Privacy Policy

Effective Date: October 10, 2025

Overview

CanvasAI (“the Extension”) helps users access course materials from Canvas LMS and generate study assistance using AI models. The Extension operates only when the user chooses to activate it and processes data solely for the purpose of providing the requested functionality.

Information We Access

The Extension accesses the following data only when the user activates the extension on a Canvas page:

Course files, documents, and text content visible to the user on Canvas
User’s existing Canvas session cookies (read-only) to confirm login status

The Extension does not collect or store personal identifiers such as name, email, password, or contact information.

How Information Is Used

User content (such as files, documents, or text) may be transmitted to:

CanvasAI’s backend server for file handling and processing
Google Gemini or other AI APIs to generate summaries or study materials

This content is used only to fulfill the user’s request and is not used for analytics, advertising, or any other secondary purpose.

Data Storage and Retention

To provide convenience, the Extension may temporarily store course files or processed study materials in Google Cloud Storage (GCS) to avoid requiring users to re-upload files during repeated use.

Files stored in GCS are user-specific and private.
No stored files are shared with third parties.
All stored files are automatically deleted after 90 days of user inactivity.
Users can immediately delete all stored files at any time using the Extension’s built-in “Delete Data” option in the settings panel.

Permissions

The Extension uses only the permissions required to function:

host permissions – to access Canvas pages and the CanvasAI backend
cookies – to read the user’s existing Canvas session (read-only)
storage – to store temporary preferences and local extension settings

Third-Party Services

The Extension communicates with secure APIs (such as CanvasAI’s backend server and Google Gemini) to process user-initiated requests. These services do not store or reuse user content outside the scope of fulfilling the request.

User Control and Consent

Data is processed only when the user actively initiates an action.
Users may delete all stored course files and generated content at any time using the Extension’s built-in settings.
Users may delete local extension data via Chrome’s extension settings.
Uninstalling the extension immediately stops all data access and deletes any locally stored data.

Remote Code

The Extension does not fetch or execute any remote code. All executable code is packaged within the extension.

Contact

For questions or concerns, contact:
CanvasAI
dev@canvasai.com