CL Collective Pte Ltd (“ClassNest”, “we”, “our”, or “us”) operates the ClassNest platform accessible at classnest.io. This Privacy Policy explains how we collect, use, disclose, and protect your personal data in accordance with Singapore’s Personal Data Protection Act 2012 (PDPA).
By using ClassNest, you consent to the practices described in this policy. If you do not agree, please discontinue use of the platform.
1. Who We Are
ClassNest is a SaaS platform designed for enrichment centres, tuition centres, and education providers in Singapore. We help organisations manage teachers, classes, student enrolments, attendance, and parent communications.
Data Controller:
CL Collective Pte Ltd
[Registered Address — update before launch]
Singapore
Email: hello@classnest.io
2. What Personal Data We Collect
We collect personal data from different groups of users:
Organisation Admins & Teachers
- Full name, email address, and phone number
- Role and employment information (e.g. part-time teacher timesheets)
- Login credentials (stored securely via Supabase Auth)
- Activity data within the platform (e.g. attendance records, class updates posted)
Parents
- Full name, email address, and phone number
- Billing and payment information (processed securely by Stripe — we do not store card details)
- Communication history via in-app messaging
Students (children)
- Child’s name, age, and enrolment details
- Attendance records and class participation history
- Photos and lesson content — teachers may upload photos as part of class updates, which are visible to the relevant parent(s) within the platform.
Organisation & Location Data
- Centre name(s) and physical address(es)
- Subject and class information
- Scheduling and operational data
3. How We Use Your Personal Data
We use personal data for the following purposes:
- Platform operation — to provide, maintain, and improve ClassNest services
- Account management — to create and manage user accounts for admins, teachers, and parents
- Class management — to record attendance, manage schedules, and facilitate class updates
- Parent communications — to send class updates, announcements, and notices via the platform
- Invoicing and payments — to generate invoices and process payments via Stripe
- Legal compliance — to comply with applicable Singapore laws and regulations
- Customer support — to respond to queries and resolve issues
4. Photos of Children
ClassNest allows teachers to upload photos of students as part of lesson updates. These photos are:
- Accessible only to parents of the relevant child and authorised organisation staff
- Not shared publicly or with third parties outside of the platform
- Stored securely in Supabase Storage with access controls
- Subject to deletion upon request (see Section 8)
By enrolling a child and accepting these terms, parents consent to class-related photos being uploaded and shared in this limited, private manner. Parents may withdraw this consent at any time by contacting us at hello@classnest.io.
5. Payment Data
Payments on ClassNest are processed by Stripe, a third-party payment processor. We do not store credit card numbers or full payment details on our servers. Stripe processes payment data in accordance with their own privacy policy and PCI-DSS compliance standards. You can review Stripe’s privacy policy at stripe.com/en-sg/privacy.
6. How We Share Your Data
We do not sell your personal data. We may share data with:
- Supabase — our database and authentication infrastructure provider
- Stripe — for payment processing
- Vercel — our hosting provider
- Authorised staff within your organisation — admins and teachers as necessary to operate the platform
- Law enforcement or regulators — where required by Singapore law
All third-party service providers are required to handle personal data securely and only for the purposes we specify.
7. Data Retention
We retain personal data for as long as your organisation maintains an active account with ClassNest, or as required by Singapore law. Upon account termination:
- Organisation data is retained for up to 12 months before deletion, unless a shorter period is requested
- Payment records may be retained for up to 7 years for legal and accounting purposes
- Backup data may persist for up to 90 days after deletion
8. Your Rights Under the PDPA
Under Singapore’s PDPA, you have the right to:
- Access — request a copy of personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Withdrawal of consent — withdraw consent for specific uses of your data (note: this may affect your ability to use certain features)
- Data portability — request your data in a machine-readable format where applicable
To exercise any of these rights, contact us at hello@classnest.io. We will respond within 30 days.
9. Data Security
We implement appropriate technical and organisational measures to protect personal data, including:
- Encrypted data transmission (HTTPS/TLS)
- Secure authentication via Supabase Auth
- Row-level security policies on our database
- Access controls limiting data visibility by role
While we take reasonable precautions, no system is entirely secure. In the event of a data breach affecting your personal data, we will notify affected users and the Personal Data Protection Commission (PDPC) as required by law.
10. Cookies
ClassNest uses essential cookies for authentication and session management. We do not use advertising or tracking cookies. You may disable cookies in your browser settings, but this may affect platform functionality.
11. Children’s Privacy
ClassNest collects limited data about children (students) solely for educational and administrative purposes. This data is provided by parents or authorised guardians during enrolment. We do not collect data directly from children, and children do not have login accounts on the platform.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify organisation admins of material changes via email or in-app notification. Continued use of ClassNest after changes are posted constitutes acceptance of the updated policy.
13. Contact Us
For any privacy-related queries or to exercise your PDPA rights, please contact:
CL Collective Pte Ltd
Email: hello@classnest.io