Privacy Policy

Last updated: April 23, 2026

1. Introduction

ClassSlides ("we," "our," "the Service") is committed to protecting the privacy of our users, particularly educators and their students. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address — used for account identification and login
• Display name — shown in the Service interface
• Password — stored as a one-way bcrypt hash; we never store or can view your actual password
• School name and grade level — optional, used to personalize content generation

2.2 Google Account Information

If you sign in with Google or link your Google account, we receive:

• Google account ID — a unique identifier used to link your Google account to your ClassSlides account
• Email address and display name — from your Google profile, used for account creation or matching
• OAuth refresh token — an encrypted credential that allows us to upload files to your Google Drive on your behalf (see Section 5)

2.3 Content You Provide

• Lesson topics, materials, and instructions — used to generate presentations
• Newsletter content — section titles, text, and formatting preferences
• Support ticket messages — used to respond to your inquiries

2.4 Generated Content

• Presentations — .pptx files generated from your lesson inputs, stored on our servers
• Newsletters — PDF files generated from your content, stored on our servers
• AI-generated content plans — the structured lesson data used to assemble your presentations

2.5 Live Session Data

When you run live interactive sessions, we collect:

• Student display names — entered by students when joining (no login required)
• Student responses — answers to polls, quizzes, and activities during the session
• Session metadata — timestamps, participation counts, and activity logs

Students do not need to create accounts. We do not collect student email addresses, real names (beyond the display name they choose), or any other personally identifiable student information.

2.6 Automatically Collected Information

• Session cookies — used to keep you logged in
• Server logs — IP addresses, request timestamps, and browser information for security and debugging purposes

3. How We Use Your Information

• To provide the Service — generating presentations, newsletters, and running live sessions
• To process AI content — your lesson topics and materials are sent to our AI provider (Anthropic Claude) to generate educational content. See Section 6 for details.
• To upload to Google Drive — when you use the "Google Slides" export feature, we upload your generated presentation file to your Google Drive. See Section 5 for details.
• To manage your account — authentication, quota tracking, and support
• To improve the Service — understanding usage patterns, diagnosing errors, and improving content quality
• To ensure security — detecting abuse, preventing unauthorized access, and enforcing rate limits

4. What We Do NOT Do

• We do not sell your personal information to third parties
• We do not use your data for advertising or targeted marketing
• We do not share your lesson content, presentations, or newsletters with other users unless you explicitly choose to
• We do not collect student personally identifiable information (PII) — students join sessions with a self-chosen display name only
• We do not track users across other websites
• We do not read, modify, or access any files in your Google Drive other than the specific presentation files we upload at your request
• We do not browse, index, or scan your Google Drive contents
• We do not retain copies of files uploaded to your Google Drive — the file is streamed directly from our server to your Drive

5. Google Services Integration

ClassSlides integrates with Google services in two ways:

5.1 Google Sign-In (OAuth 2.0)

You may sign in to ClassSlides using your Google account. When you do, we request access to:

• openid, email, profile — to identify you and create or link your account. We receive your Google account ID, email address, and display name.

We do not receive or store your Google password. Authentication is handled entirely by Google.

5.2 Google Drive — File Export

You may optionally export generated presentations to your Google Drive as Google Slides files. When you use this feature, we request:

• drive.file scope — this grants access only to files that ClassSlides creates. We cannot see, read, modify, or delete any other files in your Google Drive.

How it works:

1. You click "Google Slides" on a completed presentation
2. We upload the .pptx file from our server to your Google Drive
3. Google converts it to native Google Slides format
4. We return the link to you so you can open it in Google Slides

What we store: We store an OAuth refresh token that allows us to upload files to your Drive on your behalf without requiring you to re-authorize each time. This token is stored securely in our database and is used solely for the file upload operation.

Revoking access: You can revoke ClassSlides' access to your Google account at any time by visiting Google Account Permissions and removing ClassSlides. Once revoked, you will need to re-authorize if you wish to use the Google Slides export feature again.

5.3 Google API Services User Data Policy

ClassSlides' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Third-Party AI Processing

When you generate a presentation, your lesson topic and related inputs are sent to Anthropic's Claude API for AI content generation. Anthropic processes this data according to their Privacy Policy. Anthropic does not use API inputs for model training.

When generating images for presentations, prompts (not your personal information) are sent to our private image generation server. No user data is shared with third-party image generation services.

7. Data Storage and Security

• Your data is stored on servers located in the United States
• Passwords are hashed using bcrypt (one-way; cannot be reversed)
• Sessions are managed with secure, HTTP-only cookies
• All connections to classslides.com are encrypted with TLS (HTTPS)
• Security headers (HSTS, X-Frame-Options, X-Content-Type-Options, and others) are enforced via helmet middleware
• CSRF tokens protect against cross-site request forgery

8. Data Retention

• Account data — retained until you delete your account
• Generated presentations and newsletters — retained until you delete them or delete your account
• Live session data — retained for reporting purposes until the associated presentation is deleted
• Server logs — retained for up to 90 days for security and debugging purposes

When you delete your account, all associated data (presentations, newsletters, templates, session data, and support tickets) is permanently deleted.

9. Children's Privacy (COPPA)

ClassSlides is designed for use by educators (adults). We do not knowingly collect personal information from children under 13. Students participating in live sessions provide only a self-chosen display name — no account, email, or identifying information is required or collected.

If you believe a child under 13 has provided personal information to us, please contact us so we can delete it.

10. Your Rights

You have the right to:

• Access your data — view your account information, presentations, and session history through the dashboard
• Correct your data — update your profile through the Account settings
• Delete your data — delete individual presentations, newsletters, or your entire account
• Export your data — download your presentations as .pptx files or export to Google Slides
• Revoke third-party access — disconnect Google through your Google account settings

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact

If you have questions about this Privacy Policy or your data, please contact us through the Support section in your Account settings.