Privacy Policy

1. Introduction

CLASSLIFT LLC, d/b/a ClassLift ("ClassLift," "we," "us," or "our") operates the ClassLift platform at classlift.app, including our mobile applications and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

Information You Provide Directly

• Account information: name, email address, phone number, and password when you create an account. SMS messaging is opt-in only and governed by our SMS Policy.
• Profile information: profile photos, bio, and other details you choose to add.
• Studio information (Studio Users): studio name, address, description, business details, instructor qualifications, and class offerings.
• Health and fitness information (Members): health forms, waiver responses, and fitness-related information requested by your studio. This information is collected on behalf of and at the direction of your studio.
• Communications: messages sent through the platform's chat features, support requests, and any other content you submit.
• Waiver and consent records: electronic signatures and waiver completion data processed through our document signing integration.

Information Collected Automatically

• Device information: device type, operating system, browser type, and unique device identifiers.
• Usage data: pages visited, features used, actions taken, timestamps, and interaction patterns.
• Log data: IP address, access times, referring URLs, and error logs.
• Cookies and similar technologies: as described in our Cookie Policy.

Information from Third Parties

• Authentication providers: if you sign in using Google or Apple, we receive your name and email address from those providers.
• Payment processors: Stripe provides us with limited transaction information (e.g., payment status, subscription status). We do not receive or store your full payment card details.
• Studio-provided data: Studio Users may upload member records, including names, contact information, and membership details.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service, including class scheduling, booking, membership management, and communications.
• Process payments and manage subscriptions through our payment processor.
• Send transactional communications, including booking confirmations, membership updates, and account notifications.
• Provide customer support and respond to your inquiries.
• Monitor and analyze usage trends to improve the user experience.
• Detect, prevent, and address fraud, abuse, security issues, and technical problems.
• Comply with legal obligations and enforce our Terms of Service.
• Generate aggregated, de-identified analytics and reporting for Studio Users about their studio performance.

4. Our Role in Processing Your Data

ClassLift serves different roles depending on the type of data being processed:

• Platform Data: ClassLift is the data controller for information we collect for our own operational purposes, such as account registration, platform analytics, and customer support.
• Studio Data: When Studio Users use ClassLift to manage their member data (including member profiles, health forms, bookings, and communications), ClassLift acts as a data processor on behalf of the Studio User. The Studio User is the data controller for this information and determines how and why it is processed.

If you are a Studio Member, your studio is primarily responsible for how your personal information is collected and used through the platform. Please refer to your studio's own privacy practices for more information.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• With Studios: Member information (name, email, booking history, membership status) is shared with the studio(s) you are associated with, as this is necessary to provide the Service.
• Service Providers: We share information with third-party service providers who assist us in operating the Service, including:
  • Stripe (payment processing)
  • Supabase (database hosting and authentication)
  • DocuSeal (electronic waivers and document signing)
  • Email and SMS delivery providers
  • Analytics providers
  • Error tracking and monitoring services
• Legal Requirements: We may disclose information if required by law, subpoena, court order, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred to the acquiring entity.
• With Your Consent: We may share information with your explicit consent for purposes not described in this Privacy Policy.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. We may also retain certain information as necessary to:

• Comply with legal obligations.
• Resolve disputes and enforce our agreements.
• Maintain business records for legitimate business purposes.

Studio Users control the retention of their member data. When a Studio User terminates their account, they have a 30-day window to export their data before it is scheduled for deletion.

When you delete your account, we will delete or de-identify your personal information within a reasonable timeframe, except where we are required to retain it for legal or legitimate business purposes.

7. Your Privacy Rights

Depending on your state of residence, you may have the following rights regarding your personal information:

California Residents (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose about you.
• Delete your personal information, subject to certain exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of your personal information. Note: ClassLift does not sell or share personal information as defined under the CCPA.
• Non-discrimination for exercising your privacy rights.

Other US State Privacy Laws

Residents of states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Indiana, Tennessee, and others) may have similar rights to access, delete, correct, and opt out. To exercise these rights, please contact us using the information below.

How to Exercise Your Rights

To exercise any of these rights, please contact us at legal@classlift.app. We will verify your identity before processing your request. We will respond to your request within the timeframes required by applicable law (typically 45 days for CCPA requests).

If your personal data is held by a studio using ClassLift, you may also need to contact the studio directly, as they are the data controller for information collected through their use of the platform.

8. Children's Privacy

The Service is not directed to children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

If you believe that a child under 13 has provided us with personal information, please contact us at legal@classlift.app.

9. Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information, including:

• Encryption of data in transit (TLS/SSL) and at rest.
• Access controls and authentication requirements for platform administration.
• Regular security monitoring and vulnerability assessments.
• Role-based access controls ensuring studio staff can only access data appropriate to their role.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Third-Party Links and Services

The Service may contain links to third-party websites and services. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you access through ClassLift.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. For significant changes, we may also provide notice via email.

Your continued use of the Service after any changes indicates your acceptance of the updated Privacy Policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: