Privacy policy
Last updated: 2 September 2026
Who is responsible
Unclass is operated by Sergei Andronov, self-employed (autónomo) in Spain, NIE Z1308614B, Avenida Fernando Abril Martorell 28, A-1-1, 46026 Valencia, Spain. Contact: [email protected].
Unclass is the data controller for teacher and school accounts. For student data, Unclass is a data processor acting on the instructions of the teacher or school that added the student, who is the controller. Students should direct requests about their data to their teacher or school first.
What we process and why
| Data | Purpose | Legal basis (GDPR art. 6) |
|---|---|---|
| Email, name, password (hashed), time zone, languages | Provide accounts and sign-in | Contract (b) |
| Lessons, uploads, exercise answers, messages, teacher notes, dictionary entries | Deliver classrooms and save learning progress | Contract (b) |
| Audio and video streams during live classrooms | Run the live class; not recorded | Contract (b) |
| IP address, browser user agent, timestamps | Secure sessions, prevent abuse, diagnose errors | Legitimate interest (f) |
| Aggregated, cookieless visit statistics on the marketing site | Measure site usage | Legitimate interest (f) |
We do not sell personal data, use it for advertising, or make automated decisions with legal effects.
Children
Students under 14 may be added to Unclass only by a teacher or school that holds the consent of a parent or legal guardian. Teachers and schools are responsible for obtaining it.
Cookies
We use only strictly necessary cookies to keep you signed in and to open live classrooms. No consent banner is required. Marketing-site analytics do not use cookies.
Where data goes
All data is stored in the European Union. We use these service providers, each bound by a data processing agreement:
| Provider | Role | Location |
|---|---|---|
| Hetzner Online GmbH | Servers and file storage | Germany |
| LiveKit, Inc. | Live audio and video | EU region |
| Resend, Inc. | Transactional email | EU region |
| AppSignal B.V. | Error monitoring | Netherlands |
We also disclose data when required by law.
Retention
Data is deleted on request, or after 12 months of account inactivity. Server logs are kept for 30 days. Data may be kept longer where a legal obligation requires it.
Your rights
You may access, correct, delete, restrict, or export your data, and object to processing based on legitimate interest, by emailing [email protected]. You may also complain to the Spanish Data Protection Agency (AEPD, aepd.es).
Changes
We will post any changes here and update the date above.