Canvas AssistantCanvas Assistant
← Back to Home

Privacy Policy

Effective Date: May 21, 2026

1. Introduction

Welcome to the Canvas Assistant Video Downloader, Summarizer, Converter, and Transcriber extension (referred to as "the Extension"). This Privacy Policy explains what data we collect, what data we transmit to our servers, how that data is processed, and what rights you have over it.

By using the Extension, you agree to the terms outlined in this Privacy Policy.

2. Data We Process

Canvas Assistant is designed to do as much as possible locally in your browser. Some features, however, require sending data to our servers. The following list makes this explicit:

  • Detected video links: Discovered locally by the extension on the page you are viewing. Links stay in memory and are not transmitted to our servers unless you actively request a server-side action.
  • Video and audio data — sent to our servers when required: When you request transcription or summarization, the audio (or video, if audio cannot be extracted locally) is uploaded for processing. When you request server-assisted conversion of large videos, the full video file is uploaded for re-encoding.
  • Account data: If you sign in, we store your email address, your plan, and usage counters. Login uses one-time email codes — we never store passwords.
  • Payment data: Handled entirely by Stripe. Card numbers and billing details never touch our servers.
  • Local preferences: Theme choice, last-used settings, and cached metadata are kept in your browser's local storage on your device.

We do NOT collect: browsing history outside the active tab, search queries, cookies from other sites, form data, passwords, or activity unrelated to video processing.

3. When Data Leaves Your Browser

We want to be fully transparent about which actions send data to our servers and which do not:

ActionSent to our servers?
Download a video (MP4 or stream)No — handled directly in your browser
Decrypt protected streamsNo — decryption happens locally in your browser
Transcribe a lectureYes — audio uploaded and forwarded to AssemblyAI
Summarize a lectureYes — transcript sent to OpenAI via our server
Convert a large video (server-assisted)Yes — full file uploaded for re-encoding
Sign in / check usageYes — email and plan info

4. Data Retention

Uploaded video and audio files are stored on our servers only for the duration of processing. As soon as the transcription, summary, or converted file is delivered back to your browser, the temporary upload is deleted. We do not archive, back up, or reuse uploaded media. Transcripts and summaries are returned to you and not retained on our servers beyond the immediate response unless you are signed in and explicitly save them to your account history.

5. Sub-Processors

To deliver AI features and operate our service we rely on the following sub-processors, each bound by their own data-processing terms:

  • AssemblyAI — speech-to-text transcription.
  • OpenAI — large language model used for summarization.
  • Stripe — payment processing for subscriptions.
  • Hetzner — server hosting (Germany, EU).

We do not share data with advertising networks, data brokers, or analytics resellers. Your media is not used to train third-party AI models.

6. Security

  • All communication with our servers is encrypted in transit using HTTPS.
  • Uploads use short-lived, randomly generated tokens — they are not publicly browsable.
  • Local data is isolated from other sites by the browser's extension sandbox.
  • Authentication uses one-time email codes; we never store user passwords.

7. Your Rights & Controls

  • Use the Extension in offline-only mode by avoiding the AI features — downloads stay fully local.
  • Clear local data at any time by uninstalling the Extension or clearing it from the Extension interface.
  • Request full account deletion by emailing app.odeteam@gmail.com — we will erase your account within 30 days.
  • Request a copy of any personal data we hold about you by writing to the same email.

8. Children's Privacy

Canvas Assistant is intended for students aged 13 and above. We do not knowingly collect data from children under 13. If you believe a child under 13 has used the Extension and provided personal data, contact us and we will remove the data.

9. Changes to this Policy

We may update this Privacy Policy when features change or laws require it. Material changes will be communicated via the Extension update notes or the Chrome Web Store listing page. The "Effective Date" at the top of this page reflects the latest revision.

10. Contact Us

If you have any questions about this policy or want to exercise your data rights, contact us:

FAQ

Frequently Asked Questions

Quick answers about how Canvas Assistant handles your data. Click any question to expand.

Does Canvas Assistant send my videos to a server?

Yes — but only when required to complete a feature you actively trigger. Small downloads (regular MP4 and HLS streams) are handled fully in your browser. When you request transcription, summarization, or server-assisted conversion of a large video (typically videos that exceed in-browser size or codec limits), the relevant video or audio data is temporarily uploaded to our servers. Once the result is delivered back to your browser, the temporary files are removed.

