Privacy Policy

Information we collect

We collect information you provide directly, information generated as you use the service, and information from connected accounts you choose to link.

• Account details: your name, email address, password (stored as a hash), profile picture, and optional two-factor and passkey credentials. If you sign in with Google, Google provides your name, email address, and profile picture, and we use that data only to create and identify your account.
• Coursework content: courses, assignments, due dates, checklists, notes, pasted assignment text, links, and files you upload.
• Connected services: if you connect Google Calendar, we store the OAuth tokens needed to keep that connection working (encrypted at rest) and the calendar data you allow us to read. If you connect Canvas, we do not store your Canvas password. You sign in to Canvas yourself inside a remote browser session hosted by our browser automation provider (Browserbase), and that signed-in browser context is persisted so later syncs can run without you signing in again. We store the course and assignment data read during those syncs.
• Chat and AI interactions: the messages you send to the planning assistant and the plans it produces.
• Server logs: IP address, browser type, and request timestamps, kept for security and reliability.

How we use information

• To provide the service: turning assignments into plans, tracking progress, and syncing your dated assignments with the calendar you connect.
• To operate AI features: your coursework text and chat messages are sent to AI model providers (OpenRouter and the upstream models it routes to) only to generate the response you requested. We do not use your content to train our own models. Do not paste content you are not permitted to share.
• To keep the service secure: detecting abuse, verifying sign-ins, and sending security emails such as verification and password reset messages.
• To improve the product: we may compute aggregate counts from our server logs, such as how many requests a feature receives.
• To communicate with you about the service, including important changes to these terms.

Google user data

When you connect Google Calendar, AgraED requests permission to read the list of your calendars, read events from the calendars you explicitly select, and create and manage its own secondary calendar in your account.

• Calendar events from your selected calendars are read only when needed to display them on the in-app calendar or to give the planning assistant scheduling context. They are not copied into our database beyond short-lived caching. Events the assistant reads are sent to the AI provider as context for that conversation and are retained as part of that chat transcript until you delete the chat.
• The secondary calendar AgraED creates contains only the assignment events you have in AgraED. Edits you make to those events in Google are applied back to the matching assignment.
• AgraED's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or allow humans to read it except with your consent, for security purposes, or as required by law.
• You can disconnect Google Calendar at any time from Settings. Disconnecting revokes our access, deletes the stored credentials, and removes the Get It Done calendar it created, on a best-effort basis. You can also revoke access from your Google Account permissions page.

How we share information

We do not sell your personal information. We share it only with service providers who process it on our behalf under contract, including hosting, database, file storage, email delivery, browser automation, and AI model providers; with connected services at your direction; when required by law or to protect rights and safety; and in connection with a merger or acquisition, in which case this policy continues to apply.

Data retention and deletion

We keep your information for as long as your account is active. You can delete individual courses, assignments, files, and chats at any time. To delete your account, contact us at support@agraed.com. We will delete your personal data and content from our production systems within 30 days of your request, except where we must retain records to comply with legal obligations. Backups are purged on a rolling basis.

Security

We use industry-standard safeguards including encryption in transit, encryption of stored third-party credentials, hashed passwords, and optional two-factor authentication and passkeys. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can update your profile and delete individual content in the app. For account deletion, data export, or anything else, contact us using the address below and we will respond within the time required by applicable law.

Children

AgraED is intended for students aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.

International transfers

We are based in the United States and process data there and in other countries where our service providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses for those transfers.

Changes to this policy

We may update this policy from time to time. We will post the new version here and update the effective date. If the changes are material, we will notify you by email or in the app before they take effect.

Contact

Questions about this document or your data can be sent to support@agraed.com.