Privacy Policy

1. Who we are

Class Company US LLC ("we," "us") provides the Tarvis AI app, the classcompanyus.com site, and related services. Contact: contact@classcompanyus.com.

2. What we collect

• You give us: your email, your phone number if you choose, your name, brand or team name and type, tasks, plans, revenue and spend entries, notes, files and photos you upload, messages you send to Tarvis or to your team, a website address you ask us to scan, and your city if you type it.
• What you publish: event pages (event name, date, place, your first name) and the RSVPs they gather. Section 3 explains who can see them.
• Guests without an account: an RSVP is a first name, one of three answers (going, maybe, or cannot make it), and an optional email. If you answer, that browser keeps a small key so you can change your answer later without an account; it is set only when you answer, never when you just look. A day page collects only the tap on a checkbox.
• Reports: when you report a message we keep the message, who sent it, who reported it, and what we did about it.
• Automatic: device and app version, usage events, IP address in our hosting and database logs, an approximate city (section 4), and failed sign-in attempts with the email entered, to protect accounts.
• Analytics on our public pages: we use PostHog to measure page visits and aggregate heat maps (where people tap and how far they scroll) on our public marketing pages so we can improve them. We do not record session replays, and typed input is never captured. Browsers that send the Global Privacy Control signal are not measured at all. We do not run analytics or session recording inside your signed-in portal or the app.

Under the email and phone fields on our main forms (the scanner on our home page, the free scan, the fix page, the Crew application, the studio request, the Leak List, and the quizzes on our blog) you will find a short notice saying what we collect there, why, that we never sell it, and a link back to this page.

3. What you publish, and who can see it

• Event pages. When you publish an event page, anyone with the link can open it, and links get passed on. The page shows the event name, the date and time, the place, your first name as host, how many guests are going, and the first names of those guests. Pages published before September 5, 2026 keep the promise their guests were given and show initials only. You can turn the guest list off, hide the count, or hold the address back until someone answers. Nothing else from your account appears on it. Event pages are not indexed by search engines unless you ask. To take a page down, write to us and we will.
• Guest RSVPs. A guest's first name and answer show on the page, unless the host has hidden the list, in which case only a count shows. A guest's email, if given, goes to the host and to us: we keep it with the RSVP, and we use it only for messages about that event: any update the host sends through Tarvis, and a reminder before the event where we send one. Every one of those emails carries a one-click unsubscribe that we honor at once, and an address that has unsubscribed anywhere is never added to another list. Guest emails are never used for anything else and never sold.
• Guest lists a host brings. A host can add names and email addresses to their own event, by typing or pasting them. We store them against that event only, to send the invitations and reminders the host asks for. Phone numbers are removed on the host's device before anything reaches us. Anyone on that list can unsubscribe from the first message, and we honor it at once.
• Photos. A photo sent in a team room is re-encoded on your device so its location data is stripped, stored in a private bucket, and shown only to members of that room through short-lived links. A photo you hand to Tarvis is sent to the AI provider so he can read it (section 6).
• Messages. Messages, tasks and polls in a room are visible to everyone in that room. The room owner can remove or block members and delete messages. Anyone can report a message; we review every report within 24 hours and can block the sender.
• Your responsibility. Only publish photos, names and event details you have the right to use, with permission from the people who appear. Our Terms cover this in full.

4. The free taste, your device identifier and your city

When you try Tarvis without an account (the free website scan, the Room in your browser, the Crew page), or when you answer an invitation on an event page, your browser stores a random identifier we make up on the spot. It is a short string, not your phone's advertising ID and not tied to your name. It rides along with what you do so we can tell one visitor's taste from another, count fairly, and pick up where you left off. If you later sign up or give us an email, it links to that record. Clearing your browser storage clears it.

When the app or a public page is opened we record the event with an approximate, city-level location derived from the network connection (never GPS, never your precise position), for signed-in users and guests alike. This data is visible only to Class Company and is never sold.

5. Why we use it (legal basis)

To provide the Service (to perform our contract with you), to secure accounts, to improve our products and AI (legitimate interest, or consent where required), and to comply with law.

6. AI processing

• Who. Anthropic (Claude) runs Tarvis's actions, his replies in team rooms, and the website scan. OpenAI runs chat on the free tier and a one-word sorter that decides whether a message is a question or a request to do something. Google's Gemini is wired in as a backup route; we do not use it by default and will update this page before we do.
• What is sent. The message you type and the earlier messages in that conversation; the brand or room context Tarvis needs to answer (names, tasks, plans, notes you saved, and what he has learned about you); files and photos you hand him; and, for the scan, the public content of the page you asked us to read.
• What is not sent. Your password, phone number, payment details, or device identifier.
• What they do with it. They process it to generate the reply. Under their developer terms neither Anthropic nor OpenAI uses what we send to train its models, and we choose zero or limited retention where that option is offered.

7. Model improvement

We use anonymized and aggregated inputs to improve Tarvis. We do not train on data that still identifies you without your explicit consent. Where required by your region, model-improvement use is opt-in; otherwise you may opt out by contacting us.

