Privacy

Privacy Policy

Effective Date: May 21, 2026

1. Introduction

Welcome to the Canvas Assistant Video Downloader, Summarizer, Converter, and Transcriber extension (referred to as "the Extension"). This Privacy Policy explains what data we collect, what data we transmit to our servers, how that data is processed, and what rights you have over it.

By using the Extension, you agree to the terms outlined in this Privacy Policy.

2. Data We Process

Canvas Assistant is designed to do as much as possible locally in your browser. Some features, however, require sending data to our servers. The following list makes this explicit:

  • Detected video links: Discovered locally by the extension on the page you are viewing. Links stay in memory and are not transmitted to our servers unless you actively request a server-side action.
  • Video and audio data — sent to our servers when required: When you request transcription or summarization, the audio (or video, if audio cannot be extracted locally) is uploaded for processing. When you request server-assisted conversion of large videos, the full video file is uploaded for re-encoding.
  • Account data: If you sign in, we store your email address, your plan, and usage counters. Login uses one-time email codes — we never store passwords.
  • Payment data: Handled entirely by Stripe. Card numbers and billing details never touch our servers.
  • Local preferences: Theme choice, last-used settings, and cached metadata are kept in your browser's local storage on your device.

We do NOT collect: browsing history outside the active tab, search queries, cookies from other sites, form data, passwords, or activity unrelated to video processing.

3. When Data Leaves Your Browser

We want to be fully transparent about which actions send data to our servers and which do not:

ActionSent to our servers?
Download a video (MP4 or stream)No — handled directly in your browser
Decrypt protected streamsNo — decryption happens locally in your browser
Transcribe a lectureYes — audio uploaded and forwarded to AssemblyAI
Summarize a lectureYes — transcript sent to OpenAI via our server
Convert a large video (server-assisted)Yes — full file uploaded for re-encoding
Sign in / check usageYes — email and plan info

4. Data Retention

Uploaded video and audio files are stored on our servers only for the duration of processing. As soon as the transcription, summary, or converted file is delivered back to your browser, the temporary upload is deleted. We do not archive, back up, or reuse uploaded media. Transcripts and summaries are returned to you and not retained on our servers beyond the immediate response unless you are signed in and explicitly save them to your account history.

5. Sub-Processors

To deliver AI features and operate our service we rely on the following sub-processors, each bound by their own data-processing terms:

  • AssemblyAI — speech-to-text transcription.
  • OpenAI — large language model used for summarization.
  • Stripe — payment processing for subscriptions.
  • Hetzner — server hosting (Germany, EU).

We do not share data with advertising networks, data brokers, or analytics resellers. Your media is not used to train third-party AI models.

6. Security

  • All communication with our servers is encrypted in transit using HTTPS.
  • Uploads use short-lived, randomly generated tokens — they are not publicly browsable.
  • Local data is isolated from other sites by the browser's extension sandbox.
  • Authentication uses one-time email codes; we never store user passwords.

7. Your Rights & Controls

  • Use the Extension in offline-only mode by avoiding the AI features — downloads stay fully local.
  • Clear local data at any time by uninstalling the Extension or clearing it from the Extension interface.
  • Request full account deletion by emailing app.odeteam@gmail.com — we will erase your account within 30 days.
  • Request a copy of any personal data we hold about you by writing to the same email.

8. Children's Privacy

Canvas Assistant is intended for students aged 13 and above. We do not knowingly collect data from children under 13. If you believe a child under 13 has used the Extension and provided personal data, contact us and we will remove the data.

9. Changes to this Policy

We may update this Privacy Policy when features change or laws require it. Material changes will be communicated via the Extension update notes or the Chrome Web Store listing page. The "Effective Date" at the top of this page reflects the latest revision.

10. Contact Us

If you have any questions about this policy or want to exercise your data rights, contact us:

Email: app.odeteam@gmail.com