1. Overview

Noe Software Solutions LLC ("we," "us," or "our") operates Classivore (classivore.com). This Privacy Policy describes what data we collect, how we use it, and your rights. We keep data collection minimal — we only collect what we need to run the service.

2. Information We Collect

Account information

Email address — used to identify your account and send transactional messages (password resets, billing receipts).
Password — stored as a bcrypt hash. We never store or have access to your plaintext password.

API usage data

Endpoint called, timestamp, model used, and credits consumed — used to enforce rate limits, display your usage dashboard, and investigate billing disputes.
We do not store the text or URLs you submit for classification. Content is processed in memory and discarded.

Billing information

Payment is processed by Stripe. We store your Stripe customer ID and subscription ID to manage your plan. We never see or store your full card number, CVV, or bank account details.

Technical data

Standard server access logs (IP address, request path, response code) are retained briefly by our infrastructure provider (Hetzner) and Cloudflare for security and abuse prevention. We do not log IP addresses ourselves.

3. How We Use Your Information

To operate your account and provide the API service
To enforce rate limits and plan entitlements
To send transactional emails (password resets, billing receipts from Stripe)
To respond to support requests
To detect and prevent abuse or fraud

We do not sell your data. We do not use your data for advertising. We do not use submitted content to train machine learning models.

4. Third-Party Services

We use the following third-party services to operate Classivore:

Stripe — payment processing. Subject to Stripe's Privacy Policy.
Cloudflare — DNS and network proxy. Traffic passes through Cloudflare's network. Subject to Cloudflare's Privacy Policy.
Hetzner Cloud — server hosting. Your data is stored on servers in Ashburn, Virginia, USA.
HaveIBeenPwned — during signup and password reset, we check whether your chosen password appears in known data breaches. Only the first 5 characters of a one-way hash of your password are sent (k-anonymity model). Your plaintext password is never transmitted to this service.

5. Data Retention

API usage logs — retained for 90 days, then automatically deleted.
Account data — retained while your account is active. After account deletion, your data is purged within 30 days.
Billing records — Stripe customer and subscription IDs are retained for 7 years as required for tax and accounting purposes.
Password reset tokens — expire after 1 hour and are invalidated on use.

6. Your Rights

You have the right to:

Access — request a copy of the personal data we hold about you.
Correction — update your email address or password from your account settings.
Deletion — delete your account and associated data from your dashboard settings. This is immediate and permanent.
Portability — request an export of your usage data.

To exercise any of these rights, contact us at privacy@classivore.com. We will respond within 30 days.

7. Security

We take reasonable technical measures to protect your data, including:

Passwords stored as bcrypt hashes
API keys stored as SHA-256 hashes — the plaintext is shown once at creation and never stored
HTTPS enforced for all connections
Encrypted database backups

No method of transmission or storage is 100% secure. If you discover a security issue, please contact us at security@classivore.com.

8. Children

The Service is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a new effective date. For material changes, we will notify you by email.

10. Contact

Privacy questions or requests: privacy@classivore.com

Noe Software Solutions LLC — Connecticut, USA