8. Storage and security

Data is stored in a Postgres database (Supabase) protected by row-level security, so each account can only access its own rows. Files and photos live in a private storage bucket and are served through short-lived signed links. Secrets and API keys are held server-side only, and data is encrypted in transit.

9. Sharing

We share data only with the companies that run the Service for us: Supabase (database and file storage), Netlify (hosting, forms and functions), Anthropic and OpenAI (AI, section 6), Stripe (payments on the web), Apple (payments inside the iPhone app, and delivery of push notifications to iPhones), Resend (email delivery), and PostHog (analytics on public pages only). We do not sell your personal information, and we do not share it for cross-context advertising. Partner and affiliate links carry only an anonymous referral code and no personal data.

10. Your rights

You may access, export, correct, or delete your data. Use the account tools in the app or portal, or email contact@classcompanyus.com. Depending on your region you may have additional rights under GDPR or CCPA/CPRA, including the right to know what we hold, to have it deleted, to correct it, and to be treated the same whether or not you exercise those rights. An agent you authorize may act for you. We answer within the time the law allows and never charge for it.

11. Phone number and text messages

If you type a phone number into one of our website forms (the scanner on our home page, the free scan, the fix page, the Crew application, or a blog quiz), we use it for one reply about the thing you asked for, by a call or a single text: your report, your number, your quiz results, or your TestFlight invite. The phone number you give the app at sign-up is used only to secure your account (sign-in codes and account notices) and never for marketing texts. We never sell a phone number or share it.

Anything more needs the box. On each of those website forms, the phone field is optional and under it there is a checkbox, unticked by default, that reads: "I agree that Class Company US may send me marketing texts about my report and its services at this number, including by automated technology. Consent is not a condition of any purchase or of getting my report. Message and data rates may apply; message frequency varies. Reply STOP to stop, HELP for help." On the Crew page it says "Crew updates about Tarvis" and "of joining"; on a blog quiz it says "my quiz results". Ticking that box is your prior express written consent to those texts. Leaving it unticked means no texts beyond the one reply, and the form works either way. When you tick it we record that you did, the time, the page, the wording you agreed to, and the network address the form came from, so we can show who agreed and to what.

To stop, reply STOP, QUIT, END, CANCEL or UNSUBSCRIBE to any text. We stop at once, and in every case within ten business days. Reply HELP, or write to contact@classcompanyus.com, for help. Message and data rates are set by your carrier.

12. Retention

• Account data: kept while your account is active and deleted when you close it (section 13).
• Form entries without an account (the free scan, the Leak List, the Crew application): kept until you unsubscribe or ask us to delete them. Every email we send you carries an unsubscribe link.
• Event pages, RSVPs and a guest list the host added: kept as long as the page is up. Ask us and we take it down. A guest email stops being used the moment that guest unsubscribes.
• Reports: kept as long as needed to keep rooms safe and to show what we did.
• Logs and analytics: hosting logs and analytics roll off on their own schedules. We keep limited records where the law requires.

13. Deleting your account

In the app, open Settings, tap Account, then tap Delete account. It happens at once, with no waiting queue. Any web subscription is cancelled first, then we delete the brands and teams you own and everything in them, your memberships in other rooms, your activity and usage log, what Tarvis learned about you, your profile, and your login.

Three things to know. Messages you sent in a room someone else owns may stay in that room, so delete them first or ask us. Pages you published stay up until you ask us to take them down. Subscriptions bought through Apple are managed in your Apple ID settings, and deleting your account does not cancel them, so cancel there first. If you cannot reach the app, email us from your account address and we will do it for you.

14. Copyright notices and removal requests

Copyright. If you believe something on a page we host infringes your copyright, our Copyright page explains what a notice needs, how a counter-notice works, and how we treat repeat infringers. Our designated agent: Copyright Compliance Department, Class Company US LLC. Full agent details, including the postal address the statute requires, are on our Copyright page. contact@classcompanyus.com. Registered with the U.S. Copyright Office, DMCA-1080050.

Intimate images shared without consent. Our Removal page explains how to ask. Use it, or email contact@classcompanyus.com with "Removal" in the subject. We remove the image and any identical copies we know of within 48 hours, as the TAKE IT DOWN Act requires.

Anything else. Use the report button in the app, or email us. We read every report within 24 hours.

15. Children

Accounts are for people 18 and older. Kids do not hold accounts. A day page works without one and collects only the tap on a checkbox; an RSVP link collects only a first name, one of three answers, and an optional email address. An event for a youth team can be set so that a parent answers for the family and no child is named on the page. We do not knowingly collect personal information from a child under 13, and if we learn we hold it we delete it. If a child appears on an event page or in a photo, the host who published it is responsible for having permission. Parents and guardians: write to us and we will act.

16. International transfers

We operate from the United States. If you use the Service from outside the US, you consent to processing in the US under appropriate safeguards.

17. Changes and contact

We may update this policy and will post changes here with a new effective date. Questions: contact@classcompanyus.com.