Data / Updated 9 October 2026
Data and AI processing
This page explains how the ClassPlus app handles data from institutions, teachers, and students: where it is stored, which AI providers process material, what is and is not sent, and how data is deleted.
Where data is stored
- ClassPlus app servers, database (ApsaraDB MySQL), and file storage (OSS) run in Alibaba Cloud’s Jakarta region.
- The database and file storage are encrypted at rest: OSS with AES-256 server-side encryption, the database disk with Alibaba Cloud disk encryption.
- Traffic to the app goes through Cloudflare and always uses HTTPS. The app refuses unencrypted connections.
- Each institution’s data is separated in the application: every request is limited to the signed-in user’s institution.
AI providers and supporting services
AI processing runs outside Indonesia. The providers in use today:
| Provider | Location | Purpose | Data received |
|---|---|---|---|
| Alibaba Cloud Model Studio (Qwen) | Singapore | Main language model: builds slides, summaries, flashcards, quizzes, the chat tutor, and essay grade suggestions. Also backup speech recognition and model routing. | Transcript text, student chat messages, essay answers, material topics |
| Groq | Outside Indonesia | Backup language model when the main one is unavailable | Same as the main language model, only when the backup is used |
| ElevenLabs | Outside Indonesia | Turns class recordings into transcripts; creates slide illustrations | Class audio (through a 24-hour temporary link); image descriptions |
| Tavily | Outside Indonesia | Web research to enrich material | Material topics and search keywords |
| Resend | Outside Indonesia | Password-reset email and the demo request form | Email address, name, verification code or form content |
| Cloudflare | Global network | Network security, TLS, and site delivery | Network traffic |
What is sent to AI providers
- Class transcript text, to build material.
- Student chat messages and recent conversation history, for the tutor.
- Essay answers, for grade suggestions. The final grade is always the teacher’s.
- Lecturers’ full names in the schedule import, to match the lecturer column in the uploaded spreadsheet.
What is not sent
- Student names.
- Email addresses, student and staff ID numbers, and passwords.
- Transcripts and messages can contain names if they are spoken or typed; ClassPlus does not filter them automatically.
Access
- Role-based access: students see only material from classes they are enrolled in, lecturers only their own material, admins only their institution.
- Sign-in uses hashed passwords (bcrypt) and time-limited session tokens.
Deletion and data copies
- ClassPlus supports deleting material by its lecturer or by the institution admin. Deletion covers the database, slides, transcripts, audio, and cache.
- ClassPlus supports deleting an account and exporting a copy of a user’s data. For lecturer accounts, uploaded audio and transcripts are deleted too.
- For now, deletion and data-copy requests go through the institution admin or the ClassPlus team.
- There is no automatic deletion schedule yet: data is kept until a user or the institution deletes it.
Scope
This page covers the ClassPlus app. Data from the demo request form on this site is covered by the Privacy Policy. Institutions evaluating ClassPlus can ask for more detail, including for Indonesia’s Personal Data Protection Law. Privacy Policy.
Questions about data: dev@classplus-id.com