Security and Data Protection

ClassFlow LLC ("ClassFlow") uses administrative, technical, and organizational safeguards designed to protect studio and member data. This page provides a high-level overview. Customers and prospective customers may request our standard data processing addendum or submit a security questionnaire for a written response.

Core safeguards

• Data is protected in transit and at rest.
• Tenant separation and role-based access controls limit access to authorized studio users.
• ClassFlow personnel access customer data only as needed to operate, support, or secure the Services and are subject to confidentiality obligations.
• Service providers that process customer data are subject to appropriate contractual data-protection obligations.
• ClassFlow responds to security incidents and provides customer notice as required by the applicable agreement and law.

Payments

Payment-card information is handled by the payment provider identified at checkout. ClassFlow does not store full payment-card numbers or card security codes in its application database.

Data use and optional integrations

Studios determine what member information they collect and why. ClassFlow processes that information to provide the Services under the applicable agreement and does not sell it or share it for cross-context behavioral advertising.

Studio-controlled advertising and measurement integrations for the ClassFlow widget are not initialized unless the studio configures them. When configured, those integrations operate at the studio's direction.

Documentation requests

ClassFlow's standard data processing addendum, current subprocessor information, and written security-questionnaire responses are available on reasonable request. Specific contractual commitments are governed by the applicable agreement.

Email info@classflow.studio with the name of your organization and the documentation requested.