Privacy at ClassClerks.

Last updated August 26, 2026

ClassClerks Privacy Policy

ClassClerks is a product of OmniPro Labs, a DBA of Sculpt Marketing Group, LLC ("ClassClerks," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when people use ClassClerks websites, applications, school portals, and connected services (collectively, the "Services").

Organizations that subscribe to ClassClerks, such as schools, co-ops, programs, and educational organizations, control the records they place in the Services. For those records, ClassClerks acts as a service provider or processor and follows the subscribing organization's authorized instructions, applicable agreements, and applicable law.

1. Information we collect

Depending on how the Services are used, we may collect:

• Account and profile information, including names, email addresses, phone numbers, authentication identifiers, organization affiliations, roles, profile photos, and communication preferences.
• School and program records, including family and student profiles, registrations, schedules, attendance, assignments, grades, forms, activities, service hours, staff or contractor records, and other information submitted by an authorized organization or user.
• Billing and commerce information, including invoices, payment status, credits, orders, subscription records, and identifiers supplied by payment providers. ClassClerks does not store full payment-card numbers.
• Communications and support information, including messages, announcements, support tickets, uploaded attachments, and responses to forms.
• Device and usage information, including IP address, browser and device type, timestamps, pages or features used, diagnostic logs, and security events.
• Connected-service information, when an authorized user connects services such as Google, Plaid, Stripe, communications providers, accounting tools, or merchandise providers.

2. Bank connections and Plaid

ClassClerks uses Plaid Link to let an authorized user connect a financial account for accounting and reconciliation purposes. The connection is optional and begins only after the user chooses to connect an account and completes Plaid's consent flow.

Plaid handles the financial institution sign-in process. ClassClerks does not receive or store a user's online-banking username or password. With the user's authorization, Plaid may provide ClassClerks with information for the products enabled in the connection, including financial institution and account names, account type and subtype, a masked account identifier, currency, current or available balance, and transaction information such as date, amount, merchant, description, category, location, and pending or posted status.

ClassClerks uses Plaid-provided data only to provide authorized accounting functions, such as displaying connected accounts, importing and categorizing transactions, reconciling records, and preparing financial reports for the connected organization. Access is limited according to the organization's roles and permissions. ClassClerks does not sell Plaid-provided data or use it for cross-context behavioral advertising, credit decisions, or underwriting.

ClassClerks stores Plaid access tokens in encrypted form and does not display them in the user interface. When an authorized user removes a bank connection, ClassClerks requests removal of the corresponding Plaid Item, deactivates the connected accounts, and deletes the stored connection and token. Previously imported accounting entries may be retained as part of the organization's business records, subject to the retention section below.

Plaid separately collects and processes information under the Plaid End User Privacy Policy. Users may also manage certain Plaid connections through Plaid Portal.

3. Payments and Stripe

ClassClerks uses Stripe to process payments, maintain saved payment methods at the user's direction, manage subscriptions and payment plans, issue refunds or credits, and help detect and prevent fraudulent transactions. When a user begins or completes a payment, Stripe may receive transaction and checkout information such as the payer's name, email address, phone number, billing or shipping address, payment-method details, purchase amount, date, merchant, items purchased, device and browser information, IP address, and related fraud-prevention signals.

Payment-method entry is handled by Stripe. ClassClerks does not receive or store full payment-card numbers, card security codes, or online-banking credentials. Stripe may provide ClassClerks with limited payment information needed to operate the Services, such as a Stripe customer or payment identifier, payment status, card brand, card expiration date, and the last four digits of a payment method.

ClassClerks uses Stripe-provided information to complete purchases, manage recurring billing and subscriptions, maintain invoices and receipts, apply refunds or credits, reconcile accounting records, respond to payment questions, and protect the Services from fraud and abuse. Stripe processes personal information under the Stripe Privacy Policy and provides additional details in the Stripe Privacy Center.

