Privacy policy

Last updated 10 September 2026

Shopclass is a school-management platform operated by Ovitas, Inc. ("Ovitas", "we", "us"), 131 Hartwell Avenue, Suite 210, Lexington, Massachusetts. This policy explains what information Shopclass handles, why, and who it is shared with.

Our role: schools control their data

Shopclass is sold to schools. A school that uses Shopclass decides what student information is entered, how long it is kept, and who at the school may see it. For that information the school is the controller and Ovitas is a processor — we handle it on the school's instructions and do not use it for our own purposes.

If you are a student and want your records corrected or deleted, contact your school first; they administer the account. We will assist the school, but we do not change a school's records on a third party's request.

Information we handle

Student and contact records

Name, email address, mailing address, phone number, date of birth, and the emergency or guardian contacts a school chooses to record.

Academic records

Enrollments, class schedules, attendance, grades, certificates, and trade licence or credential details a school tracks for compliance.

Billing records

Invoices, payments, payment plans, and employer-sponsorship arrangements. Card numbers are handled by our payment processors and are never stored by Shopclass.

Communication records

Email and text notifications sent through the platform, including the message text, recipient, and delivery outcome.

Account and technical data

Staff and student login credentials, audit logs of changes made in the system, and ordinary server logs.

Marketing-site data

If you submit the demo-request form on shopclasshq.com we receive the details you enter. This site uses Google Analytics to measure traffic.

How we use it

• To run the platform for the school: enrollment, scheduling, attendance, grading, compliance tracking, and billing.
• To send the notifications a school configures — class reminders, schedule changes, invoice and payment notices.
• To keep the service secure, diagnose faults, and maintain audit trails.
• To meet our legal and contractual obligations.

We do not sell personal information. We do not use student records to train advertising models or to market to students.

Text messaging (SMS)

A student only receives text messages from Shopclass after affirmatively opting in inside their school's student portal, on the Contact preferences page. Consent is recorded with a timestamp. Having a phone number on file is never treated as consent, and consent is never carried over from a school's previous software.

A student can stop messages at any time by replying STOP, or by clearing the SMS preference in their portal. Replying HELP returns support information. Message frequency varies; message and data rates may apply. See our messaging terms for the full programme details.

Who we share it with

We share information only with service providers that operate the platform on our behalf, under contract, and only as far as their function requires:

• Amazon Web Services — hosting, databases, file storage, and outbound email, in the United States.
• Twilio — delivery of text messages.
• Payment processors chosen by the school (for example Helcim or Stripe) — card processing and payment records.
• Accounting integrations a school chooses to enable, such as QuickBooks Online, which receive invoice and payment summaries.
• Error and uptime monitoring used to keep the service running.

We may also disclose information where the law requires it, or to establish or defend legal claims. If Ovitas is ever involved in a merger or acquisition, customer data may transfer as part of that transaction; the school would be notified.

Where data is held, and for how long

Shopclass runs in Amazon Web Services in the United States. Each school's data is isolated from every other school's at the database level.

We keep information for as long as the school's account is active and afterwards only as long as we need it to meet legal, accounting, or reporting obligations. Schools can export their data at any time and can ask us to delete it when their agreement ends. Some records — audit logs and the log of notifications sent — are deliberately append-only and are retained for the life of the account, because altering them would defeat their purpose.

Security

Traffic is encrypted in transit. Databases are private and unreachable from the public internet. Access to production systems is restricted and logged, staff accounts are individually provisioned, and every change to a student record is recorded in an audit trail the school can review.

No system is perfectly secure. If a breach affects a school's data we will notify that school without undue delay.

Students and young people

Shopclass is built for post-secondary trade and vocational schools. It is not directed at children under 13 and we do not knowingly collect their information. Where a school's own obligations — such as FERPA — apply to the records it keeps in Shopclass, we act on that school's instructions to support them; the school remains responsible for its own compliance.

Your choices

• Text messages — opt in or out in the student portal, or reply STOP to any message.
• Email notifications — a school can disable notification categories, and recipients can ask to be excluded.
• Access, correction, deletion — contact your school, which administers the records. We support schools in answering these requests.
• Analytics on this website — you can block Google Analytics with any standard browser control or extension.

Changes to this policy

We will update this page when our practices change, and will revise the date at the top. Material changes affecting schools are communicated to them directly.

Contact

Questions about this policy, or about how Shopclass handles information, can be sent to [email protected], or by post to Ovitas, Inc., 131 Hartwell Avenue, Suite 210, Lexington, MA.