This Privacy Policy describes how Klasmax (operated by Chaski Enterprises LLC, “we,” “our,” “us”) collects, uses, and shares information when you use the Klasmax software and websites (the “Service”).
1. Information we collect
From schools (our customers)
- Account information: name, email, phone, business address, payment details (processed by Stripe)
- Student records you upload: names, contact details, attendance, belt ranks, notes, billing snapshots, guardian information
- Usage information: which pages you visit, features you use, log data
From students and parents (indirectly)
We process student and parent information on behalf of the school that uploaded it. We do not collect this information directly from students or parents — the school is the controller of that data, and you should refer to the school’s own privacy practices.
From integrations
If you connect GoHighLevel, we receive contact data, conversation messages, calendar events, and tags from that connected account. If you enable AI features, we may send tenant data (counts, summaries, instructor notes, recent message bodies) to the AI provider you choose (Anthropic or OpenAI).
2. How we use information
- To provide, maintain, and improve the Service
- To process payments (via Stripe) and bill subscription fees
- To respond to your support requests
- To send transactional emails about your account
- To detect, prevent, and address fraud or security issues
- To comply with legal obligations
3. AI processing
When AI features are enabled, we send selected tenant data to the AI provider you configure. This may include: student names, attendance counts, instructor notes, recent message bodies, and chat questions you type. Both Anthropic and OpenAI commit not to train their models on API-submitted content, but you should review their respective policies (Anthropic, OpenAI) before enabling these features. You can disable AI features at any time from Settings.
4. How we share information
We share information only as needed to provide the Service:
- Service providers: Stripe (payments), Railway (hosting), Anthropic/OpenAI (AI processing — only when enabled), Twilio/Mailgun via GHL (messaging), Resend (transactional email)
- Legal compliance: when required by law, subpoena, or court order
- Business transfers: in connection with a merger, acquisition, or sale of assets, with notice to you
We do not sell personal information.
5. Data retention
We retain Your Data for as long as your account is active. On account termination, you may export data within 30 days; after that we may delete it. Some records (billing, security logs, anonymized usage data) may be retained longer to comply with legal obligations.
6. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export the personal information we hold about you. Schools and account owners can manage most data directly in the app. To exercise other rights, email hello@klasmax.com.
7. Security
We use encryption in transit (TLS) and at rest where appropriate. GHL API keys, AI provider keys, and Stripe credentials are encrypted at rest using AES-256-GCM. Passwords are hashed using bcrypt. No system is perfectly secure, and we encourage you to use strong, unique passwords and to enable any account-protection features we offer.
8. Children’s privacy
Klasmax is not directed to children under 13. Schools that upload information about minor students are responsible for obtaining any required parental consents in their jurisdiction (including under COPPA in the United States).
9. International users
Klasmax is operated from the United States. If you access the Service from outside the US, you consent to the transfer of your data to the US, where data-protection laws may differ from those in your country.
10. SMS and email
Outbound SMS sent through Klasmax is subject to US TCPA rules. Recipients can opt out by replying STOP. Outbound email is subject to CAN-SPAM and includes an unsubscribe option. Schools are responsible for obtaining valid consent from their recipients before sending marketing communications through the Service.
11. Cookies
We use a small number of essential cookies to keep you signed in and to remember UI preferences (e.g. which dashboard cards you have expanded). We do not use third-party advertising cookies on the application.
12. Changes to this policy
We may update this Privacy Policy from time to time. The Effective date at the top will reflect the latest revision. Material changes will be communicated by email or in-app notice.
13. Contact
Klasmax / Chaski Enterprises LLC
hello@klasmax.com