Privacy Policy
Last updated: [CONFIRM: effective date]
This policy explains what personal data Classis.AI collects, why, who processes it, how long it is kept and what rights you have. Classis.AI is operated by Wings2Aspirations Startup India Pvt Ltd ("we", "us"). Registered address: [CONFIRM: registered office address]. Contact: support@classis.ai.
Classis.AI has two parts: courses (AI-generated courses with assessments and certificates, for signed-in users) and the Tutor (Meera Didi, Arjun Bhaiya and Chintu). The Tutor can be used signed in at /tutor or without an account at /try.
1. What we collect and why
1.1 Your account (signed-in users)
Sign-in is provided by Microsoft Entra External ID. When you first sign in we create an account record with your email address, your name (from your sign-in, or derived from your email if no name is given), an internal account ID, your role and plan, the date you joined and when you last signed in. The record also stores flags that you agreed to the terms, this policy and AI processing, with a timestamp. [CONFIRM: these flags are set automatically when the account is created; confirm the sign-up screen shows the terms and this policy and asks for agreement]
1.2 Your learning profile for courses (onboarding)
To generate a course for you we ask for: name, age, gender, country, profession or role, education or current level, learning goal, learning style, topic of interest, preferred language and course length. We use these only to personalise the courses, lessons, assessments and course chat we generate for you, and they are sent to our AI provider for that purpose (see section 3).
1.3 Courses, progress and certificates
We store the courses generated for you, your enrolments, progress, quiz results, bookmarks and notes so you can return to them. When you complete a course we issue a certificate. A certificate can be checked by anyone who has its verification link or ID: the public check shows the name on the certificate, the course title and code, the issue date, its status, the skills and completion details.
1.4 The signed-in Tutor (/tutor)
- Tutor progress, for every age: the class, subject, topic, the character you picked (avatar) and the conversation with the tutor (up to the most recent 400 messages). We keep this so the learner can continue where they left off.
- Learning profile (adults only): for a learner whose saved age is 18 or over, the tutor may keep a short note of what felt easy or hard and how they like explanations. For anyone under 18, or when no age is saved, this is not kept and is removed if present.
- Parent or guardian declaration: see section 5.
- Tutor credits: your credit balance and a ledger of credits granted for payments.
1.5 The free Tutor without an account (/try)
- Device ID: your browser creates a random ID and keeps it on your device. We use it to count the free questions used each day. It is not linked to your name or email unless a parent signs up for weekly reports (below).
- Network address (IP): used to limit the number of free questions per network per day and to prevent abuse. The per-network daily counter is deleted automatically after 3 days.
- The conversation: kept on your device (your browser's storage), not on our servers, unless a parent has confirmed weekly reports. Each question is sent to our AI provider to produce the answer.
- First name (optional): if entered, it is used so the tutor can address the learner. It is sent with requests and is not stored on our servers, except in a parent's weekly-report sign-up. [CONFIRM: confirm no other server-side storage of the first name]
- Voice questions: if the learner asks by voice, the recording is sent to our speech-to-text provider to turn it into text. We do not store the recording.
- Plus waitlist (optional): a parent's email or mobile number, if left, so we can say when Plus opens.
1.6 Weekly reports for parents (optional, /try)
A parent or guardian can ask for a weekly email summary. We collect the parent's name and email, the child's first name, class and report language, and record which version of the consent text they agreed to. We send a confirmation email and do nothing more until the parent clicks the link (valid for 7 days). After confirmation we keep a log of the most recent 80 questions the child asks on that device (class, subject, chapter, the question and the start of the tutor's answer). Once a week an AI summary of the log is emailed to the parent. Every report has a link to stop the reports. Using it deletes the saved questions and the parent's email address.
1.7 Payments and invoices
Payments are handled by our payment gateways (section 3). We never receive or store card numbers, UPI PINs or bank passwords. We store a record of each transaction: your account ID, name and email, the amount, what was bought (a course or a tutor credit pack), its status and the gateway's reference. For a GST tax invoice we collect a billing address and, if you give one, a GSTIN. Invoices are emailed to you.
1.8 Analytics and measurement
Google Analytics 4 and the OpenAI (ChatGPT) Ads measurement pixel load only on the course site at the homepage address (/). That page also hosts the signed-in course views (dashboard, course, lessons and checkout opened from there). They measure visits, sign-ups and course purchases.
