Privacy Policy

1. Overview

The Classroom Exchange ("TCE", "we", "us") operates theclassroomexchange.ca, a marketplace for educators to buy and sell digital teaching resources. This policy explains what personal information we collect, how we use it, and the choices you have. We handle personal information in accordance with Canadian privacy law, including PIPEDA.

2. Information We Collect

Account information: your name, email address, and password when you sign up, plus any profile details you choose to add.

Transaction information: records of your purchases, sales, downloads, and payouts. Payment card details are collected and processed directly by Stripe, our payment processor — we never see or store your full card number.

Seller information: if you sell on TCE, Stripe collects identity and banking details during Connect onboarding to verify your account and send payouts.

Usage information: pages visited, searches, and general analytics data (collected via Google Analytics using cookies), along with technical data such as browser type and IP address.

3. How We Use Your Information

We use your information to operate the marketplace: creating and securing your account, processing orders and payouts, delivering purchased files, providing customer support, sending transactional emails (receipts, download links, payout notices), preventing fraud and abuse, and understanding how the site is used so we can improve it.

We do not sell your personal information to anyone.

4. Third-Party Services

Stripe processes all payments and seller payouts. Their handling of your data is described in the Stripe Privacy Policy.

Supabase provides our database, authentication, and file storage infrastructure, where your account data and purchased files are stored.

Google Analytics helps us understand site traffic through cookies. You can opt out with the Google Analytics browser add-on or by blocking cookies.

Each of these providers only receives the information needed to perform its service.

5. Cookies

We use cookies that are essential for the site to function — keeping you signed in and maintaining your cart — and analytics cookies from Google Analytics. You can control or delete cookies through your browser settings; disabling essential cookies may prevent parts of the site from working.

6. Data Retention

We keep your information for as long as your account is active or as needed to provide the service. Transaction records are retained longer where required for tax, accounting, and legal purposes. When information is no longer needed, we delete or anonymize it.

7. Security

All traffic to the site is encrypted with HTTPS, passwords are stored hashed, and database access is restricted with row-level security. Payments are handled by Stripe, a PCI-DSS Level 1 certified processor. No system is perfectly secure, but we work to protect your information with industry-standard measures.

8. Your Rights

You may access and update your account information at any time from your profile. You may also request a copy of the personal information we hold about you, ask us to correct it, or request deletion of your account and associated data by emailing us. We will respond to requests within a reasonable time, subject to records we must keep by law.

9. Children

The Classroom Exchange is intended for educators and other adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will delete it.

10. International Transfers

Our service providers (including Stripe, Supabase, and Google) may store or process information on servers outside Canada, including in the United States. Where they do, your information is subject to the laws of those jurisdictions.

11. Changes to This Policy

We may update this policy from time to time. The "Last updated" date above reflects the current version, and material changes will be posted on this page.

12. Contact

Questions or requests about your personal information? Email us at theclassroomexchange@gmail.com.