Privacy Policy
Effective Date: July 5, 2026
This page is maintained by ClassSwap LLC to explain how we collect, use, share, and protect personal information on the ClassSwap platform. It includes information for California residents about their rights under the California Consumer Privacy Act ("CCPA").
When This Privacy Policy Applies
This Privacy Policy applies to your use of the ClassSwap website, mobile applications, and related services (the "Services"), regardless of the device you use to access them, and regardless of whether you are a registered account holder or simply browsing the Services. It applies to all personal information we collect through the Services, as described below.
CA Notice at Collection
Under the California Consumer Privacy Act, California residents must be informed of the categories of personal information collected and the purposes for which that information is used. ClassSwap LLC collects the following categories of personal information from users of the ClassSwap platform:
- Identifiers: your .edu email address, first and last name, and account credentials.
- Education information: your school name, graduation year, and class listings.
- Commercial information: connection requests you send or receive, ratings, and watchlist entries.
- Communications: messages sent through the in-app chat.
- IP address: collected on public contact, suggestion, and partnership inquiry forms for spam and abuse prevention.
- Internet or network activity: pages visited, login times, device type, browser information, and other usage data collected through cookies and Google Analytics.
We use this information to: verify your student status, help you discover other students with compatible course interests, send notifications about connection requests and compatible listings, enable in-app messaging, moderate content and prevent fraud, understand and improve the platform, and comply with legal obligations.
Do Not Sell My Personal Information
ClassSwap LLC does not sell personal information to third parties, and we do not share personal information for cross-context behavioral advertising. We do not sell or rent your .edu email address, school name, class listings, connection requests, messages, or any other personal information to advertisers, data brokers, or other third parties.
We may share information with service providers that help us operate the platform, such as our hosting and analytics providers, but only under contractual protections that limit their use of your information to the services they provide to us.
Your California Privacy Rights
If you are a California resident, you have the following rights under the CCPA:
- Right to know: you can request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting that information, and the categories of third parties with whom we share it.
- Right to delete: you can request that we delete the personal information we have collected about you, subject to certain legal exceptions.
- Right to correct: you can request correction of inaccurate personal information we maintain about you.
- Right to non-discrimination: we will not discriminate against you for exercising any of these rights.
To submit a Right to Know or Right to Delete request, please and label your message "Privacy Request" in the message field. We will confirm receipt within 10 business days and will substantively respond within 45 days of receipt. If we need more time, we may extend the response period by up to an additional 45 days and will notify you of the extension and the reason within the initial 45-day window. We will verify your identity before processing your request.
Shine the Light Law (Cal. Civ. Code § 1798.83)
ClassSwap does not disclose personal information to third parties for their direct marketing purposes. California residents seeking information about any such disclosures may contact us through our .
Sensitive Personal Information
ClassSwap does not knowingly collect sensitive personal information as defined under California law, including racial or ethnic origin, religious beliefs, health information, sexual orientation, citizenship status, genetic data, or precise geolocation data.
Additional State Privacy Laws
Residents of other states including Connecticut, Colorado, and Virginia may have additional privacy rights. ClassSwap extends the right to access, correct, and delete personal information to all users regardless of state. Contact us through our to exercise these rights.
Categories of Personal Information Collected (Last 12 Months)
The table below summarizes the categories of personal information we have collected in the preceding 12 months, the sources of that information, the business purposes for collecting it, and the categories of third parties with whom we share it.
| Category | Sources | Business purpose | Shared with |
|---|---|---|---|
| Identifiers (name, .edu email, account credentials) | Directly from you at signup | Account creation, student verification, authentication, security | Hosting and authentication provider; email delivery provider |
| Education information (school, graduation year, listings) | Directly from you | Enable connections between students around class enrollments | Hosting provider |
| Commercial information (connection requests, ratings, watchlist) | Directly from you and other users you interact with | Coordinate connections, surface compatible listings, maintain reputation signals | Hosting provider; other users only as needed to complete a connection |
| Communications (in-app chat messages, contact form submissions) | Directly from you | Enable messaging, safety moderation, and user support | Hosting provider; recipient of the message; moderation tooling |
| Internet or network activity (pages visited, device/browser info, cookies) | Automatically from your device | Analytics, product improvement, fraud prevention | Google Analytics |
| Class Insights content (questions, answers, comments, and associated course/professor tags) | Directly from you | Enable course and professor discussion among students, content moderation | Hosting provider; publicly visible to other users in de-identified form (see Anonymity section) |
| Inferences (compatibility signals derived from listings and watchlist) | Generated from data you provide | Rank and surface compatible listings | Not shared with third parties |
We do not sell personal information and do not share personal information for cross-context behavioral advertising.
Phishing Warning
ClassSwap will never send emails asking you to confirm your password, social security number, or payment information. If you receive such an email claiming to be from ClassSwap, do not click any links and immediately.
