K
Klassor

Privacy Policy

Last updated: April 9, 2026

1. Introduction

Klassor (“we,” “us,” or “the Platform”) is a SaaS platform for security guard training schools. This Privacy Policy explains how we collect, use, store, and protect information when you use our services.

Klassor serves three types of users: school administrators (“Admins”), instructors, and students. This policy applies to all users of the Platform.

2. Information We Collect

Account Information

  • Name (first and last)
  • Email address
  • Password (stored as a one-way hash, never in plain text)
  • Role (admin, instructor, or student)
  • Organization/school association

Student Data (Collected by Schools)

Schools may collect and enter the following student information into Klassor:

  • Date of birth
  • Last four digits of Social Security Number (SSN)
  • Phone number
  • Mailing address

This data is collected by the School (not by Klassor directly) and is used for certificate generation, sign-in sheets, enrollment agreements, and compliance tracking as required by state regulations. Sensitive fields (SSN last 4, phone) are encrypted at rest using AES-256-GCM encryption.

Usage Data

  • Pages visited and features used
  • Browser type and device information
  • IP address
  • Timestamps of activity

Cookies

Klassor uses essential cookies for authentication (session management). We do not use third-party advertising or tracking cookies. Authentication cookies are httpOnly and SameSite-strict for security.

3. How We Use Information

We use the information we collect to:

  • Provide, maintain, and improve the Platform
  • Process subscription payments and student class payments
  • Generate certificates, sign-in sheets, and enrollment agreements
  • Track compliance status and send automated reminders
  • Send transactional emails (registration confirmations, class reminders, certificate delivery)
  • Provide analytics and reporting to school administrators
  • Respond to support requests
  • Detect and prevent fraud or abuse

4. Payment Processing

All payment processing is handled by Stripe, a PCI-compliant third-party payment processor.

  • Subscription payments (school billing) are processed by Stripe Billing. Klassor stores a Stripe customer ID and subscription ID but does not store credit card numbers.
  • Student payments (class registration fees) are processed via Stripe Connect. Funds go directly to the School's connected Stripe account.
  • Klassor never stores, transmits, or has access to full credit card numbers, CVVs, or bank account details.

For more information, see Stripe's Privacy Policy.

5. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

  • Stripe. Payment data is shared with Stripe for processing transactions.
  • Email delivery. Email addresses and message content are shared with our email service provider (Resend) to deliver transactional emails.
  • Cloud hosting. Data is stored on cloud infrastructure providers that maintain industry-standard security certifications.
  • Image hosting. Uploaded images (logos, gallery) are stored on Cloudinary.
  • Legal requirements. We may disclose information if required by law, regulation, or legal process.

Within the Platform, student data entered by a School is accessible only to that School's administrators and instructors. Klassor's multi-tenant architecture ensures that organizations cannot access each other's data.

6. Data Retention

  • Account data is retained while your account is active.
  • Student records, certificates, and compliance data are retained as long as the School's account is active, consistent with regulatory record-keeping requirements.
  • If a School closes its account, data is retained for 90 days to allow retrieval, then permanently deleted.
  • Email logs and audit records may be retained for up to 7 years for regulatory compliance purposes.
  • Billing records are retained as required by tax and accounting regulations.

7. Data Security

We implement reasonable technical and organizational safeguards to protect your data, including:

  • AES-256-GCM encryption for sensitive student fields (SSN last 4, phone numbers)
  • Bcrypt password hashing (passwords are never stored in plain text)
  • HTTPS encryption for all data in transit
  • HttpOnly, SameSite-strict authentication cookies
  • Role-based access controls separating admin, instructor, and student permissions
  • Multi-tenant data isolation ensuring organizations cannot access each other's data
  • Webhook signature verification for all Stripe communications
  • Login rate limiting and account lockout protection

No system is 100% secure. While we take reasonable measures to protect your data, we cannot guarantee absolute security.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your account and associated data (subject to retention requirements)
  • Export your data using the tools provided in the Platform

For school administrators:You can manage your organization's data directly through the Platform (student records, class data, settings).

For students: You can access your registrations, certificates, and profile through the student portal. To request deletion of your data, contact the School that enrolled you or email us at support@klassor.io.

9. Children's Privacy

Klassor is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor's data has been entered into the Platform, contact us and we will take steps to remove it.

10. International Users

Klassor is operated from the United States. If you access the Platform from outside the US, your data may be transferred to and processed in the United States. By using the Platform, you consent to this transfer.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date and notify active users by email. Continued use of the Platform after changes take effect constitutes acceptance of the updated policy.

12. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Klassor
Email: support@klassor.io