Privacy Policy — VanClass

VanClass ("we," "us," "our") operates an audio-first HVAC/R certification training platform. This policy explains what we collect, why, and your rights.

1. Information we collect

Account: name, email, password (hashed), purchased plans.
Progress: course progress, quiz scores, exam attempts — to provide the service.
Usage & technical: IP, device, pages visited — to operate and secure the service.
Billing: processed by Stripe; we do not store full card numbers.

2. How we use it

To provide and secure the service, track your learning, send transactional and (with consent) promotional email, comply with law, and improve the product with aggregate non-identifying data.

3. Cookies & consent

We use strictly-necessary cookies (auth/session) and, only with your consent, optional analytics. You can decline and still use the core service.

When analytics is on, it is first-party and cookieless. It sets no cookies and stores no identifiers — only the page path, the referring host, and a daily-rotating hash that cannot be linked across days — and is used in aggregate only.

We share only with hosting/payment providers (Supabase, Stripe, Netlify) needed to operate the service and where required by law. We do not sell personal data. Where we act as a processor for a business customer, the terms of that relationship are set out in our Data Processing Agreement.

5. Retention & security

We keep account records while active or as needed for legal/contractual purposes, then delete or anonymize. We use encryption in transit and industry-standard access controls.

6. Your rights (GDPR / CCPA)

You may request access, correction, deletion, portability, and withdraw consent. For DSARs and account deletion, use the in-app controls or contact us.

7. Contact