Privacy Policy

This Privacy Policy explains how ClassroomStack ("ClassroomStack", "we", "us", "our"), operated by Hula Creatives, collects, uses, stores, shares and protects information when you use the ClassroomStack web application at https://theclassroomstack.com (the "Service"). ClassroomStack is a workspace for creative agencies to manage client pipelines, project pages, files, video review, contracts and calendars.

1. Information we collect

Information you provide

• Account information: name, email address, phone number (optional), password, profile photo.
• Workspace content: pipelines, cards, project pages, comments, uploaded files and videos, transcripts, contracts and signatures.
• Billing information: plan and payment status. Card details are handled by our payment processor (Stripe); we do not store full card numbers.

Information collected automatically

• Log and device data: IP address, browser type, pages visited and timestamps, used for security and troubleshooting.
• Essential cookies and local storage to keep you signed in. We do not use advertising cookies.

2. Google user data

ClassroomStack lets each user optionally connect their own Google account. When you do, we request only the permissions below and use them only for the features described.

Data we access

• Google account basic profile (name, email address): to show which Google account is connected.
• Google Drive: file and folder names, metadata (type, size, modified date) and file contents for files you choose to view, upload, rename, move or organize from the ClassroomStack Files page.
• Google Calendar: your calendars and events, so ClassroomStack can display your schedule alongside project due dates and create or update events you ask it to create.

How we use Google user data

• Drive data is used only to display, preview, upload, rename and organize your files inside ClassroomStack at your request.
• Calendar data is used only to display your events and to create or update events you request.
• We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve or train generalized AI or machine-learning models.
• Humans do not read your Google data unless you give explicit permission (for example, for support), it is necessary for security or legal compliance, or it has been aggregated and anonymized.

How we store and protect Google user data

Google OAuth access and refresh tokens are stored encrypted on our servers and are never exposed to other users or to your browser. Drive file contents and Calendar events are fetched from Google when you use the feature and are not permanently copied to our servers, except for files you explicitly choose to upload into a ClassroomStack workspace.

Sharing of Google user data

We do not share or transfer Google user data to third parties, except to the infrastructure providers that host the Service, as required by law, or as part of a merger or acquisition with notice to you.

Retention and deletion of Google user data

You can disconnect Google at any time in ClassroomStack Settings. When you disconnect, we delete your stored Google tokens immediately. You can also revoke access at https://myaccount.google.com/permissions. To request deletion of any other Google-derived data, email haziel@hulacreatives.com and we will delete it within 30 days.

ClassroomStack's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. How we use information

• To provide, operate and maintain the Service.
• To send notifications you have turned on (email, SMS, WhatsApp, Slack).
• To process payments and manage subscriptions.
• To generate transcripts and AI-assisted features you request.
• To keep accounts secure and prevent abuse.

4. How we share information

We do not sell personal information. We share it only with service providers that help run the Service, under confidentiality obligations: cloud hosting and database, file storage (Cloudflare), payments (Stripe), messaging (Twilio, Slack, email delivery) and AI processing for features you use. We may also disclose information if required by law.

5. Data security

Data is encrypted in transit (HTTPS) and at rest. Access is restricted by workspace and user permissions, and media links are signed and expire.

6. Data retention and deletion

We keep your data while your account is active. Any user can delete their account at any time in Settings → Delete account. This revokes Google Drive and Calendar access, deletes all stored Google tokens and your profile, and — for workspace owners — deletes the workspace and its content. You can also request deletion by emailing haziel@hulacreatives.com. We delete data within 30 days of a request, except where the law requires us to keep it.

7. Your rights

You can access, correct, export or delete your personal information, and withdraw consent for optional connections at any time, by contacting us.

8. Children

The Service is not intended for children under 13, and we do not knowingly collect their data.

9. Changes

We will post any changes to this policy on this page and update the date above.

10. Contact

Hula Creatives (ClassroomStack) — haziel@hulacreatives.com