Privacy Policy

1. Who we are

ClassGrade is a product developed and maintained by BlueberryML Ltd, a company registered in England and Wales.

For privacy enquiries: privacy@blueberryml.com

2. What this policy covers

This policy covers personal data collected and processed through:

• The classgrade.com marketing website
• The ClassGrade teacher and administrator dashboard (app.classgrade.com)
• The ClassGrade student-facing platform (operated by our clients on their behalf)
• Contact and enquiry forms

3. Data we collect

Website visitors (classgrade.com)

We collect standard web analytics data — pages visited, referrer, browser type, and approximate location — to understand how the site is used. We do not use cookies beyond those strictly necessary for site function, and we do not track individuals across sites.

Contact form submissions

When you submit a contact form, we collect your name, email address, organisation, and the content of your message. We use this to respond to your enquiry. We do not add you to marketing lists without your consent.

Teachers and administrators

For teachers and administrators with dashboard accounts: name, email address, school affiliation, class assignments, and platform activity logs.

Students (processed on behalf of clients)

Student data — including usernames, assessment results, activity completions, and audio recordings from spoken assessments — is processed on behalf of our client organisations (schools and school groups). BlueberryML acts as data processor; the client is the data controller.

4. How we use your data

We use personal data only for the purposes for which it was collected:

• Responding to enquiries and providing the services contracted
• Operating and improving the ClassGrade platform
• Providing customer support
• Complying with legal obligations

We do not use personal data to train machine learning models. We do not sell personal data to third parties. We do not use student data for any purpose other than providing the contracted service.

5. Legal basis for processing

We process personal data on the following legal bases under UK GDPR:

• Contract: Processing necessary to provide the ClassGrade service to contracted clients
• Legitimate interests: Website analytics and improving our service
• Consent: Where we ask for your consent (e.g., marketing communications)
• Legal obligation: Where required by law

6. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy. For client organisations, data retention periods are specified in the Data Processing Agreement. Contact data from enquiry forms is retained for up to 24 months.

7. Sub-processors

We share personal data with a small number of sub-processors to operate the ClassGrade service — including cloud infrastructure providers and AI service providers. All sub-processors are subject to contractual data protection obligations equivalent to or stronger than those under UK GDPR.

A full list of sub-processors is available to contracted clients on request. Contact privacy@blueberryml.com.

8. International transfers

For UK and European clients, we store personal data within the UK and EU. Any transfers outside the UK/EEA are made with appropriate safeguards in place, including Standard Contractual Clauses where required.

9. Your rights

Under UK GDPR, you have the following rights in relation to your personal data:

• Right to access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Rights related to automated decision-making

To exercise any of these rights, contact privacy@blueberryml.com. We will respond within 30 days.

10. Complaints

If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

11. Changes to this policy

We may update this policy from time to time. Material changes will be communicated to contracted clients directly. The date at the top of this page shows when the policy was last updated.