Privacy Policy

Classi ("we," "our," or "us") operates as an independent scheduling assistant service. This Privacy Policy describes how we collect, use, and disclose information about you when you use our website and services (the "Service"). By creating an account or using the Service, you agree to the collection and use of your information as described here.

We collect only what is necessary to provide the Service: Account Information: Name, email address, and payment information. Payment card data is processed directly by our payment provider and never stored on our servers. Authentication Tokens: To act as your scheduling agent, we store encrypted Equinox authentication tokens. We do not store your Equinox password. Tokens are encrypted at rest and permanently deleted when you close your account. During active sessions, tokens are transiently cached in a cloud memory store. Location Data: If you use the gym-finder feature, we may use your approximate location to suggest nearby clubs. This is not stored beyond your session. Usage Data: Class selections, reservation history, and feature usage, associated with your account. Device and Log Data: Browser type, IP address, and referring URLs for security and abuse prevention. We use an error monitoring service that may record session activity to diagnose technical issues; text and media are masked in all recordings. Support Communications: Records of contact form submissions or emails you send us.

We use the information we collect to: • Provide, operate, and maintain the Service • Authenticate with Equinox on your behalf as your authorized agent • Process payments and manage your subscription • Send booking confirmations and billing notices • Detect and prevent unauthorized access and abuse • Enforce our Terms of Service • Comply with applicable law

We do not sell your personal information. We share it only with the following service providers: Payment processor (Stripe): Payment processing. See stripe.com/privacy. Cloud infrastructure provider: Database, authentication, and caching. Email delivery provider: Transactional emails. Equinox: Your encrypted tokens are decrypted transiently in memory solely to execute your booking instructions. Equinox's handling of this data is governed by their own privacy policy. Website analytics provider: Page view data including approximate location derived from IP address. Error monitoring and session recording provider (Sentry): Error reports and session recordings to diagnose technical issues. Text and media are masked in all recordings. Legal requirements: We may disclose your information if required by law, court order, or to protect our legal rights.

Retention: We retain your data while your account is active and as required by law. You may request deletion at [email protected]. We process deletion requests within 30 days. Billing records may be retained up to 7 years as required by tax law. Security: We use encryption in transit and at rest for sensitive credentials. You are responsible for maintaining the security of your own account credentials.

You may have the right to access, correct, delete, or receive a copy of your personal data. To exercise any of these rights, contact us at [email protected]. We will respond within 30 days and may need to verify your identity.

We use only strictly necessary cookies for login sessions. We do not use advertising cookies or third-party tracking cookies. You can control cookies through your browser settings. Disabling strictly necessary cookies will prevent you from logging in.

The Service is not directed to individuals under 18. We do not knowingly collect information from minors. If you believe we have collected information from a minor, contact us immediately at [email protected].

We may update this Policy. For material changes, we will notify you by email at least 14 days before the changes take effect. Continued use of the Service after changes constitutes acceptance.

Email: [email protected]