The 30-second version. LinoClass collects only what's needed to run the classroom (student first name, parent email, portfolio content). Data is hosted in Quebec, Canada. No advertising, no resale, no behavioural tracking. Parents can request access, correction, or deletion of their child's data at any time. Written response within 30 days, in compliance with Quebec's Law 25 and Canada's PIPEDA.
1. Who we are
LinoClass is operated by Lino Ti Inc., a corporation incorporated in Quebec, Canada. This document describes how we collect, use, share, and protect personal information processed through our web application (linoclass.ca, app.linoclass.ca, api.linoclass.ca).
2. Information we collect
2.1 Teacher account
- Email address (for account creation and notifications)
- First and last name (visible to your students and parents)
- Class name and grade level (to organize the portfolio)
- Language preferences (French or English)
2.2 Students
- First name (and, if you enter it, last name or initial)
- Random internal identifier for QR code login
- Portfolio content you or the student creates: photos, videos, audio, drawings, learning artifacts
- An avatar photo or image, if you choose one for the student
- No password, no address, no date of birth, no school file number
2.3 Parents
- Email address (for magic link login and weekly digest)
- First name (optional, visible to teachers)
- Notification preferences
- Comments left on classroom announcements
- Documented parental consent (date, content accepted)
2.4 Technical data
- IP address, used in the moment to rate-limit requests and detect abuse. It is not stored in our database.
- Browser and operating system type
- Server technical logs (timestamps, response codes, duration). They rotate automatically and are not kept long term.
What we do NOT collect: no advertising pixels, no behavioral analytics tools (no Google Analytics, no Meta Pixel, no TikTok Pixel, no Mixpanel), no third-party tracking cookies, no biometric data. We use a single web statistics tool, self-hosted by us in Quebec: it counts page views, referrers and device type, with no cookie, no advertising identifier and no individual profile. The statistics are aggregated and cannot identify you from one visit to the next.
3. Hosting and data location
LinoClass data is hosted in Quebec, Canada, on dedicated infrastructure rented from a provider bound by contract.
Specifically:
- Database (accounts, classrooms, students, announcements, messages): Quebec
- Portfolio files (photos, drawings, video, audio): Quebec
- Application and processing: Quebec
Some technical providers may process a limited subset of information outside Quebec: email delivery (the recipient's email address and the message content) and network protection (IP address). No portfolio content and no database leaves Quebec. These providers are bound by contract, may not use the information for their own purposes, and an up-to-date list is available on request at privacy@linoclass.ca.
Lino Ti Inc. maintains a written agreement with each of these providers governing the processing of personal information. A copy is available on request at privacy@linoclass.ca.
4. Use of data
We use collected information solely for:
- Operating the service (displaying portfolio, sending digests, processing payments)
- Communicating with you about your account (important changes, security issues)
- Detecting and preventing abuse (rate limits, fraud detection)
- Improving the service (aggregated, anonymous usage analysis without individual identification)
- Sending you the newsletter, only if you consented to it. That consent is separate from classroom notices. You can withdraw it in your settings without losing anything in the service.
- Meeting our legal obligations (Law 25, PIPEDA, legally valid requests from public authorities)
We sell no data. We share no data for advertising purposes. We train no AI models on student or parent data.
5. Sharing with third parties
LinoClass uses a minimal number of subprocessors. Complete list:
- OVH (Beauharnois, Quebec, Canada). Primary subprocessor for hosting, database, media storage and backups. Student photos, drawings and work reside on this infrastructure, in Quebec. OVH data protection.
- Cloudflare Inc. (US). DNS service and delivery of transactional emails (magic links, invitations, verification codes). Email addresses and first names only, no portfolio content. Cloudflare privacy policy.
- Stripe Inc. (US and Canada). Payment processing for subscriptions. No student data is shared with Stripe; only billing information for the teacher or school. Stripe privacy policy.
No other third party receives data. No data is shared with data brokers, advertising agencies, or tracking platforms.
6. Data retention
- Active accounts: retained as long as the teacher or school uses the service.
- Inactive accounts: we delete accounts that go 24 months without a sign-in. We send an email notice before we do.
- Portfolio content: retained during the current school year and the following year (to allow parent export). Deleted at end of this period unless the school requests extended retention.
- Technical logs: automatic rotation, not kept long term.
- Deletion requests: executed within 30 days of receipt. Backups rotate continuously and stop holding the deleted data shortly after. They are kept in Quebec, like everything else.
7. Your rights
Under Quebec's Law 25 (Act to modernize legislative provisions respecting the protection of personal information) and PIPEDA (Personal Information Protection and Electronic Documents Act), you have the right to:
- Access the personal information we hold about you or your child
- Correct any inaccurate or incomplete information
- Request deletion of your data or your child's data
- Request a copy of your child's personal information, on written request
- Withdraw consent at any time (withdrawal does not affect the legality of past processing)
- File a complaint with the Commission d'accès à l'information du Québec (CAI) if you believe we have not respected your rights: cai.gouv.qc.ca
To exercise any of these rights, write to privacy@linoclass.ca. Our designated privacy officer (RPI) will respond in writing within 30 days of receiving your request, in accordance with section 32 of the Act respecting the protection of personal information in the private sector (CQLR, chapter P-39.1).
8. Security
We protect your data through the following measures:
- Encryption in transit (TLS 1.3) for all communications
- Databases and files stored on dedicated infrastructure in Quebec, with no public network access
- Server access limited to authorized administrators, with no password login
- Passwordless login for students: the classroom QR code works only during school hours, which the school can set (6 AM to 6 PM by default), and the device session ends after 10 hours
- The home-access QR code, created by the parent, is not limited to school hours, because homework happens in the evening. The student session ends after 8 hours
- Magic link for parents: single-use token, 15-minute expiration
- Teacher passwords: never stored in clear text, only as a PBKDF2-SHA256 hash at 100,000 iterations
- Logging of sensitive actions: data access, exports and deletions
- Incident notification within 72 hours of discovering a privacy incident affecting personal information
9. Children under 14
LinoClass is designed for students ages 5 to 8 in a school context. Parental consent is mandatory before any information about a student is collected. The school or teacher is responsible for obtaining and documenting this consent before inviting a parent to log in.
The student does not have an autonomous account in the classical sense (no password, no personal email address). All login is done via the class QR code under teacher supervision.
10. Cookies
LinoClass uses only cookies strictly necessary for service operation (authentication session, language preference). No advertising cookies, no tracking cookies, no third-party cookies.
11. Changes to this policy
We may modify this policy to reflect changes in service or legal requirements. In case of material changes, we will notify you by email and via a banner on your dashboard at least 30 days before the effective date. The "last updated" date at the top of the document indicates the current version.
12. Contact and Privacy Officer (RPI)
For general inquiries (not Law 25-related rights), write to support@linoclass.ca.
This privacy policy is written in Canadian French as the official reference language. An English version is available at linoclass.ca/privacy. In case of interpretation discrepancy, the French version prevails.