Privacy policy
What we collect and why
| Data | Why | Kept |
|---|---|---|
| Sign-in links and alert copies. There is no password. | Until you delete your account | |
| School, major, catalog year | Which classes and degree rules to show you. | Until you change or delete it |
| Courses you have taken (subject, number, title, credits, grade, term) | Prerequisite checks, degree progress, the 4-year plan. | Until you delete it |
| Requirements still needed (from a Degree Works audit) | Your personal degree plan. | Until you delete it or upload a newer audit |
| Watched sections, saved plans, alerts | The alerts themselves. | Until you remove them |
| Push subscription (a browser endpoint and keys, if you turn notifications on) | Sending alerts to your device. | Until you turn notifications off |
| Your two sharing choices | So we honor them. | Until you change them |
| Reviews you post | Shown to other students without your name. | Until you delete your account |
Uploaded files
When you upload a transcript, Degree Works audit or (with Fast) a syllabus we extract the text, read the course rows and requirement lines, save those, and discard the file. We do not keep your student ID, address, birth date or anything else on the page.
Building majors we can't read from the catalog. When your major isn't in our catalog data, the requirement lines on your Degree Works audit (for example "1 class in ACCT 2101 or 2102") are added to an anonymous count for your school and major, so the major can be offered to other students. Only the requirement itself and how many audits listed it are counted: never your name, email, account, the courses you've taken, your grades or the file. A major and its requirements appear only after at least 3 different students' audits list them.
Transfer matches. When a transcript or audit shows that a transfer course came from another school (for example "ENG 101 from Georgia Perimeter College counted as ENGL 1101"), we add one to an anonymous count of that course pairing, so other students can see how courses transfer. Only the two schools, the two course codes and the count are kept: never your name, email, account, grades or the file. A pairing is shown only after at least 2 different records include it.
If our quick parser isn't confident it read everything, the text of the document (with identity lines removed) is sent to an AI service (Anthropic) to be read. For Fast members this happens right away. For free members the text is held for up to one day and sent in a nightly batch, then deleted from our servers as soon as the result comes back. A syllabus is read by the AI service right away and only the dates you choose to keep are saved. Anthropic does not use this text to train models under the terms we use.
Things we never do
- We never sell or share your transcript, grades, GPA or Degree Works audit, to anyone, for any purpose.
- We never ask for or store your school portal password, and we never register you for classes.
- We never share your email or name with a partner unless you tap a partner offer and choose to apply.
Your two choices (off by default)
Share anonymous course trends with schools. If on, your watches, saved plans and course demand are included in aggregate statistics we may provide to schools and researchers, such as "this section filled in 4 minutes" or "demand for MATH 1554 at 8 AM". These never include your name, email, grades or anything that identifies you, and we only report groups large enough that no one can be picked out.
Show me offers from partners. If on, we may show offers (student credit cards, banking, internships) inside the app chosen for your school and year. We share your contact details with a partner only when you tap an offer and ask to apply. We may receive a referral fee. Offers are not shown to anyone under 18, and credit-card offers follow the federal rules for people under 21.
Both switches live in Plan → Your data, and changes take effect immediately.
Who else sees data
- Hosting (Render) stores the database. Email delivery (Resend) sends sign-in links and alert copies. Stripe handles payment for Fast; we never see your card number. Anthropic reads document text as described above. Each acts only on our instructions.
- Your school's public class listings are read by our servers; your school never learns who uses ClassMaxx from us.
- We disclose information if the law requires it, and we will tell you unless we are legally prevented from doing so.
Your rights
You can see, download, correct and delete your data from inside the app at any time: Plan → Sign out clears this device, and Settings → Delete account and data removes everything on our servers immediately. If you are in California or another state with a privacy law, these are the same tools you would use to exercise your rights to access, delete and opt out of sale or sharing; we do not sell personal information, and the sharing switch above is your opt-in, not opt-out. You can also email privacy@classmaxx.com.
Age
ClassMaxx is for college students. We do not knowingly keep data from anyone under 13, and partner offers are never shown to anyone under 18.
Security
Sign-in links expire in 15 minutes and work once. Sessions are stored as hashes. Traffic is encrypted. Uploaded files are processed in memory and never written to disk.
Changes
If this policy changes in a way that affects you, we will show a notice in the app before it takes effect.