The 30-second version. LinoClass collects only what's needed to run the classroom (student first name, parent email, portfolio content). Data is hosted in Canada (Cloudflare ENAM region). No advertising, no resale, no tracking. Parents can request access, correction, or deletion of their child's data at any time. Written response within 30 days, in compliance with Quebec's Law 25 and Canada's PIPEDA.
1. Who we are
LinoClass is operated by Lino Ti Inc., a corporation incorporated in Quebec, Canada. This document describes how we collect, use, share, and protect personal information processed through our web application (linoclass.ca, app.linoclass.ca, api.linoclass.ca).
2. Information we collect
2.1 Teacher account
- Email address (for account creation and notifications)
- First and last name (visible to your students and parents)
- Class name and grade level (to organize the portfolio)
- Language preferences (French or English)
2.2 Students
- First name (and, if you enter it, last name or initial)
- Random internal identifier for QR code login
- Portfolio content you or the student creates: photos, videos, audio, drawings, learning artifacts
- No password, no address, no date of birth, no school file number
2.3 Parents
- Email address (for magic link login and weekly digest)
- First name (optional, visible to teachers)
- Notification preferences
- Comments left on classroom announcements
- Documented parental consent (date, content accepted)
2.4 Technical data
- IP address (for security and abuse detection, retained 30 days)
- Browser and operating system type
- Service access logs (timestamps, response codes, duration), retained 30 days
What we do NOT collect: no advertising pixels, no behavioral analytics tools (no Google Analytics, no Meta Pixel, no TikTok Pixel, no Mixpanel), no third-party tracking cookies, no biometric data.
3. Hosting and data location
LinoClass data is hosted by Cloudflare Inc., a company specializing in secure online data storage, in the ENAM (Eastern North America) region. The datacenters in this region are located in Toronto and Montreal, which satisfies Canadian data residency requirements.
Specifically:
- Database (Cloudflare D1): ENAM region, verifiable on request from our privacy officer
- File storage (Cloudflare R2): ENAM region
- Application logic (Cloudflare Workers): executed on Canadian edge nodes when the user connects from Canada
- Session storage (Durable Objects): geolocated in ENAM
Lino Ti Inc. has a written agreement with Cloudflare to ensure data is processed in compliance with applicable privacy law. This agreement is incorporated into our terms of service. A copy is available on request at privacy@linoclass.ca.
4. Use of data
We use collected information solely for:
- Operating the service (displaying portfolio, sending digests, processing payments)
- Communicating with you about your account (important changes, security issues)
- Detecting and preventing abuse (rate limits, fraud detection)
- Improving the service (aggregated, anonymous usage analysis without individual identification)
- Meeting our legal obligations (Law 25, PIPEDA, legally valid requests from public authorities)
We sell no data. We share no data for advertising purposes. We train no AI models on student or parent data.
5. Sharing with third parties
LinoClass uses a minimal number of subprocessors. Complete list:
- Cloudflare Inc. (US headquarters, ENAM Canadian infrastructure). Primary subprocessor for hosting, database, storage, and execution. Cloudflare privacy policy.
- Stripe Inc. (US and Canada). Payment processing for subscriptions. No student data is shared with Stripe; only billing information for the teacher or school. Stripe privacy policy.
- Resend Inc. (US). Sending transactional emails (magic links, digests, notifications). Email addresses only, no portfolio content. Resend privacy policy.
No other third party receives data. No data is shared with data brokers, advertising agencies, or tracking platforms.
6. Data retention
- Active accounts: retained as long as the teacher or school uses the service.
- Inactive accounts: automatic deletion after 24 months without login.
- Portfolio content: retained during the current school year and the following year (to allow parent export). Deleted at end of this period unless the school requests extended retention.
- Technical logs: 30 days.
- Deletion requests: executed within 30 days of receipt, including backup copies.
7. Your rights
Under Quebec's Law 25 (Act to modernize legislative provisions respecting the protection of personal information) and PIPEDA (Personal Information Protection and Electronic Documents Act), you have the right to:
- Access the personal information we hold about you or your child
- Correct any inaccurate or incomplete information
- Request deletion of your data or your child's data
- Export your child's complete portfolio in PDF or downloadable archive format
- Withdraw consent at any time (withdrawal does not affect the legality of past processing)
- File a complaint with the Commission d'accès à l'information du Québec (CAI) if you believe we have not respected your rights: cai.gouv.qc.ca
To exercise any of these rights, write to privacy@linoclass.ca. Our designated privacy officer (RPI) will respond in writing within 30 days of receiving your request, in accordance with section 30 of the Act respecting access to documents held by public bodies and the protection of personal information (P-39.1).
8. Security
We protect your data through the following measures:
- Encryption in transit (TLS 1.3) for all communications
- Encryption at rest for databases and file storage (default Cloudflare encryption)
- Passwordless login for students (temporary QR code valid 6 AM to 6 PM, sessions expire after 8 hours of inactivity)
- Magic link for parents (single-use token, 24-hour expiration)
- Two-factor authentication available for teachers
- Regular audit of administrative access
- Incident notification within 72 hours of discovering a privacy incident affecting personal information
9. Children under 14
LinoClass is designed for students ages 5 to 8 in a school context. Parental consent is mandatory before any information about a student is collected. The school or teacher is responsible for obtaining and documenting this consent before inviting a parent to log in.
The student does not have an autonomous account in the classical sense (no password, no personal email address). All login is done via the class QR code under teacher supervision.
10. Cookies
LinoClass uses only cookies strictly necessary for service operation (authentication session, language preference). No advertising cookies, no tracking cookies, no third-party cookies.
11. Changes to this policy
We may modify this policy to reflect changes in service or legal requirements. In case of material changes, we will notify you by email and via a banner on your dashboard at least 30 days before the effective date. The "last updated" date at the top of the document indicates the current version.
12. Contact and Privacy Officer (RPI)
For general inquiries (not Law 25-related rights), write to support@linoclass.ca.
This privacy policy is written in Canadian French as the official reference language. An English version is available at linoclass.ca/privacy. In case of interpretation discrepancy, the French version prevails.