Privacy, in plain language

CourseBridge exists to let you ask your own AI assistant about your courses. We collect only what that takes, we don't sell it, and you can delete it whenever you want.

What we store

• Your account: your name, email address and a one-way hash of your password. We never store the password itself.
• Your Canvas connection: your school's Canvas address and, where your school allows it, an access token that lets CourseBridge read Canvas as you. The token is encrypted at rest and is never shown to AI apps. If your school doesn't allow tokens, CourseBridge reads Canvas through your own signed-in browser tab while you sync; your Canvas password and login cookies never leave your browser.
• Copies of your course content: the course material your Canvas account can see, such as syllabi, assignments, rubrics, announcements, discussions, pages, files, and your own grades and submission status. Files are kept in private storage, and their text is indexed so it can be searched.
• Connected AI apps: which apps you approved, and the sign-in tokens they use. We also keep basic technical logs needed to run and secure the service.

What we don't collect

• Your Canvas password or school login. You sign in to Canvas on Canvas's own site.
• Quiz questions and answers, your Canvas inbox, or anything you can't already see in Canvas.
• Advertising trackers. We don't sell or rent your data to anyone.

How it's used

Your content is used only to answer requests from you and from AI apps you have approved. When you ask Claude, ChatGPT or another connected app a question, it retrieves the relevant pieces of your course material from CourseBridge. Those pieces are then handled by that app's provider under their own terms and privacy policy, just like anything else you share with them.

CourseBridge is read-only toward Canvas. It never submits, posts, messages or changes anything there.

Where it's kept

CourseBridge runs on Vercel. Account data and the search index are stored in a Neon Postgres database, and files are kept in private Vercel Blob storage. Data is encrypted in transit, and your Canvas token is additionally encrypted by us before it's stored.

Your controls

• Choose which courses are synced from your dashboard.
• Disconnect Canvas at any time. This stops all syncing and removes your stored connection.
• Delete your account from the dashboard. This erases your account, your synced course content and files, and your connected-app access.
• Revoke an AI app's access from that app's connector settings, or by deleting your account.

Your school's rules

You're responsible for using CourseBridge in line with your school's policies, including academic integrity rules about AI tools. CourseBridge is not affiliated with Instructure, Anthropic or OpenAI.