Privacy Policy

Last updated: February 25, 2026

Overview

CampusConnect is a Chrome extension that enhances Canvas LMS with real-time messaging, AI study tools, and a unified academic dashboard. This privacy policy explains what data we collect, how we use it, and how we protect it.

Data We Collect

Canvas Academic Data

  • What: Grades, assignments, announcements, course files, syllabus content, and quiz information from your Canvas LMS account.
  • How: Fetched directly from Canvas using your existing Canvas session. We do not ask for or store your Canvas password.
  • Purpose: To power the dashboard, grade predictions, and AI study tools.
  • Storage: Processed locally in your browser. Syllabus text may be sent to our backend for AI parsing and cached in our database (associated with the course ID, not your identity).

Chat Messages

  • What: Messages you send in course group chats, direct messages, anonymous Q&A, and polls.
  • How: Sent via WebSocket to our backend and stored in our database.
  • Purpose: To enable real-time messaging between students in the same course.
  • Storage: Stored on AWS DynamoDB servers in the US. Messages are associated with your Canvas user ID and display name.

AI Interactions

  • What: Questions you ask CampusBot or the AI tools, along with relevant course context (syllabus data, assignment details, grade information).
  • How: Sent to our backend, which forwards them to large language models (LLMs) for processing.
  • Purpose: To generate AI responses, flashcards, study notes, and grade predictions.
  • Storage: AI queries are not permanently stored. Conversation context is held temporarily in memory during your session and discarded afterward.

User Presence

  • What: Your online/away/do-not-disturb status and whether you are seeking study partners.
  • How: Sent via WebSocket when you connect or change status.
  • Purpose: To show classmates who is online and available to study.
  • Storage: Stored temporarily in our database and removed when you disconnect.

Data We Do NOT Collect

  • Passwords or authentication credentials
  • Browsing history outside of Canvas
  • Personal information beyond your Canvas display name and user ID
  • Financial or payment information
  • Location data
  • Keystroke or click tracking
  • Data from any website other than Canvas LMS

Third-Party Services

Large Language Models (LLMs)

AI features use large language models to process natural language queries. Only the specific course context needed to answer your question is sent. We may use one or more LLM providers (such as DeepSeek, OpenAI, or Anthropic) to power these features. Each provider's respective privacy policy applies to data processed by their models.

Amazon Web Services (AWS)

Our backend infrastructure runs on AWS (Lambda, DynamoDB, API Gateway) in the US East region. AWS handles data in accordance with their security and compliance standards.

Google Fonts

The extension loads fonts from Google Fonts for UI rendering. Google's privacy policy applies to font requests.

Data Sharing

We do not sell, trade, or transfer your personal data to third parties. Data is only shared with the third-party services listed above as necessary to provide the extension's functionality.

Data Retention

  • Chat messages: Retained indefinitely to preserve conversation history.
  • Syllabus intelligence cache: Retained for 120 days, then automatically deleted.
  • User presence data: Deleted when you disconnect.
  • AI conversation context: Held in memory during your session only, not persisted.

Data Security

  • All communication between the extension and our backend uses encrypted WebSocket connections (WSS/TLS).
  • Canvas requests are made over HTTPS using your existing authenticated session.
  • Our backend runs on AWS with standard security controls.

Your Rights

  • Access: You can view all your data through the extension itself (messages, grades, etc.).
  • Deletion: Contact us to request deletion of your chat messages and any cached data.
  • Opt out of AI: Simply don't use the AI features — no AI data is collected unless you actively interact with CampusBot or the AI tools.

Children's Privacy

CampusConnect is designed for university students. We do not knowingly collect data from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be reflected in the “Last updated” date above.

Contact

If you have questions about this privacy policy or your data, please open an issue at: github.com/krishangMittal/CampusConnect/issues