Privacy Policy

About This Policy

This Privacy Policy applies to the products, services, and websites operated by Class Education Pty Ltd trading as Class Mathematics for the United States market, including classmathematics.com.

We are committed to handling your personal information in accordance with applicable United States privacy laws, including US state consumer privacy laws (such as the California Consumer Privacy Act, as amended by the CPRA), the Children's Online Privacy Protection Act (COPPA), and the CAN-SPAM Act. By using our services, you consent to the collection and use of your information as described in this policy.

If you do not agree with this policy, please discontinue use of our services. If you are under the age of 18, please ensure a parent or guardian has reviewed and agreed to this policy on your behalf.

Who We Are

Class Mathematics is a mathematics education platform operated by:

Legal entity	Class Education Pty Ltd
Trading name	Class Mathematics
Registration	ABN 63 630 539 758 — an Australian company serving customers in the United States
Contact email	hello@classmathematics.com

We provide standards-aligned mathematics resources — including Common Core, Texas (TEKS), and California standards — to students, parents, teachers, tutors, and schools across the United States.

What Personal Information We Collect

The personal information we collect depends on how you interact with our platform. We only collect information that is reasonably necessary for our services.

Account & Registration Information

Information	Why we collect it
Full name	To personalize your account and communications
Email address	To create your account, send transactional emails, and communicate with you
State	To show you content aligned with your state's mathematics standards (e.g. Common Core, TEKS, California)
Grade level	To show you relevant questions and resources for your stage of study
User type (student, teacher, tutor, parent)	To tailor the platform experience to your role
Password (encrypted)	To secure access to your account

Payment Information

When you purchase a subscription or product, payment processing is handled securely by Stripe. We do not store your full card details on our systems. We may retain:

• Your name and billing address (as provided at checkout)
• The last four digits of your card and card type (stored by Stripe for reference)
• Transaction history and subscription status

Session & Device Information

To protect your account from unauthorized access, prevent account sharing in breach of our Terms, and maintain the integrity of our subscription model, we collect information about each session in which your account is used. This includes:

• IP address from which you log in or access the platform
• Device fingerprint — a hashed identifier derived from technical characteristics of your device (such as browser type, operating system, screen resolution, and timezone)
• Device cookie — a unique identifier stored in your browser to recognize your device on return visits
• Browser and operating system information (user agent string)
• Login and session timestamps, including the time of login, last activity, and logout
• Approximate geographic location (city or region level), derived from IP address
• Session events, such as login attempts, forced logouts, and concurrent session conflicts

This information is treated as part of your personal information and is protected in the same way as the other categories described in this policy. See Section 6 — Account Security & Session Data for further detail on how this information is used.

Usage & Analytics Information

We collect information about how you use our platform to improve our services. This includes:

• Pages visited, features used, and time spent on the platform
• Device type, browser type, and operating system
• Approximate location (country/state level, derived from IP address)
• Referring website or search query that brought you to our site
• Heatmap and session recording data (via Hotjar) to understand how users interact with our pages

Communications

If you contact us directly — by email, through a contact form, or via a free quiz builder — we may retain the contents of that communication and your contact details in order to respond to you and keep a record of our correspondence.

How We Collect Your Information

We collect personal information in the following ways:

• Directly from you — when you create an account, make a purchase, complete a form, build a free quiz, or contact us
• Automatically — when you use our platform, through cookies, analytics tools (Google Analytics 4), session recording tools (Hotjar), and our session and device logging systems

We do not collect sensitive information (such as health, racial or ethnic origin, political opinions, or biometric data) and we do not purchase or acquire personal information from data brokers or marketing lists.

How We Use Your Information

We use your personal information only for the purposes for which it was collected, or for directly related purposes you would reasonably expect. These include:

Purpose	Details
Providing the service	Creating and managing your account, delivering standards-aligned content, processing payments, and managing subscriptions
Personalization	Showing you content relevant to your state, grade level, and user type
Account security	Authenticating logins, detecting unauthorized access, enforcing single-session usage, and protecting your account from misuse
Terms enforcement	Identifying breaches of our Terms of Service, including unauthorized account sharing
Transactional communications	Sending account confirmations, password resets, purchase receipts, and subscription notifications
Marketing communications	Sending you educational resources, product updates, and relevant offers — always with a clear unsubscribe option, in accordance with the CAN-SPAM Act
Platform improvement	Analyzing usage data to understand how our platform is used and to improve the experience
Customer support	Responding to inquiries, resolving issues, and managing complaints
Legal obligations	Complying with applicable laws, regulations, and legal processes

Account Security & Session Data

Class Mathematics subscriptions are licensed to a single named individual. To protect your account, deter unauthorized access, and enforce this single-user requirement, we operate an automated session monitoring system. This section explains exactly what that involves.

What we record

Each time you (or anyone using your account credentials) logs in or interacts with the platform, we record a session entry containing the information described in Section 3 — Session & Device Information. This includes IP address, device fingerprint, device cookie, browser and operating system details, and timestamps of activity.

How we use this information

• Single-session enforcement — only one active session is permitted per account. When a new login occurs on a different device, the previous session is automatically ended. The previous device will see a notification explaining that the account has been signed in elsewhere.
• Detecting unauthorized access — unusual login patterns (such as logins from multiple geographic regions in a short time, or from a high number of distinct devices) may indicate that your account has been compromised or is being shared in breach of our Terms.
• Audit history — if there is a dispute about activity on your account, we can review the session log to determine when, where, and from what type of device the account was used. You may request your own session history by contacting us.
• Terms enforcement — where the session log indicates that an account is being shared in breach of our Terms of Service, we may contact the account holder, suspend the account, or terminate the subscription. See our Terms of Service for the relevant provisions.