4. How we use information

We use information to:

• provide, configure, maintain, and improve the Services;
• authenticate users and enforce organization, program, and role-based access;
• process registrations, billing records, payments, bank connections, accounting entries, communications, forms, and support requests;
• protect users, investigate errors or misuse, prevent fraud, and monitor reliability and security;
• communicate service, account, security, billing, and support information;
• comply with legal obligations and enforce our agreements; and
• create aggregated or de-identified operational information that does not reasonably identify an individual.

5. How we disclose information

We may disclose information:

• to the subscribing organization and its authorized users according to configured roles and permissions;
• to service providers that help us host, secure, communicate, process payments, connect accounts, provide integrations, or support the Services, including providers such as Plaid and Stripe;
• when directed or authorized by the subscribing organization or the individual;
• when required by law or reasonably necessary to protect rights, safety, security, or the integrity of the Services; or
• in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice requirements.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

6. Student and children's information

ClassClerks supports educational organizations that may maintain information about children and students. The subscribing organization determines what information is collected, who may access it, and how the Services are used. Organizations and parents or guardians are responsible for providing required notices, obtaining required consent, and using the Services in accordance with applicable student-privacy and children's-privacy laws. ClassClerks limits access to student information according to organization settings, user roles, family relationships, and authorized educational purposes.

7. Cookies and similar technologies

We use cookies, local storage, and similar technologies that are necessary for sign-in, security, preferences, session continuity, and service operation. We may use limited analytics to understand performance and improve the Services. Browser settings can control certain technologies, but disabling required cookies may prevent the Services from working correctly.

8. Data retention

We retain information only for as long as reasonably necessary to provide the Services, fulfill the purposes described in this Policy, maintain authorized school or business records, resolve disputes, enforce agreements, and meet legal, tax, accounting, and security obligations. Our operational retention schedule generally provides:

• Customer and school records: for the active customer relationship and a limited transition period after termination, unless the subscribing organization requests earlier deletion or a longer period is required by law or contract.
• Accounting, transaction, invoice, and tax records: generally seven years, unless a different period is legally required.
• Plaid connection credentials: until the connection is removed or no longer needed. Removing a connection requests deletion of the Plaid Item and deletes the encrypted access token from active ClassClerks systems. Previously imported accounting records may remain under the accounting retention period.
• Support and operational records: only as long as needed to resolve the request, maintain an appropriate service history, or meet security and legal requirements.
• System and security logs: generally 30 days in active log systems, with longer retention only when necessary to investigate an incident or meet a legal requirement.
• Backups: production database backups are maintained on a rolling schedule, generally up to 30 days. Data deleted from active systems is removed from backups as those backups expire and is not restored to active use except when required for disaster recovery.

When information reaches the end of its retention period, we delete, securely overwrite, cryptographically erase, or de-identify it using methods appropriate to the storage medium. A legal hold, security investigation, dispute, or other documented obligation may temporarily suspend deletion. Additional details are maintained in the ClassClerks Data Retention and Disposal Policy.

9. Security

We use administrative, technical, and physical safeguards designed to protect information, including access controls, role-based authorization, encryption in transit, encryption of sensitive integration tokens at rest, logging, backups, vulnerability and patch management, and incident-response procedures. No system can guarantee absolute security, so users should protect their credentials and promptly report suspected unauthorized access.

10. Choices and privacy requests

Users may update many profile and preference settings within the Services. Authorized users can disconnect a Plaid bank connection from the applicable accounting area. Individuals may request access, correction, deletion, or other available privacy rights by contacting their subscribing organization or ClassClerks. We may need to verify the request and may direct school-record requests to the organization that controls those records. Some information may be retained where required by law or necessary for legitimate business records.

11. International use

ClassClerks is operated from the United States. If the Services are used from another country, information may be processed in the United States or other locations where our service providers operate, subject to applicable safeguards.

12. Changes to this Policy

We may update this Privacy Policy as the Services, integrations, or legal requirements change. We will post the revised Policy at this URL and update the date above. When appropriate, we may provide additional notice through the Services.

13. Contact us

Questions or privacy requests may be sent to support@classclerks.com. Please do not send passwords, payment-card numbers, bank credentials, or other highly sensitive information by email or support ticket.