1. Introduction

PickMyClass ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.

This Service is available only to users in the United States. This policy complies with US federal laws and the California Consumer Privacy Act (CCPA).

2. Information We Collect

2.1 Personal Information You Provide

• Email Address: Required for account creation and sending notifications
• Password: Stored securely using industry-standard encryption (handled by Supabase Auth)
• Class Preferences: The class sections you choose to monitor (term, subject, catalog number, section number)
• Age Verification: Confirmation that you are 18 years or older

2.2 Automatically Collected Information

• Usage Data: Timestamps of when you add/remove class watches, when notifications are sent
• Session Data: Authentication session information stored in cookies
• Technical Data: IP address (for security purposes only, not stored long-term)

2.3 Information We Do NOT Collect

• We do NOT collect your real name, phone number, or physical address
• We do NOT use tracking pixels or analytics cookies
• We do NOT sell, rent, or share your data with third parties for marketing purposes

3. How We Use Your Information

We use your information only for the following purposes:

• Provide the Service: Monitor class availability and send you email notifications
• Account Management: Authenticate your login, manage your account settings
• Service Improvements: Understand usage patterns to improve reliability (aggregated data only)
• Security: Detect and prevent abuse, fraud, or unauthorized access
• Legal Compliance: Respond to legal requests or enforce our Terms of Service

4. How We Share Your Information

We do NOT sell your personal information. We may share your information only in these limited circumstances:

• Service Providers: We use third-party services to operate:
  • Supabase (database and authentication) - see their privacy policy
  • Cloudflare Email Service (email delivery) - see their privacy policy
  • Cloudflare Workers (hosting) - see their privacy policy
• Legal Requirements: If required by law, court order, or government request
• Business Transfers: If the Service is acquired or merged (you will be notified)

5. Cookie Policy

We use cookies only for essential functionality. By using our Service, you consent to the use of these cookies.

5.1 Essential Cookies

5.2 Cookie Characteristics

• HttpOnly: Yes (prevents JavaScript access for security)
• Secure: Yes (transmitted only over HTTPS)
• SameSite: Lax (prevents cross-site request forgery)

5.3 What We Do NOT Use

• No analytics cookies (Google Analytics, etc.)
• No advertising cookies
• No third-party tracking pixels
• No social media cookies

How to Disable Cookies: You can configure your browser to refuse all cookies or alert you when cookies are sent. However, disabling cookies will prevent you from logging in and using the Service.

6. Data Retention and Deletion

6.1 How Long We Keep Your Data

• Account Data: Until you delete your account
• Class Watches: Until you remove them or delete your account
• Notification History: Kept for 1 year, then automatically deleted
• Disabled Accounts: Account disabled immediately upon request; data retained for 30 days for business records, then permanently deleted

6.2 Automatic Data Cleanup

We automatically delete old data to minimize retention:

• Class state history older than 6 months (for sections with no active watchers)
• Notification records older than 1 year
• Disabled accounts older than 30 days

7. Your Rights (California Residents - CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

7.1 Right to Know

You have the right to request what personal information we have collected about you in the past 12 months. Use the "Export Data" button in your Settings page.

7.2 Right to Delete

You have the right to request deletion of your personal information. Use the "Delete Account" button in your Settings page.

Note: We may retain certain information if required by law or necessary for legitimate business purposes (e.g., fraud prevention, security).

7.3 Right to Opt-Out of Sale

We do NOT sell your personal information, so there is nothing to opt out of.

7.4 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights.

7.5 How to Exercise Your Rights

You can exercise your rights by:

• Using the self-service tools in your Settings page (fastest)
• Emailing us at: support@pickmyclass.app

We will respond to verified requests within 45 days.

8. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: All data transmitted over HTTPS (TLS 1.3)
• Password Storage: Passwords are hashed using bcrypt (handled by Supabase)
• Database Security: Row Level Security (RLS) policies prevent unauthorized access
• Access Control: Minimal employee access; service accounts use least-privilege principle

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

Our Service is NOT intended for users under 18 years of age. We do not knowingly collect information from children under 18.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us atsupport@pickmyclass.app and we will delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new Privacy Policy on this page with an updated "Last Updated" date
• Sending an email notification to your registered email address

Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your privacy rights, contact us at: