Privacy policy

This policy explains what ClassPilot AI collects, why, and the choices you have. ClassPilot AI is used by students, including students under 18, so we try to collect as little as we can.

Who can use ClassPilot

You must be at least 13 years old to create an account. If you are under 18, a parent or guardian should know you are using ClassPilot. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.

What we collect

• Account details: name, email address, a hashed password and your time zone.
• Schoolwork you add or sync: classes, assignment titles, instructions, due dates, points and submission status.
• Files you upload: we extract and store the text. The original file is not kept.
• Work you create: drafts, outlines, study sets, their version history and requirement checks.
• Preferences: writing style, study hours and other settings you choose.
• Google data, if you connect it: read-only access to your Classroom classes and coursework, plus your Google email address. Access tokens are encrypted. We never see your Google password.
• Usage and security records: counts of AI requests for plan limits, and basic security logs such as sign-ins. We don't log the content of your work in these records.
• Payments: handled by Stripe. We store your plan and subscription status, not your card number.

How we use it

• To run the features you use: organizing assignments, planning, Autopilot, checks and exports.
• To send your assignment text to our AI provider when you use an AI feature, so it can produce a response. We use providers whose terms do not allow them to train on this data. [Confirm provider terms before launch.]
• To enforce plan limits and keep the service secure.

We do not sell personal information. We do not use student data for targeted advertising. We do not build profiles of students beyond the preferences you set.

Google user data

ClassPilot's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google data is used only to show and organize your coursework inside ClassPilot. [Complete Google's OAuth verification before public launch.]

Sharing

We share data only with service providers that help run ClassPilot (hosting, database, AI processing, payments), under agreements that limit their use of it, or when the law requires it.

Retention and deletion

Your data stays while your account is open. You can download it or delete your account from Settings. Deleting your account removes your data from our active database right away and revokes Google access. Demo accounts are deleted automatically after 3 days. Backups may hold data for a limited period. [Set and state the backup retention period.]

Security

Passwords are hashed. Google tokens are encrypted. Every request is checked so one account cannot read another account's data. No system is perfectly secure, and we will notify affected users of a breach as required by law.

Laws we are reviewing

Before commercial launch, this policy must be reviewed for the Children's Online Privacy Protection Act (COPPA), FERPA and state student privacy laws (for example California's SOPIPA) where they apply, state consumer privacy laws, and, if we serve users outside the United States, laws such as the GDPR. We do not yet claim compliance with any of them.

Contact

See the contact section on our About page.