Privacy notice

Pilot draft — last updated 9 November 2026.

What we collect

• Account data: name, email address, password (stored hashed by our authentication provider).
• School data: school name, classes, teaching materials you create or upload, approval history.
• Usage data: AI generation counts, token usage and estimated cost, security and error logs.
• Billing data: handled by Stripe. We never see or store card numbers.

Students

ClassPilot AI does not require any student personal information. Please do not enter students' names, grades or other personal data into lesson inputs, curriculum sources or parent updates.

How AI processing works

To generate content, the lesson details you enter and relevant excerpts from your approved curriculum are sent to our AI provider (OpenAI) through its API with storage disabled for application state. AI output is always a draft for teacher review; nothing is sent to parents or students automatically.

Processors

• Supabase (database, authentication, file storage)
• Vercel (hosting)
• OpenAI (AI generation)
• Stripe (billing)
• Resend (transactional email, e.g. invitations)

Isolation and security

Each school's data is isolated at the database level. Only members of your school can access its materials; teachers see their own lessons, administrators see the whole school.

Retention and deletion

• Your data is kept while your school's account is active.
• School owners can delete the school and all its data at any time from Settings. Users can delete their own account from Settings.
• Backups are retained by our database provider for a limited period (see the plan's backup window) and then expire.
• Security logs are kept for up to 90 days.

Contact

For privacy requests, contact your school administrator or the ClassPilot AI support address provided in your agreement.