Information We Collect
We collect: your .edu email address, your name, your school and graduation year, class listings you post, connection requests you send or receive, messages sent through the in-app chat, and usage data like login times and pages visited.
How We Use Your Information
We use your information to: verify your student status, help you find and connect with other students around class enrollments, send you notifications about connection requests and alerts, moderate content and prevent fraud, and improve the ClassSwap platform. ClassSwap does not verify any user's enrollment status in a specific class — students confirm enrollment with one another directly.
In-App Messages
Messages sent through ClassSwap's in-app chat are stored on our servers and are subject to automated and human monitoring for safety and community guideline compliance, including checks for harassment, hate speech, sexual content, spam, and off-platform contact solicitation. Other students may report messages they receive for review. Misuse of the messaging feature — including sending prohibited content, circumventing moderation, or violating our community guidelines — may result in temporary messaging restrictions, account suspension, or permanent removal from ClassSwap.
Anonymity
Your full name is never shown publicly on listings. Only your first name and last initial are visible to other students until a connection is mutually accepted. Your .edu email address is never visible to other students.
Class Insights posts (questions, answers, and comments) are always fully anonymous to other users — no name, school, or profile information is ever shown publicly alongside this content, regardless of connection status. ClassSwap's moderation team can still access the identity of the posting user internally for safety, legal compliance, and enforcement of our Community Guidelines, even though this information is never shown publicly.
User-Disclosed Information
While your full name and .edu email address are never shown publicly, any information you choose to share with another user through in-app messages, such as your phone number, social media handle, or other personal details, is disclosed at your own discretion and risk. ClassSwap is not responsible for how another user may use or share information you voluntarily provide to them. We recommend against sharing sensitive personal information through the Services beyond what is necessary to coordinate a class connection.
Data Sharing
We do not sell your personal information. We do not share your data with advertisers. We may share data with law enforcement if required by law or if fraud is detected.
Google Analytics
We use Google Analytics to track site traffic and understand how visitors use ClassSwap. Google Analytics collects information such as pages visited, time spent on pages, and general device and browser information. This information is used in aggregate to improve the platform. Google may use cookies and similar technologies to collect this data. For more information about how Google uses this information, visit Google's partner sites policy.
Data Security
Your data is stored securely using Supabase with industry standard encryption. We use HTTPS on all pages to protect data in transit.
Data Retention
We retain personal information for as long as necessary to provide the Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements.
Inactive accounts: Accounts remain active indefinitely and are never automatically deleted due to inactivity. After 24 months without a login, we may email you asking you to log in and confirm you'd like to keep your account.
Class listings: Listings are tied to the term in which they were created and automatically expire 90 days after posting, or on a deadline you set, whichever comes first. You may also delete a listing manually at any time.
Class Insights content: Questions, answers, and comments posted in Class Insights remain publicly visible, in their fully anonymous form, even after the posting user's account is deleted, since this content does not display any identifying information and serves as an ongoing resource for other students. You may delete your own individual Class Insights posts at any time prior to account deletion. If you would like previously posted Class Insights content removed at the time of account deletion, contact us through the .
Messages: Messages persist only while your account exists. If you delete your account, all messages you sent or received are permanently deleted, including from other users' conversation threads, and are not retained in any form accessible through the platform.
Account deletion: When you delete your account, we immediately delete your class listings, saved preferences, and all associated messages, and remove your ability to be contacted through ClassSwap. Your profile record is anonymized rather than fully erased: your name, university, major, and availability information are cleared and replaced with placeholder values, but certain fields (such as your username, graduation year, account creation date, and verification status) may be retained on this anonymized record where necessary for security, fraud prevention, moderation history, or to maintain the integrity of other users' data (such as ratings you gave or received). We retain a minimal separate record (such as a hashed email and timestamp) for up to 90 days solely for security, fraud prevention, or legal compliance purposes, after which it is purged.
Backups: Deleted data is removed from live systems immediately upon deletion and is fully purged from routine backups within our standard backup cycle (typically 30 days).
Your Rights
You can request deletion of your account and all associated data at any time by . You can update your profile information in your account settings at any time.
Cookies
ClassSwap uses cookies to keep you logged in and remember your preferences. We do not use cookies for advertising.
FERPA
ClassSwap respects student privacy rights under FERPA. We do not share academic information with third parties without your consent.
Email Communications and Unsubscribing
You can unsubscribe from marketing and notification emails at any time — either from the notification preferences section in your account settings, or by using the unsubscribe link at the bottom of any notification email we send. Account security emails (such as password reset and email verification) will continue to be sent because they are required to keep your account safe.
Changes to Privacy Policy
We may update this policy at any time. We will notify you by email of any significant changes.
Contact
For privacy questions or to exercise your rights, please .