They are never loaded on any Tutor page: not on /tutor, /tutor/start, the signed-in Tutor, /try or the lesson pages under /tutor/lessons/. Opening the Tutor from the course site loads a fresh page without them. They are also not loaded on /payment/success, /payment/failure, these legal pages, or the homepage when you return from signing in to the Tutor. [CONFIRM: the cookies and identifiers GA4 and the pixel set on the homepage, and whether IP anonymisation or consent mode is used]
1.9 Storage on your device
| What | Where | Why |
|---|---|---|
| Sign-in tokens (Microsoft sign-in library) | localStorage and sessionStorage | Keep you signed in |
| Lesson and quiz cache, tutor preferences, page to return to after sign-in, a chosen course track | sessionStorage (cleared when the tab closes) | Avoid regenerating content and return you to the right page |
| Free Tutor state: device ID, recent messages, lesson cards and history | localStorage (classis_try_v1) | Continue the free Tutor on this device |
| Gold lesson progress and "tomorrow's question" | localStorage | Remember progress on this device |
| Microsoft sign-in cookies | Cookies on the sign-in domain | Sign-in |
| Analytics and measurement cookies, homepage (/) only, never on Tutor pages (section 1.8) | Cookies | Course-site measurement. [CONFIRM: list of cookie names] |
2. Safety and moderation
AI requests go through our AI provider's content filtering. The tutor is instructed not to ask for or repeat personal details (full name, address, phone, school, photos) and to steer back to studies. We apply rate limits per device, per network and per account. [CONFIRM: whether flagged or filtered content is logged or reviewed by staff]
3. Who processes your data
| Processor | What for |
|---|---|
| Microsoft Azure | Website hosting (Static Web Apps), our API (App Service, Central India region), database (Cosmos DB), file storage (Blob Storage: certificates and cached tutor audio), sign-in (Entra External ID), email (Azure Communication Services), AI text generation, speech-to-text and content filtering (Azure OpenAI) [CONFIRM: Cosmos DB and Azure OpenAI regions] |
| Voices of the tutor characters (Gemini text-to-speech); Google Analytics on the homepage only (section 1.8) | |
| OpenAI | Ads measurement pixel on the homepage only (section 1.8) |
| Razorpay, Cashfree | Payments for courses and tutor credit packs |
| PayU | Course payments (built in, currently switched off at checkout) |
| Backup voice providers | Used only if the main voice fails for a line: the code supports Azure OpenAI, Azure AI Speech, Sarvam, ElevenLabs and OpenAI. [CONFIRM: which of these are configured in production] |
Text the tutor speaks is sent to the voice provider. For chat replies this text may include the learner's first name. Generated audio is cached in our storage and reused. [CONFIRM: retention period for cached chat audio, which has no expiry in the code] [CONFIRM: cross-border transfers: Google and OpenAI process outside India]
We do not sell personal data. We do not show advertising inside the product.
4. How long we keep data
| Data | Kept for |
|---|---|
| Per-network (IP) and per-device daily counters | Deleted automatically after 3 days |
| Tutor credit ledger | 3 years |
| Parent weekly-report log | The most recent 80 questions, until the parent stops reports (then deleted) |
| Email confirmation and stop links | Expire after 7 days (confirmation) and 30 days (stop link in each report) |
| Account, profile, courses, progress, certificates, tutor progress | Until you ask us to delete them. No automatic deletion. [CONFIRM: retention period for inactive accounts] |
| Free Tutor device record (daily count, Plus pass, waitlist contact) | No automatic deletion. [CONFIRM: retention period] |
| Transactions and tax invoices | For the period Indian tax law requires. [CONFIRM: exact period] |
5. Children (under 18)
Under India's Digital Personal Data Protection Act, 2023, anyone under 18 is a child.
- Parental consent, signed-in Tutor: if the saved age is under 18, a parent or lawful guardian must agree before the first tutor session. We record the parent's name, the child's name, that they are the parent or guardian, and the time. This is a declaration: we do not check it against a government identity record. [CONFIRM: verifiable parental consent under the DPDP Rules: whether a declaration is enough, and the case where no age is saved, which does not trigger the declaration today]
- Parental consent, free Tutor: no account and no personal details are needed. We store nothing about the child's conversations unless a parent confirms weekly reports by email (double opt-in, section 1.6).
- No learning profile: for under-18s, or when no age is saved, we do not keep a profile of what feels easy or hard or how they like explanations.
- No behavioural tracking or targeted ads: we do not build behavioural profiles of children or show them targeted ads. No analytics or advertising tags load on any Tutor page, including the signed-in Tutor (section 1.8).
- Progress is saved: we keep the tutor progress (class, subject, topic, character and conversation) so the learner can continue.
- To withdraw a declaration or consent, email support@classis.ai, or use the stop link in a weekly report.
6. Your rights
You can ask to access a copy of your data, correct it, delete it, or withdraw consent, and you can nominate someone to exercise these rights for you. Write to support@classis.ai. There is no self-service delete button today. Some records, such as tax invoices, must be kept by law. [CONFIRM: response timeline]
Grievance Officer
Name: [CONFIRM: Grievance Officer name]
Email: support@classis.ai [CONFIRM: dedicated grievance email, if any]
Address: [CONFIRM: postal address]
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
7. Security
Data is sent over HTTPS. Access to the API needs a valid sign-in token. Payment webhooks are checked by signature. [CONFIRM: encryption at rest, access controls and breach-notification process]
8. Changes
We will post changes on this page and update the date at the top. [CONFIRM: how users are told of material changes]
Classis.AI home · Privacy · Terms · Tutor · support@classis.ai · LinkedIn