Privacy Policy

1. Data we collect

Clasbi processes data needed to provide the service to education centers: identification and contact data of administrators, teachers, students, families, prospects, and staff; center, role, and permissions; classes, groups, schedules, attendance, recoveries, lesson credits, absences, enrollments, payment status, operational communications, documents, and support data. Depending on the modules used, it may also process financial, employment, and contractual data, payment methods recorded outside the app, family contacts, and content provided by users. These data may be supplied by the center, entered directly by authorized users, included in files or content uploaded to the service, or generated and collected automatically when Clasbi is used. It may also process technical data such as user or device identifiers, push-notification tokens, platform, app version, language, time zone, IP address, and technical logs. If the center turns on email, it also processes the result of each email (sent, delivered, rejected, or marked as spam) and blocked addresses, so that no more emails are sent to them. The app is not directed to children, although a center may manage data about underage students within the service.

2. Who decides the processing

Clasbi is the trade name of the service provided by GFR Innovation SL (EN CONSTITUCIÓN — in formation), with provisional Spanish tax identification number (NIF) B05580006 and registered and tax address at Calle Girasoles, no. 10, floor 8, 15008 A Coruña, Spain. The center normally decides which data about students, teachers, families, prospects, and staff it enters and why it uses that data, so it acts as controller. Clasbi mainly processes that data on the center's behalf as processor. Clasbi acts as an independent controller for the limited commercial, support, security, billing, and legal-compliance data it uses for its own purposes.

3. Files and educational material

Authorized users may upload homework, PDFs, images, video, audio, and other files. This material may contain personal data or protected content. The center must limit access, have a valid legal basis and sufficient permissions, and avoid unnecessary or especially sensitive information. Clasbi stores and displays the material only to provide the service and under the center's instructions.

4. How we use the data

We use your data to:

• Provide and maintain Clasbi as a B2B management tool for education centers.
• Manage access, authentication, roles, permissions and center context.
• Enable management of classes, schedules, attendance, make-up lessons, lesson credits and operational communications.
• Send push notifications and operational emails, such as class changes, answers to requests, and center announcements, when the center turns them on. Each person can stop a center’s emails from the link in any email, without signing in.
• Handle support requests and service-related questions.
• Maintain security, prevent abuse and comply with legal or contractual obligations.
• Store, deliver, and control access to the center's files and educational material.
• Analyze usage, measure service operation, and diagnose errors through PostHog using limited identifiers and operational events, without advertising or advertising tracking.

5. Data sharing

We do not sell personal data, use it for advertising tracking, or show advertising. To provide and improve the service, we use providers for authentication, hosting, private storage, databases, push notifications, email delivery, product analytics, and support. They receive only the data needed for their function. Clasbi requires them to protect those data to the same or an equivalent level as set out in this policy and required by applicable law.

See the current Subprocessor List.

6. International transfers

Some providers may process data outside the European Economic Area. When necessary, Clasbi relies on adequacy decisions, standard contractual clauses, or other valid safeguards and identifies the relevant providers. For example, Resend processes the data of the emails that Clasbi sends in the United States.

7. Data retention

We keep data and files while needed to provide the service to the center and manage the contractual relationship. After cancellation, they are returned, deleted, or blocked under the center's instructions and the Data Processing Agreement, except where legal duties, security, legal claims, or temporary backup cycles require retention. Technical logs have their own operational retention periods. For emails, the address and the content of each email are deleted 30 days after sending. The record of who received it, the result, and the dates is kept while the message exists in Clasbi. Technical notices from the email provider are deleted after 90 days. Blocked addresses are kept while needed so that no more emails are sent to them.

8. Your rights

Under GDPR and Spanish data protection law, you may exercise your rights of access, rectification, deletion, objection, restriction, portability, and withdrawal of consent where applicable. If a customer center controls the data, Clasbi may coordinate the request with that center.

9. Cookies

We use cookies and similar technologies. See our Cookie Policy for more information.

Contact

For privacy or data deletion questions, email support@clasbi.com.