Privacy Policy

Classmax helps students study smarter by syncing their Learning Management System (LMS) data into an AI study companion. This policy explains what we collect, what we do with it, and what we will never do.

What we collect

• Account info: your email address, display name, and (optionally) your institution.
• LMS course data: course names, assignments, due dates, announcements, and material titles synced from your LMS when you connect it.
• Documents you bring into chat: when you ask the AI about a specific reading or brief, we read that document to answer your question. We store the extracted text so future questions can reference it without re-reading the source.
• Chat history: your conversations with the Classmax AI, so you can come back to them later.
• Basic usage analytics: anonymized event data (page views, feature usage) so we can improve the product. We do not link this back to identifiable users.

What we don't do

• We don't sell your data, ever.
• We don't train AI models on your data.
• We don't share your data with your school or instructors.
• We don't share your data with other users. Every database table is protected by row-level security tied to your account.
• We don't read or store your LMS password.

How sync works

The Classmax browser extension reads your LMS pages while you're already logged in, the same way the page is rendered for you. We never see your LMS password. The extension sends only the structured course information (names, dates, briefs) to our servers, encrypted in transit.

How the AI uses your data

When you chat with Classmax, your message and relevant course context are sent to large language model providers (currently OpenAI and Anthropic) to generate a response. These providers process the request to produce an answer and do not retain or train on your data per their enterprise data policies. We do not send your chats to any other third party.

Your rights

You can export or permanently delete all of your data at any time from your account settings. When you delete your account, we remove your data within 30 days. If you're in a region with GDPR or similar rights (UK, EU), you can also request access, correction, or restriction. Email privacy@classmax.ai .

Security

All data is stored in encrypted Supabase Postgres databases. Access is enforced with row-level security policies. Your account can only ever read or write your own rows. Connections to and from our backend use HTTPS/TLS.

Contact

Questions about privacy? Email privacy@classmax.ai .