Privacy Policy

Effective date: 2026-07-14

This policy explains what personal data we collect on the classroom.now website and platform, why we process it, and what rights you have under the General Data Protection Regulation (GDPR).

1. Who is responsible for your data

The data controller is Universal Smart Solutions s.r.o., with its registered office at Drahelčická 166, 252 18 Úhonice, Česká republika, company ID 01442023. For any privacy matter, contact us at hello@classroom.now.

2. What this policy covers

It covers this website and the classroom.now platform where we act as the data controller. Where your employer or a training provider uses the platform to manage its own training — enrollments, attendance, results, certificates — that organization is the controller of those records and we process them on its behalf under a data processing agreement; its own privacy notice applies to them.

3. What data we collect

Depending on how you use the Service, we process:

Account data — name, email address, language and region preferences, profile photo, and the organization roles assigned to you.
Training data — enrollments, attendance, lab activity, assessment results and certificates, mostly processed on behalf of the organization that manages your training.
Technical data — IP address, browser and device information, and server and security logs, kept to run the Service securely.
Correspondence — messages you send us, for example to hello@classroom.now.

4. Why we process it, and on what legal basis

We process personal data:

to provide the Service you or your organization signed up for — performance of a contract (Art. 6(1)(b) GDPR);
to meet legal obligations, such as accounting and statutory training-record requirements (Art. 6(1)(c) GDPR);
to keep the Service secure, prevent abuse and improve it — our legitimate interests (Art. 6(1)(f) GDPR);
for optional communications such as product news — only with your consent, which you can withdraw at any time (Art. 6(1)(a) GDPR).

5. Session recordings and AI analysis

Live training sessions may be recorded. You are informed in advance, and the platform collects the required consents in-app before a recording starts. When a session is recorded, we process the audio and video of the session, transcripts generated from the recording, and AI-generated summaries of its content. The platform also logs interactions with AI features during courses — questions asked to the AI assistant, AI chat conversations and AI-supported exercises — per individual participant.

We create transcripts and summaries to support learning — so participants can revisit what was covered — and to help organizations assure training quality. The legal basis is the performance of a contract with the organization that manages your training and our legitimate interests in providing these features (Art. 6(1)(b) and (f) GDPR); where consent is required, we rely on the consent collected in-app (Art. 6(1)(a) GDPR). All transcription and AI analysis takes place within the platform's own infrastructure, hosted in the EU — recordings are never sent to external AI providers. Recordings, transcripts and summaries follow the same retention rules as other training data (see section 9).

6. Cookies

This website is a static site: it sets no analytics or tracking cookies and loads no third-party trackers.

The classroom.now application uses strictly necessary cookies only — to keep you signed in and to secure your session. We do not use advertising cookies.

7. Who we share data with

We share personal data only with: service providers who help us run the platform (such as hosting and email delivery), bound by data processing agreements; the organization that manages your training, as described above; and public authorities where the law requires it. We never sell personal data.

8. International transfers

The platform is hosted in the European Union. If personal data ever needs to be transferred outside the EU/EEA, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses, plus additional safeguards where needed.

9. How long we keep data

We keep personal data for as long as your account is active or as needed for the purposes above, and afterwards only as long as statutory retention periods require. Training completion and certification records that must survive account deletion are kept in anonymized form, no longer linked to you (Art. 17(3) GDPR).

10. Your rights

Under the GDPR you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have your data erased ("right to be forgotten");
restrict processing in the situations set out in Art. 18 GDPR;
receive your data in a portable format;
object to processing based on our legitimate interests;
withdraw any consent you have given, at any time.

To exercise any of these rights, contact us at hello@classroom.now. You also have the right to lodge a complaint with your supervisory authority — in our case Úřad pro ochranu osobních údajů (uoou.gov.cz), or the data protection authority of your country of residence.

11. Deleting your account

You can delete your account — and the personal data associated with it — at any time, directly in the app or by email. The exact steps, and what is deleted versus retained, are described here: Account deletion

12. Security

We protect personal data with technical and organizational measures appropriate to the risk: encryption in transit, strict access controls, tenant isolation, and security audit logging.

13. Changes to this policy

We may update this policy from time to time. The current version is always published on this page; we will announce material changes via the Service or by email before they take effect.

14. Contact

Questions about privacy at classroom.now? Write to us at hello@classroom.now