DRAFT. Not yet in force.
Classwares Privacy Policy
Privacy v0.4
Effective: the date we publish this version
Operator: HarvestWave, LLC, doing business as Classwares (“Classwares,” “we,” “us”)
Mailing address: 1309 Snowshoe Court, Woodland Park, CO 80863
Contact: support@classwares.com
This Privacy Policy explains what personal information we collect when you use the Classwares marketplace and seller website checkout (plugin), how we use it, and your choices.
If a FAQ and this Policy ever differ on privacy topics this Policy covers, this Policy controls for those topics. The Terms of Use control commercial terms (fees, membership, licenses).
1. Who we are
HarvestWave, LLC d/b/a Classwares operates Classwares. Questions about this Policy: support@classwares.com or mail to the address above.
2. What we collect
2.1 Account information. Email address; name; mailing address (as you provide it); password credentials stored as a secure hash (we do not store your password in plain text).
2.2 Seller and store data. Seller profile and store information; resource listings and files you upload; subscription and payout-related account data needed to run Stripe Connect.
2.3 Purchase and payment data. Order history; amounts; which resources were bought; tax amounts calculated through Stripe; platform-cut and surcharge lines on the seller ledger. Card payments are processed by Stripe. We receive payment tokens and limited payment metadata from Stripe. We do not store full card numbers. If you get a free resource, we collect your email address. We use it to send you a time-limited download link and a receipt, and for our own internal tracking. If a seller removes the resource, we may also email you a 30-day notice so you can download it. We do not use it for anything else, and we do not give it to sellers.
2.4 Technical and session data. IP address, device/browser type, cookies and similar technologies needed for login sessions, cart/checkout, fraud prevention, and site security.
2.5 Communications. Messages you send to support@classwares.com or other Classwares mailboxes; verification emails and related delivery status.
2.6 Terms acceptance record. The version of the Terms of Use and this Policy you accepted, and the date and time you accepted it.
2.7 Plugin data. Technical identifiers the Classwares plugin sends us for a seller’s site, and a record of whether a sale started through the plugin (needed to apply the correct seller rate under the Terms of Use). We never receive your site’s private credentials.
2.8 No student data. We do not knowingly collect information about students. The Terms of Use prohibit uploading student personal information, and Classwares is not designed to receive student education records. If we learn student personal information was uploaded, we will remove it.
2.9 Votes. Votes are tied to your account (account, resource, direction, time). Only you can see your own votes; no one else can see how you voted, including on group votes and polls, which are anonymous to other users. Thumbs-up and thumbs-down votes are personal preference signals that we use to personalize your own search and recommendations, and we keep them private to your account and do not show totals for them. Other votes, such as ratings or polls, may show totals, including on seller panels. We also use votes to run rankings and prevent abuse, include them in your access and deletion requests, and do not use them for advertising.
2.10 Abuse and security logs. We keep audit records of abuse events and administrator actions (account, IP address, action, time). We do not log passwords, card numbers, or message contents in them.
2.11 Preview watermark. Every preview of a resource carries a “Classwares Preview” mark. When you are signed in and view a full-item preview of a resource you bought, we also mark it with your account email address, so a leaked preview can be traced. If you view a public preview without signing in, we add a short code instead of an email address. Your email appears only on the preview copy we show to you, and we add it only for the preview. It is never added to the resource file itself, to the file any other buyer receives, or to anything shown to sellers or other users. We use these marks only for tracing leaks.
3. How we use information
We use personal information to:
- run the marketplace and seller checkout (accounts, listings, delivery of resources, guest checkout);
- process payments and seller payouts;
- calculate and collect sales tax (through Stripe) where we are required to do so;
- detect fraud, abuse, and Terms breaches;
- send verification links, transactional email (receipts, payout notices, account notices), and respond to support;
- comply with law, tax, and dispute obligations;
- improve reliability and security of the service.
We do not sell personal information for money.
4. Cookies and sessions
We use cookies and similar technologies for signed-in sessions, checkout, and security. Essential cookies are required for the service to work. If we add optional analytics or marketing cookies later, we will update this Policy and provide any choices the law requires.
Do Not Track. Classwares does not currently respond to browser “Do Not Track” signals. Where the law requires us to honor a universal opt-out signal (such as Global Privacy Control under the Colorado Privacy Act), we will.
5. Processors and sharing
5.1 We share personal information with service providers who process it for us, including Stripe (payments, sales-tax calculation and filing, and Connect payouts) and our email/hosting providers, under contracts that limit their use to providing those services.
5.2 We may share information if required by law, to protect rights and safety, or in connection with a merger, acquisition, or asset sale of HarvestWave, LLC, subject to this Policy’s protections.
5.3 We do not sell seller or buyer lists for money.
6. Email verification
Signup uses email-first verification. Verification links expire 24 hours after we issue them. We use the address you give to send that link and related account mail.
7. Retention
7.1 We keep account information while the account is active.
7.2 After a seller-initiated delete, we take resources off sale, notify affected buyers as needed, and delete the seller account and those resources after 30 days, except records we must keep longer for tax, dispute, chargeback, or legal purposes.
7.3 Order and ledger records are retained as long as needed for legal, tax, and dispute purposes.
7.4 Enforcement records. After an account is deactivated, banned, or deleted, we keep the records needed to enforce our Terms and protect users: strike and ban history; the email address and account identifiers of a permanently banned seller, so the seller cannot rejoin; copyright notices and counter-notices; and SHA-256 hashes of removed files, so they cannot be uploaded again. A hash cannot be turned back into the file. We keep strike records for as long as the strike can count under the Terms, and we keep ban records and file hashes while needed to prevent re-registration and re-upload.
7.5 Audit logs. We keep abuse and security audit records for 12 months, longer while a case, dispute, or legal hold is open. Access is limited to administrators.
8. Children’s privacy
Classwares is for adults. You must be 18 or older to create an account, buy, or sell. Classwares is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18, including children under 13. If you believe a minor has given us personal information, contact support@classwares.com and we will delete it.
9. Your rights
You may request access to or deletion of personal information we hold about you by emailing support@classwares.com. We will verify the request and respond within 45 days, extendable once by up to 45 more days where the law allows, and we will tell you if we need the extension. Some records (for example completed orders needed for tax or disputes) may be retained even when an account is closed.
Colorado residents may have additional rights under the Colorado Privacy Act (access, deletion, correction, and opt-out of certain targeted advertising or profiling, where applicable). To exercise those rights, contact support@classwares.com. We will not discriminate against you for exercising privacy rights the law gives you.
10. Security
We use reasonable administrative, technical, and physical safeguards appropriate to a marketplace of this size. No method of transmission or storage is 100% secure.
Breach notice. If we learn that your personal information was accessed or acquired without authorization, we will notify you by email, and regulators where required, as the law requires (in Colorado, within 30 days after we determine a breach occurred).
11. Changes
We may update this Policy by posting a new version on the Classwares site. If a change is material, we will give notice by email to the account email or by an in-product notice before it applies, except where a shorter period is required by law or by an urgent security need.
12. Contact
HarvestWave, LLC d/b/a Classwares
1309 Snowshoe Court
Woodland Park, CO 80863
support@classwares.com
