Privacy Policy
Effective date: September 18, 2026
ClassLedger ("ClassLedger," "we," "us," or "our") operates the ClassLedger web application (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices available to you. It applies to visitors, registered educators/administrators ("Educators"), and the student records Educators enter into the Service.
1. Who We Are
ClassLedger is a product operated by Bora Sinc, a sole proprietor doing business as "ClassLedger". For any privacy question or request, contact us at [email protected].
2. Information We Collect
Account information you provide when you register: full name, email address, password (stored only as a salted bcrypt hash, never in plain text), institution name, and an optional logo you upload.
Billing information: for paid Pro and Advanced plans, payment is handled entirely by Polar Software Inc. ("Polar"), our payment processor, which acts as merchant of record for these transactions. We never see or store your card number — only a Polar-issued customer identifier and your subscription status are stored in our database.
Student data entered by Educators: an optional student name, a student code, a learning-profile category, free-text strengths/growth-area notes, and assessment scores. This information is entered by the Educator using the Service, not collected by us directly from students. See Section 6 for how we treat this data, and the next paragraph for how student names are protected.
Privacy Mode (required for every class): ClassLedger requires every class to have Privacy Mode enabled before students, assessments, or reports can be added to it. A roster key the Educator sets never leaves their browser — student names are encrypted there before they reach us, and we only ever store and serve the encrypted value plus a non-identifying student code. We cannot read a student's name ourselves; only the Educator's own browser, using their own roster key, can decrypt it. Giving a student a name at all is optional — an Educator may identify a student by student code alone, with no name entered anywhere in the Service.
Usage information: standard web server logs (IP address, browser type, pages requested) and a session cookie used solely to keep you logged in — we do not use third-party advertising trackers or analytics cookies.
Some page assets (icon and charting libraries) are loaded from third-party content delivery networks (cdnjs, jsDelivr); as with any CDN-hosted asset, those providers may log the request in the ordinary course of serving the file.
3. How We Use Information
- To provide, operate, and maintain the Service, including generating reports and PDF exports you request.
- To process subscription payments through Polar and keep your plan tier in sync with your subscription status.
- To send transactional email: account verification, password reset, and billing-related notices. We do not send marketing email unless you separately opt in.
- To maintain the security and integrity of the Service (e.g., detecting abuse).
We do not sell personal information, and we do not use student data for advertising.
4. Sharing of Information
We share information only with the service providers necessary to run ClassLedger: our email delivery provider (transactional email), our hosting provider (application and database hosting), and Polar Software Inc., which acts as merchant of record and processes payment information for subscription purchases on our behalf. We do not sell or rent personal information to third parties, and we do not share student data for any purpose unrelated to providing the Service.
We may disclose information if required by law, or to protect the rights, property, or safety of ClassLedger, our users, or others.
5. International Data Transfers
ClassLedger's technical infrastructure is located in the United States: our hosting provider (which hosts the application and database) and our email delivery provider both operate from United States-based data centers, and our payment processor, Polar Software Inc., is a United States company that processes billing information as merchant of record for paid subscriptions. If you are located outside the United States — including in Turkey or the European Economic Area — using the Service means your account information, and, if you subscribe to a paid plan, your billing information, is transferred to and processed in the United States. This transfer is necessary to provide the Service you register for and to process any subscription payment you initiate, and by registering for an account or subscribing to a paid plan you explicitly consent to it, as described in this section. Student data you enter under Privacy Mode (Section 2) reaches these same United States-based systems only in its encrypted form — we do not have the ability to read it. If you have questions about where your data is processed, contact us at [email protected].
6. Student Data & Educators' Responsibility
ClassLedger is a tool used by Educators to record and report on their own students' progress. The Educator's institution — not ClassLedger — is the party responsible for the student records under applicable education-privacy law (such as FERPA in the United States). By entering student information into the Service, an Educator represents that they are authorized by their institution and applicable law to do so. ClassLedger acts as a service provider processing that data solely to provide the Service on the Educator's behalf, and does not use student records for any independent purpose, including advertising or profiling unrelated to the Service.
7. Children's Privacy
The Service is intended for use by adult Educators and administrators, not directly by children. Students do not create their own ClassLedger accounts or provide information to us directly. If you are a parent or guardian and believe a child has provided us information directly in a way that concerns you, contact us at [email protected] and we will look into it.
8. Data Retention & Deletion
Educators can delete data themselves, immediately and permanently, from within the Service: an individual student (along with their assessments and reports), an entire class (along with everything in it), a single saved report, or the Educator's entire account (along with everything they own), from Settings. These deletions take effect immediately and cannot be undone — there is no recovery window or "undo" — and you'll receive an email confirming what was deleted. Deleting an account requires first cancelling any active paid subscription. In addition, a student record (and an empty class) with no activity for 12 months is automatically and permanently deleted; you'll receive an email if this happens to any of your data. You can also request deletion by emailing [email protected].
9. Security
We use industry-standard practices to protect information, including bcrypt password hashing, parameterized database queries, and keeping payment and email credentials out of our source code. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
10. Your Choices & Rights
You can review and update your account and branding information at any time from Settings. You can delete an individual student, an entire class, a saved report, or your entire account yourself, immediately, from within the Service — see Section 8. Depending on where you are located, you may also have the right to: learn whether we process your data and request information about that processing; request correction of inaccurate or incomplete data; request deletion or destruction of your data; learn which third parties your data has been shared with (see Section 4) or transferred to (see Section 5); object to a decision made about you based solely on automated processing of your data; and, where applicable law provides for it, claim compensation for damage arising from unlawful processing. For anything not available as a self-service option, contact us at [email protected] — we aim to respond within 30 days. Educators are responsible for managing the student records they enter, including correcting or removing them as needed for their own institution's compliance obligations.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date above and, where appropriate, notify registered Educators by email.
12. Contact Us
Questions about this Privacy Policy can be sent to [email protected].
13. Trademark & Brand Usage
ClassLedger™ and the ClassLedger name and logo are protected intellectual property of ClassLedger. For guidelines on referencing the ClassLedger name in public contexts, see our Brand Guidelines.