Privacy Policy

Last Updated: August 27, 2026

Your privacy is important to us at canvas2notion.com ("we", "us", or "our"). This Privacy Policy explains what we collect, how we use it, and the choices you have when using our service.

1. Information We Collect

To provide our service, we process the following information:

  • Google OAuth Profile: When you sign in, we receive your Google account identifier and, if available, your name, profile image, and email address. We use this data for authentication and account setup. We do not store your email address in the user_credentials table.
  • Subscription and Billing: We store your Stripe customer ID and subscription status/plan to manage your free trial and paid access. Stripe processes your payment information; we do not store your full payment details.
  • Connection Credentials: Depending on the connection method you choose, we store your private Canvas Calendar Feed URL, Canvas OAuth access and refresh tokens, or a legacy Canvas API token, plus your Notion API token. These values are encrypted at rest. We also store your Canvas domain and Notion Database ID to perform automated synchronization. Canvas OAuth sign-in occurs at your school; we do not receive your Canvas password or SSO credentials.
  • Operational Data: We maintain sync statistics (for example, sync timestamps, counts of courses/assignments processed, and success/failure state) and application logs for security and troubleshooting. Logs may include account ID and event metadata, and do not include IP address or browser user agent.

2. How We Use Your Information

We use your information to provide and improve the service, including:

  • Account management, authentication, and sending essential service notifications.
  • Managing subscriptions and trials, and facilitating billing through Stripe.
  • Using your Canvas Calendar Feed or Canvas/Notion tokens strictly to perform synchronization. Canvas OAuth requests read-only access to courses and assignments. We do not access your content beyond what is necessary to create/update entries for the sync.
  • Security monitoring, fraud prevention, and service reliability improvements (for example, analyzing logs and sync metrics).

3. Data Security

We take the security of your data very seriously:

  • Encryption: Calendar Feed URLs, OAuth access/refresh tokens, and API tokens are encrypted at rest (AES-256-GCM) and are only decrypted in memory during active processing.
  • Transport Security: We require HTTPS for all web traffic.
  • Session Security: Authentication uses signed, HTTP-only secure cookies with a 7-day expiration window.
  • Access Control: Access to data is limited to authorized systems and personnel who require it to operate the service.

4. Data Retention

We retain encrypted connection credentials and configuration while your account is active. When you delete your account, we remove your credentials/configuration, associated sync statistics and your application log entries from our primary database. To prevent repeated free trials, we keep only a one-way keyed hash of your Google account identifier after deletion; it cannot be used to contact you or to recover your identity.

  • Sync Statistics and App Logs: Automatically purged after 30 days.

5. Third-Party Services

We do not sell your personal information. We share limited data with service providers strictly to operate our service:

  • Google (authentication)
  • Stripe (payments and subscription management)
  • Notion & Canvas (APIs used to perform the synchronization you request)
  • Transactional Email Provider (used only when email delivery is enabled for account verification or essential service emails)

These providers process your information on our behalf under appropriate agreements.

6. Your Choices

You can delete your account at any time from the dashboard. You may also reset your Canvas Calendar Feed link, revoke Canvas2Notion's Canvas OAuth access, or revoke Canvas/Notion tokens from their respective platforms. If you revoke or reset a credential without updating your configuration here, synchronization will stop.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page. You are advised to review this page periodically for any changes.

8. Contact Us

If you have any questions about this Privacy Policy, please reach out via our Support page or email support@canvas2notion.com.