Your notes,
locked down.

Live security status

Real status — not aspirational. Updated with every release.

How your data meets the AI

When you ask the AI tutor a question, ClassMinds fetches the most relevant passages from your notes, sends those — and only those — along with your question to the model. The model generates an answer grounded in that context.

• Uploads are indexed privately; the index is scoped to your account
• Retrieved passages are sent as one-time request context — not stored by the model provider
• We use OpenAI's zero-retention API mode: prompts aren't retained for training
• You can delete any uploaded file at any time; its index is removed within minutes

Compliance & privacy laws

ClassMinds is built around data-minimization principles from the start.

• GDPR: Users can export and delete their data from Settings. We don't sell data. DPAs available for EU institutions.
• CCPA: California users have the same export/delete rights. We don't sell personal information.
• FERPA: ClassMinds is consumer-facing today, not a covered school official. If your institution wants to deploy ClassMinds as a FERPA-scoped service, we offer a Data Processing Agreement.
• COPPA: ClassMinds is 13+. We don't knowingly collect data from children under 13.

Responsible disclosure

Found a security issue? Report it directly — we read every email and respond within 48 hours. We don't offer a bug bounty yet, but we do credit disclosures publicly (with your permission).