What exactly is sent to the Canvas Assistant servers?

For transcription and summarization: the audio track (or the full video file when audio cannot be extracted locally) is uploaded. For server-side conversion of large videos: the full video file is uploaded so it can be re-encoded and returned in MP4 format. For ordinary in-browser downloads of MP4 or HLS streams, no video bytes leave your machine — the extension downloads them directly from the source site to your computer.

How long is my uploaded video kept on the server?

Uploaded media is treated as temporary. Files are deleted automatically once processing is finished and the result has been delivered to your browser. We do not archive, back up, or retain user-uploaded video or audio for longer than necessary to complete the requested operation.

Does Canvas Assistant use my videos to train AI models?

No. Your videos, audio, and transcripts are not used to train any machine learning model. We use third-party providers (AssemblyAI for transcription, OpenAI for summarization), and we configure those APIs to opt out of model training where the provider supports it. Your content is processed and returned — not stored for training.

Which third-party services does Canvas Assistant share data with?

Audio sent for transcription is forwarded to AssemblyAI (speech-to-text). Text sent for summarization is forwarded to OpenAI (large language model API). Payments are processed by Stripe. Authentication codes are delivered by email. We do not share data with advertising networks, analytics resellers, or any third party unrelated to the features above.

Does Canvas Assistant track my browsing history?

No. The extension only reads the page you are currently viewing in order to detect video links on that page. It does not record, store, or transmit your browsing history, search queries, cookies from other sites, form data, or activity on unrelated tabs.

Where are Canvas Assistant servers located?

Our processing servers are hosted in the European Union (Hetzner data centers in Germany). All communication between the extension and our servers is encrypted in transit using HTTPS.

How do I delete my data from Canvas Assistant?

Uninstalling the extension removes all local data stored in your browser. Uploaded media is already deleted automatically after processing. To delete your account (email, usage records, subscription history), write to app.odeteam@gmail.com and we will remove your account within 30 days.

Is Canvas Assistant GDPR compliant?

Yes. We process only the minimum data required to deliver the features you request, we use encrypted transport, we do not sell or resell data, uploaded media is auto-deleted after processing, our servers are hosted in the EU, and you can request access to or deletion of your account data at any time by emailing app.odeteam@gmail.com.

Does Canvas Assistant work without sending anything to the server?

Yes. The core download functionality is fully local. Downloading videos and decrypting protected streams are all performed inside your browser. Only the AI features (transcription, summarization) and server-assisted conversion of large videos require communication with our backend.

What information does Canvas Assistant store about my account?

If you sign in, we store your email address, your subscription plan and status (Free, Premium, or Pro), and usage counters (number of transcriptions and summaries used in the current billing period). We do not store passwords — login uses one-time email codes. Payment details are handled entirely by Stripe and never touch our servers.

Can my school or university see what I downloaded with Canvas Assistant?

Canvas Assistant does not report your activity to your school, LMS administrator, or any institution. However, the source site (Canvas LMS, Blackboard, Moodle, Panopto, etc.) may log video access on its own end as part of normal site analytics — that logging happens outside the extension and is outside our control.

What happens to my transcripts and summaries after I receive them?

Transcripts and summaries are returned directly to your browser and are not retained on our servers by default. If you are signed in and choose to save them to your history, they are stored in your account so you can re-open them later. You can delete saved transcripts at any time from the extension interface.

Is it safe to upload sensitive lecture content (e.g. medical, legal)?

Uploads are encrypted in transit and auto-deleted after processing, and we do not retain the content for training. However, if your lecture contains regulated or confidential material (e.g. patient data, attorney-client privileged information), you should follow your institution's data handling rules before uploading. For maximum privacy, use only the local download features and skip transcription/summarization.

Why does the extension request permission to access the page?

The extension needs access to the current tab so it can scan the page for video elements and downloadable streams. Without this permission it cannot detect downloadable videos. The permission is scoped to the page you are actively viewing — it does not give the extension access to other tabs or background browsing.

Have a question that isn't covered here? Email us at app.odeteam@gmail.com.

Legal advice and AI compliance has been provided by Accounting Services in Sweden.
By using the Canvas Assistant Video Downloader, Summarizer, Converter, and Transcriber Extension, you acknowledge that you have read and understood this Privacy Policy.