ClassZ Privacy Policy

1 Information We Collect

Information You Provide

• Account and identity data, including name, email, telephone number, login credentials, date of birth where required, profile image, language, and location.
• Provider information, including biography, qualifications, professional history, identity or business verification, tax information, insurance evidence, payout details, venue address, amenities, accessibility, availability, and safety information.
• Booking and transaction information, including classes viewed or booked, attendance, subscription status, prices, credits, refunds, commissions, invoices, disputes, and payment status. Full payment-card details are generally collected directly by our payment processor.
• Content and communications, including listings, class materials, reviews, messages, support requests, surveys, photographs, recordings submitted with consent, and reports about conduct or safety.
• Business and institutional customer data, including organization, role, billing contacts, participant lists, and program requirements.

Information Collected Automatically

When you use ClassZ, we and permitted service providers may collect IP address, browser and device type, operating system, identifiers, pages and features used, referring pages, approximate location, timestamps, diagnostic logs, cookie or similar technology data, and interactions with emails. Precise location, camera, microphone, contacts, or photographs are accessed only when the feature requires them and applicable permission is granted.

Information From Others

We may receive information from instructors, hosts, learners, business customers, referral partners, identity and background-verification providers, payment providers, public sources, social sign-in providers, and authorities. A user who submits information about another person must have a lawful basis and provide any required notice.

2 How We Use Information

• Create accounts; authenticate users; maintain profiles; provide search, matching, messaging, booking, attendance, subscription, credit, payment, payout, and support functions.
• Review and publish listings; coordinate instructors, hosts, and learners; administer institutional programs; and communicate transaction and schedule information.
• Verify identity, credentials, business details, insurance, venue information, and eligibility; investigate fraud, chargebacks, abuse, policy violations, and safety incidents.
• Personalize recommendations, measure performance, troubleshoot, conduct research and analytics, develop features, and improve accessibility and user experience.
• Send service messages and, where permitted, marketing communications; measure campaign performance and manage referrals or promotions.
• Comply with tax, accounting, consumer-protection, privacy, court, regulatory, sanctions, and law-enforcement obligations; establish or defend legal claims.
• Create aggregated or de-identified information that we do not reasonably use to identify a person.

3 Legal Bases for EEA and UK Users

Where the GDPR or UK GDPR applies, we process personal data as necessary to perform a contract or take requested pre-contract steps; comply with legal obligations; pursue legitimate interests such as operating, securing, improving, and marketing the marketplace where those interests are not overridden by individual rights; protect vital interests; or act with consent. Consent may be withdrawn at any time without affecting prior lawful processing. We will identify additional legal bases when a specific feature requires them.

4 How We Share Information

We may share personal information only as reasonably necessary for the purposes described in this policy:

• Between marketplace users: booking details and information needed to deliver a class, coordinate a venue, communicate, confirm attendance, address accessibility, or handle an incident. Public profiles and listings are visible as indicated.
• With service providers and processors supporting cloud hosting, databases, authentication, payments, payouts, email and messaging, customer support, analytics, security, identity verification, and document storage. Current infrastructure may include AWS, Supabase, Stripe, and comparable providers.
• With business, school, or government customers that sponsor or administer a program, limited to information necessary to manage participation, payment, attendance, outcomes, compliance, or safety.
• With professional advisers, insurers, auditors, and financing or transaction counterparties subject to appropriate confidentiality or legal safeguards.
• With authorities or others when required by law or reasonably necessary to protect rights, safety, users, ClassZ, or the public; detect fraud; respond to emergencies; or enforce agreements.
• In connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of the business, subject to applicable notice and protection requirements.

ClassZ does not sell personal information for money. Some analytics or advertising technology may constitute “sharing,” “sale,” or targeted advertising under certain U.S. state laws even without payment. Where applicable, users may opt out through the privacy controls made available on classz.ai or by contacting us. We will honor legally recognized browser-based opt-out preference signals where required.

5 Cookies and Similar Technologies

ClassZ uses essential technologies for login, security, preferences, payments, and core functionality. With any consent required by law, we may use analytics, personalization, or advertising technologies to understand usage and improve or promote ClassZ. Users can manage non-essential categories through the cookie controls presented on the site and may also adjust browser settings. Blocking essential technologies may prevent features from working.

6 Data Retention

We retain personal information for as long as reasonably necessary for the purposes collected, including to provide services, preserve transaction and attendance records, comply with tax and accounting rules, resolve disputes, prevent fraud, protect safety, and enforce agreements. Retention depends on data type, account status, legal requirements, risk, and operational need. We delete, anonymize, or securely isolate information when it is no longer required, subject to backups and lawful exceptions.

7 Security

We use administrative, technical, and organizational safeguards designed for the nature of the information and risks involved, including access controls, authentication, encryption in transit where appropriate, monitoring, backups, vendor controls, and incident-response procedures. No system is completely secure. Users must protect credentials and promptly report suspected compromise.

8 International Transfers

ClassZ and its providers may process information in the United States and other countries that may have different privacy laws. Where required for transfers from the EEA, UK, or Switzerland, we use recognized safeguards such as adequacy decisions, standard contractual clauses, the UK addendum or international data transfer agreement, and supplementary measures as appropriate.

9 Your Rights and Choices

Depending on location and subject to legal exceptions, you may request access, correction, deletion, portability, restriction, or objection; withdraw consent; opt out of targeted advertising, sale, or sharing; limit certain uses of sensitive personal information; and appeal a denied request. You may unsubscribe from marketing while continuing to receive essential service messages.

Submit requests through the privacy or contact method published on classz.ai. We may verify identity and authority before responding. Authorized agents must provide legally sufficient authorization. We will not discriminate against a person for exercising applicable privacy rights. EEA and UK users may complain to their local supervisory authority; California residents may consult the California Privacy Protection Agency.

10 California Notice at Collection

In the preceding 12 months, ClassZ may have collected the categories described in Section 1, including identifiers; customer-record information; commercial information; internet or electronic activity; approximate geolocation; audio, visual, or similar information; professional or employment-related information; education-related information; sensitive information such as account credentials, precise location if enabled, government identifiers for verification, or payment and tax details; and inferences drawn to personalize or secure the service. We use and disclose these categories for the business and commercial purposes described above. We retain them under Section 6. We do not use or disclose sensitive personal information to infer characteristics except as permitted by law.

11 Children and Participants Under 18

ClassZ accounts are intended for adults unless a specific youth program provides a separate enrollment and consent process. The service is not directed to children under 13, and we do not knowingly collect their personal information through a general account. If we learn that such information was collected without legally sufficient authorization, we will take appropriate steps to delete it. Programs involving minors must use required parental, guardian, school, safeguarding, and consent procedures.

12 Third Party Services

ClassZ may link to third-party websites, maps, sign-in tools, payment services, or content. Their privacy practices are governed by their own notices. Users should review those notices before providing information. ClassZ is not responsible for independent third-party practices.

13 Changes to This Policy

We may update this policy to reflect changes in services, law, or practices. We will post the revised policy and its effective date and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.

14 Contact

Privacy questions and rights requests may be submitted through the privacy or contact method published on classz.ai. A request should include the account email, country or state of residence, right being exercised, and enough information to locate the relevant account. Do not send payment-card numbers, passwords, or unnecessary identity documents by ordinary email.