Your classroom,
your data.

Overview

OrganizeClass is a classroom assessment tool for individual teachers. We collect the minimum information needed to run the product, we never sell it, and you can export or delete it at any time.

Schools and districts: see our Data Privacy Agreement for the formal terms aligned with the SDPC National Data Privacy Agreement and Oregon SB 187.

What we collect

How we use it

• To provide the assessment tracking service
• To authenticate your account
• To generate progress reports you ask for
• To debug and improve the platform, using aggregate usage data

We do not use student work to train AI models, and we do not share it with any third party for advertising.

How we protect your data

We use industry-standard practices to keep classroom data safe.

• Everything you send to us travels over encrypted (TLS) connections.
• Sensitive student information, including names, identifiers, written observations, and uploaded evidence, is encrypted at multiple layers. We use industry-standard encryption practices and customer- managed encryption keys, and we keep a record of every read of student data. Photos and document evidence are stored in encrypted object storage with access only via short-lived signed URLs.
• Passwords are stored as one-way hashes, never as plain text. Auth tokens are kept in HttpOnly cookies that JavaScript running on the page cannot read.
• We support two-factor authentication (TOTP) for teacher accounts.
• We rate-limit sensitive endpoints to prevent abuse, and login sessions expire after 24 hours of inactivity.
• We keep an internal access log so we can answer questions about who viewed a student's records and when.
• Backups are encrypted and access is limited to OrganizeClass staff with a need to maintain the service.

No system is perfectly secure, but we work to follow best practices and update them as our understanding improves.

Data sharing

We do not sell, trade, or share your data with third parties for advertising, marketing, profiling, or any non-educational use. Student data is only accessible to teachers you have invited to the class. District administrators cannot view a teacher's assessments unless the teacher explicitly shares access.

Service providers we work with

A few trusted companies help us run OrganizeClass. Each one follows their own privacy commitments and only handles data on our behalf.

• Render hosts our application and database in the United States.
• Vercel serves the website. Vercel does not store student data.
• Amazon Web Services delivers transactional email like password resets and class invitations. AWS only receives the recipient's email address and the message body.

If we add a new service provider, we will update this list within 30 days. We do not use third-party analytics, advertising networks, or session-replay tools.

Our commitments to schools and families

These promises apply to every school and teacher using OrganizeClass, in line with the Oregon Student Information Protection Act (SB 187) and similar state student-privacy laws.

• We never sell student data.
• We don't use student data for targeted advertising on or off our service.
• We don't build student profiles for anything other than the educational service the teacher is using.
• We don't use student work or observation notes to train AI or machine-learning models.
• We delete student data within 30 days of a request from the school, including photos, notes, and assessment records.
• We follow security practices that are appropriate for the kind of data schools trust us with, described in the section above.

These promises apply to every school and teacher using OrganizeClass, whether or not the school has signed a separate data privacy agreement with us.

If something goes wrong

If we discover a security incident that affects student data, we will notify schools and teachers as soon as we reasonably can, and within 30 days at the latest. We will tell you what happened, what data was involved, and what we have done about it.

Keeping and deleting data

Your data is yours. You can export or delete it at any time from inside the app. School administrators can request a full deletion by emailing privacy@organizeclass.com.

• Removing a student or deleting a class hides them right away. We keep a recoverable copy for up to one year so accidental deletions can be undone, then remove it permanently. Schools and parents can request immediate permanent deletion at any time.
• We process deletion requests from schools or parents within 30 days and confirm by email when they're done.
• Closing your account deactivates it immediately: you are signed out everywhere, your classes are removed from the product, and your email address is freed up right away. We retain an internal copy of the account record for up to one year for security, audit, and dispute purposes, then delete it permanently. You can request earlier deletion by emailing privacy@organizeclass.com.
• We keep our internal access log for 12 months to help us respond to questions, then we delete it.

Children's privacy

OrganizeClass is used by teachers, not children. Students don't have accounts and never interact with the product directly. Anything we know about a student is what their teacher chose to enter while tracking learning progress.

We follow the federal student privacy laws, FERPA and COPPA. When a school uses OrganizeClass, we act on behalf of the school, and the school provides the parental consent COPPA requires for using the product with children under 13.

Parents who want to see, correct, or delete their child's data should reach out to their school. Schools can forward requests to privacy@organizeclass.com and we will respond within 30 days.

Teachers can use first names or initials only and skip the optional student ID to keep the information they enter to a minimum.

Your rights

• Access your data at any time
• Export your data as CSV or PDF
• Delete your data
• Request corrections to your data
• Close your account

Cookies

We use essential cookies only for authentication and to keep you logged in. We do not use tracking or advertising cookies.

Changes to this policy

We may update this policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this page.