Privacy
Privacy notice
Version 2026-08-07-v2 · Last updated August 7, 2026
Information we use
Canvas Automator stores the account information you provide, encrypted Canvas access credentials, synchronized course information, drafts, preferences, support history, subscription records, and security activity needed to operate the service. We do not request or store your Canvas password.
How information is used
Information is used to authenticate your account, synchronize authorized Canvas content, provide requested study and writing tools, maintain subscriptions and referrals, deliver notifications, prevent abuse, resolve support requests, and improve reliability.
Connected providers
When you request a connected feature, the minimum information needed is sent to the relevant provider. This can include your school’s Canvas instance, OpenAI for enabled AI operations, Stripe for subscription billing, Telegram for administrator and referral operations, Resend for transactional email, and infrastructure providers used for hosting, storage, monitoring, and rate limiting.
AI, assignments, and accuracy
AI-generated drafts, rewrites, quiz assistance, discussion suggestions, extracted assignment details, deadlines, and other automated results can be incomplete, outdated, misunderstood, or wrong. Canvas Automator does not guarantee that an answer is correct, that an assignment satisfies every instructor requirement, or that use of the service will produce a particular grade, academic outcome, or instructor approval. Review every result, verify instructions and deadlines directly in Canvas, check citations and facts, and decide what to submit. Do not include passwords, access tokens, payment credentials, medical information, or other unnecessary sensitive information in prompts or drafts.
Security
Canvas credentials, configured AI credentials, and MFA secrets are encrypted at rest. Session cookies are protected, sensitive actions require authenticated access, and operational records are monitored for misuse. No internet service can guarantee absolute security, so report suspected unauthorized access immediately.
Your controls
You can disconnect Canvas accounts, export account data, revoke active sessions, disable optional notifications, remove device-local offline data, and permanently delete your application account from account settings. Deleting an account removes associated application records subject to transaction, fraud-prevention, dispute, and legal-retention requirements.
Payments and billing records
Payment card information is handled by Stripe rather than stored directly by Canvas Automator. We retain subscription identifiers, plan selections, payment status, invoice references, referral attribution, refunds, and related accounting records as needed to provide membership access, answer billing questions, prevent fraud, reconcile commissions, and meet legal obligations. Refund eligibility is governed by the Terms and Subscription Policy and applicable law.
Retention
Active account data is kept while needed to provide the service. Expired membership data may remain available so an account can be restored. Security, transaction, refund, referral, and payout records may be retained when necessary to protect users, reconcile payments, and meet legal obligations.
Children and school policies
Use the service only if you are legally able to agree to these terms or have authorization from a parent, guardian, or institution where required. Your school’s Canvas and acceptable-use policies continue to apply.
Questions and requests
Use the support assistant or Billing & Membership section in your account for privacy questions, exports, corrections, deletion assistance, or payment questions.