a merger, financing, acquisition, reorganization or sale of all or part of the business, subject to applicable privacy requirements.

Classmade does not sell personal information for money. We do not authorize Sellers to use buyer order information for unrelated marketing without an appropriate legal basis.

6. International processing

Classmade and its providers may process information in countries other than the country where you live. Privacy and government-access rules can differ between countries. Where applicable law requires particular safeguards for international transfers, we will use the safeguards required for the relevant processing.

7. Retention

We keep personal information only for as long as reasonably needed for the purposes described here, including providing the service, maintaining purchase access, resolving disputes, preventing fraud, meeting tax, accounting and legal obligations and protecting the integrity of our records.

Account or store deletion does not necessarily erase every record immediately. Completed transaction, audit, suppression, dispute and legally required accounting records may need to be retained. Backups and provider systems can also retain limited copies for a period before normal deletion cycles complete.

8. Your choices and rights

You can update certain account and store information in Classmade. You can unsubscribe from marketing using the link provided in those messages. You can also ask us about access, correction, deletion or another privacy right by contacting hi@classmade.co.

The rights available to you depend on the law that applies to the processing and may be subject to lawful exceptions, identity verification, record-retention duties or the rights of other people. We will not require you to provide more information than reasonably necessary to verify and process a request.

9. Security

We use administrative and technical safeguards appropriate to the nature of the service, including encrypted transport, access controls, tenant isolation, private file storage and signed download links. No internet service can guarantee absolute security. If you believe your account or personal information is at risk, contact us promptly.

10. Changes to this Policy

We may update this Policy when our product, providers or legal obligations change. We will update the date on this page and provide additional notice or seek consent when applicable law requires it for a material change.

11. Contact

Privacy questions and requests can be sent to hi@classmade.co.