Privacy Policy

GradeDigest ("we", "us", "our") is a service that connects to Canvas LMS on your behalf to generate school progress reports for your children. We take your family's privacy seriously. This policy explains what we collect, how we use it, and what we never do with it.

We collect only what is necessary to provide the service: • Your email address — used to send reports and account communications • Your Canvas authorization — an OAuth2 access token issued by your school's Canvas instance, allowing us to read your child's data on your behalf. We store this token encrypted. You can revoke it at any time from your Canvas account. • Your scheduling preferences — daily or weekly, and which days • Up to 3 recipient email addresses per child (e.g. both parents and the student) We do not collect your name or payment card details (payments are handled entirely by Stripe).

When generating a report, we temporarily access the following data from Canvas LMS using your authorized connection: • Course names and current grades • Missing assignments (as flagged by Canvas itself) • Upcoming assignments and due dates (next 14 days for weekly reports, next 2 days for daily) • Submission status — whether an assignment was submitted, is awaiting grading, or is missing • Teacher comments on assignments (last 14 days) • Course announcements This data is fetched at report generation time, used to build your report, and then discarded. We do not store student grades, assignment details, submission content, or any other student educational records after the report is sent. Student educational records are protected by the Family Educational Rights and Privacy Act (FERPA). We access this data solely at your direction, under your authorization, for the purpose of generating your requested report.

GradeDigest uses AI (currently OpenAI's GPT models) to generate the plain-English summary at the top of each report. In compliance with the Canvas API Policy: • All AI-generated content in your report is clearly labeled "AI Summary — generated by AI." • Your child's data is sent to OpenAI solely to generate the summary and is not used to train OpenAI's models. We use OpenAI's API under their data processing agreement, which prohibits training on customer inputs. • You retain all rights to your child's information. We claim no ownership over data accessed through Canvas. • AI summaries reflect only the data in that specific report. They may contain errors or omissions. Always verify important information directly in Canvas.

We use your information exclusively to: • Connect to Canvas LMS on your behalf • Generate and deliver your scheduled reports • Send account and service communications • Improve the GradeDigest service We do not sell, rent, share, or disclose your information to third parties except as required to operate the service: Stripe (payments), OpenAI (AI summarization), Resend (email delivery), and Vercel/Neon (infrastructure). Each provider is bound by its own privacy and data processing terms.

Your Canvas OAuth2 access token is stored encrypted at rest and is transmitted only to your school's Canvas instance over HTTPS. You can revoke GradeDigest's access at any time from your Canvas account under Account → Settings → Approved Integrations. Revoking access immediately prevents GradeDigest from fetching any further data.

We retain your account information (email, Canvas token, preferences) for as long as your account is active. To delete your account and all associated data, visit gradedigest.com and use the account deletion option, or contact us through the site. We will process your request within 5 business days. Student report data is not retained after delivery.

GradeDigest is a service for parents and legal guardians. We do not knowingly collect information directly from children. All student data we access is retrieved using the parent or guardian's authorized Canvas credentials, at their explicit direction.

If we make material changes to this policy, we will notify you by email at least 30 days before the changes take effect. Continued use of GradeDigest after that date constitutes acceptance of the updated policy.

Questions about this policy? Visit gradedigest.com.