Privacy Policy
Effective Date: February 25, 2026 | Last Updated: September 16, 2026
CordiaClassroom ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the CordiaClassroom Chrome extension and web platform (collectively, the "Service"). Please read this policy carefully. By using the Service, you agree to the practices described herein.
1. Information We Collect
a. Account Information
When you create an account, we collect your email address and a hashed password. We do not store plaintext passwords.
b. Page Content
When you ask the Chrome side panel to capture a page, bounded visible study content is transmitted to our servers for AI processing. The most recent normalized capture, page title, and source URL are stored in your private Tutor session so the same Tutor can continue in CordiaClassroom. A capture may also be retained as study material when you choose to save it.
If you connect a Canvas calendar feed, its private feed link is stored with your Classroom account so deadlines can reconnect automatically. It is used only by authenticated Classroom calendar routes, is never returned to the browser after saving, and is deleted when you disconnect the calendar.
c. Generated Study Materials
Study guides, notes, and flashcards you generate are stored in our database associated with your account so you can access them through the platform.
d. Usage Data
We track monthly complete study builds and lightweight AI actions per account to enforce plan limits. We do not collect detailed analytics, browsing history, or behavioral tracking data.
e. Payment Information
Payments are processed by Stripe. We do not collect or store your full credit card number, card verification code, or bank account details. Stripe provides us with a customer identifier and subscription status. Stripe's privacy policy governs their handling of your payment data and can be found at stripe.com/privacy.
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service
- Generate AI-powered study materials from content you capture
- Authenticate your account and maintain your session
- Enforce free and paid plan usage limits
- Process subscription payments and manage billing
- Respond to support requests or inquiries
- Improve the reliability and performance of the Service
We do not use your content or personal data for advertising purposes, and we do not sell your data to third parties.
3. How We Share Your Information
We do not sell, trade, or rent your personal information to third parties. We may share data only in the following limited circumstances:
- Service Providers: We use trusted third-party providers to operate the Service, including Supabase (database and authentication), OpenAI (AI content generation), Stripe (payment processing), and Fly.io (backend hosting). These providers are contractually obligated to protect your data and may only use it to perform services on our behalf.
- Legal Requirements: We may disclose your information if required to do so by law, regulation, or valid legal process (e.g., a court order or subpoena).
- Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change via email or a prominent notice on our platform.
4. Data Retention
We retain your account information and generated study materials for as long as your account is active. The most recent bounded, normalized page capture and its source metadata are retained in your private Tutor session until a later capture replaces them or your account is deleted. Study material you choose to save is retained with your account. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
5. Chrome Extension — Data Practices
The CordiaClassroom Chrome extension:
- Reads page content only when you start a capture or explicitly ask the Tutor to capture the current page
- Sends a presence signal while the side panel is open so Classroom can show whether browser capture is available; that signal does not include the current URL or page title
- Does not monitor or collect your browsing history. The title, source URL, and bounded page context are sent only for the page you choose to capture
- Does not transmit browser cookies, passwords, form credentials, or unrestricted browser history
- Stores your authentication token locally using Chrome's storage API so you remain logged in between sessions
- Sends extension data only to the CordiaClassroom API; the service providers listed above may process that data to provide the requested feature
6. Cookies and Local Storage
The CordiaClassroom web platform uses browser local storage to maintain your authenticated session. We do not use third-party tracking cookies or advertising cookies. No cross-site tracking is performed.
7. Security
We implement industry-standard security measures to protect your data, including HTTPS encryption for all data in transit, hashed password storage, and access controls on our database. However, no method of transmission over the internet or electronic storage is 100% secure. We encourage you to use a strong, unique password for your account.
8. Children's Privacy
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will promptly delete it.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your personal data
- Object to or restrict certain processing of your data
- Data portability (receive a copy of your data in a structured format)
To exercise any of these rights, please contact us at the email address below.
10. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies independently.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page. If changes are material, we will notify you by email or by posting a prominent notice on the platform. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
CordiaClassroom
Email: support@cordiaai.io
Website: https://classroom.cordiaai.io