What we do not do

• We do not use session or device data for advertising or marketing purposes
• We do not sell or share session or device data with third parties for their commercial purposes
• We do not track your activity on other websites or applications
• We do not use device fingerprinting to identify you outside the Class Mathematics platform

Disclosure to Third Parties

We do not sell your personal information. We share your information only with trusted service providers who help us operate our platform, and only to the extent necessary for them to perform their services.

Third Party	Purpose	Data Shared
Stripe	Payment processing for portal subscriptions	Name, email, billing address, payment details
Google Analytics 4	Website analytics and usage reporting	Anonymized usage data, device/browser information
Hotjar	Session recording and heatmap analysis	Anonymized interaction data (no personal identifiers)
Microsoft Azure	Hosting of the student/teacher portal and storage of session and device logs	Account data and session logs stored in Azure data centers

All third-party service providers are required to handle your information in accordance with applicable privacy laws. We do not authorize them to use your information for their own marketing purposes.

We may also disclose your information where required by law, court order, or government authority, or where we believe disclosure is necessary to protect the safety of any person or to prevent fraud or illegal activity.

Storage & Security

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorized access, modification, and disclosure. Our security measures include:

• Encrypted storage of passwords (hashed and salted — never stored in plain text)
• HTTPS encryption across all our web properties
• Restricted internal access to personal data on a need-to-know basis
• Payment data handled exclusively by our PCI-DSS compliant payment provider (Stripe)
• Session and device data stored in secured databases on Microsoft Azure infrastructure, accessible only to authorized personnel for security and compliance purposes
• Regular review of our security practices and third-party integrations

Our portal is hosted on Microsoft Azure infrastructure, and your information may be stored and processed in data centers located outside the United States, including in Australia. While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. If you become aware of any security vulnerability or breach, please contact us immediately at hello@classmathematics.com.

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

Data Type	Retention Period
Account information	For the duration of your account, plus up to 2 years after account closure
Purchase and transaction records	7 years (as required for financial record-keeping)
Session and device logs	Up to 24 months from the date of the session, after which records are automatically deleted or de-identified
Marketing email engagement data	Until you unsubscribe or request deletion, whichever is sooner
Analytics data (GA4, Hotjar)	As per Google's and Hotjar's data retention settings (typically 14 months for GA4)
Customer support correspondence	Up to 3 years after the matter is resolved

When your data is no longer required, we will take reasonable steps to destroy or de-identify it securely.

Your Privacy Rights

Depending on your state of residence, you may have rights under US state consumer privacy laws — including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and similar laws in other states. Regardless of where you live, we extend the following rights to all our users. You have the right to:

• Know and access the personal information we hold about you, including your session and device log, and the categories of information we collect and share
• Correct any personal information that is inaccurate, out of date, or incomplete
• Request deletion of your personal information, subject to our legal obligations to retain certain records
• Opt out of the sale or sharing of your personal information — noting that we do not sell your personal information and do not share it for cross-context behavioral advertising
• Withdraw consent to marketing communications at any time
• Non-discrimination — we will not deny you services, charge you a different price, or provide a lesser quality of service because you exercised any of these rights

To exercise any of these rights, please contact us at hello@classmathematics.com. We will respond to all requests within the timeframes required by applicable law — generally within 45 days. In some cases, we may ask you to verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

If you are not satisfied with our response to a privacy request, you may contact your state's Attorney General. California residents may contact the California Privacy Protection Agency at cppa.ca.gov.

Cookies & Analytics

We use cookies and similar tracking technologies on our websites. Cookies are small text files stored on your device that help us provide and improve our services.

Types of cookies we use

Type	Purpose	Examples
Essential	Required for the platform to function — including keeping you logged in and processing transactions	Session cookies, authentication tokens
Security	Identify your device for the purposes of session enforcement and account protection	Device cookies, fingerprint identifiers
Analytics	Help us understand how visitors use our site so we can improve it	Google Analytics 4
Behavior	Record how users interact with our pages to help us identify usability issues	Hotjar session recordings and heatmaps
Marketing	Help us understand which campaigns bring visitors to our site	Google Ads conversion tracking

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or to alert you when cookies are being sent. Please note that disabling essential or security cookies may affect the functionality of our platform — including your ability to remain logged in and to use the portal at all.

For more information about how Google uses data collected through our site, visit policies.google.com. For Hotjar's privacy practices, visit hotjar.com/legal/policies/privacy.

Children's Privacy

Our platform is designed for use by students, including those under the age of 18. We recognize the importance of protecting children's privacy and comply with the Children's Online Privacy Protection Act (COPPA).

Where a user is under 18, we expect that a parent or guardian has reviewed this privacy policy and consented to the collection and use of that student's personal information on their behalf — including the session and device data described in Section 6. We encourage parents and guardians to be involved in their child's use of our platform.

We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent, as required by COPPA. Parents and guardians have the right to review the personal information we hold about their child, request its deletion, and refuse to permit further collection. If you believe we have inadvertently collected information from a child under 13 without appropriate consent, please contact us at hello@classmathematics.com and we will take steps to delete that information promptly.

We do not display targeted advertising to users we know to be under 18, and we do not share student data with third parties for advertising purposes.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices, technology, legal requirements, or for other operational reasons. When we make changes, we will update the "Last updated" date at the top of this page.

If we make material changes that significantly affect how we handle your personal information, we will notify registered users by email or by displaying a prominent notice on our platform before the changes take effect.

We encourage you to review this policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes constitutes your acceptance of the updated policy.