Last Updated: June 13, 2026
Thank you for using StuFlo ("StuFlo," "we," "us," or "our"). This Privacy Policy explains how we collect, use, store, and share information when you use our website, dashboard, Chrome extension, integrations, and related services.
By using StuFlo, you agree to this Privacy Policy.
1. Information We Collect
1.1 Account and Contact Information
We may collect your name, email address, account identifiers, subscription status, support messages, and other information you provide when signing in, subscribing, contacting support, or using StuFlo.
1.2 Authentication and Integration Information
StuFlo connects to student tools only after you authorize or initiate the connection. Depending on the features you use, we may collect and store:
- Canvas LMS connection information, including your Canvas domain, Canvas session cookies, cookie update timestamps, and Canvas data retrieved through your logged-in session, such as courses, assignments, due dates, grades, announcements, syllabi, assignment details, links, and submission status.
- Google Calendar OAuth tokens and calendar data needed to provide calendar functionality, including calendar lists, event details, free/busy availability, event IDs, calendar IDs, and changes you ask StuFlo to make, such as creating, updating, or moving events.
- Telegram account identifiers, pairing codes, chat IDs, and messages exchanged with StuFlo if you connect Telegram.
- Chat prompts, assistant responses, generated summaries, tool results, usage counts, and related session metadata.
The StuFlo Canvas Connector Chrome extension reads Canvas-domain cookies only after you click the extension from an active Canvas tab and grant permission for that Canvas domain. The extension sends those cookies over HTTPS to your signed-in StuFlo dashboard. The dashboard uses your StuFlo session to identify the correct account. StuFlo validates the Canvas session before saving it.
1.3 Billing Information
Payments and subscriptions are processed by Stripe. We may store Stripe customer IDs, subscription IDs, plan information, billing status, and payment-related metadata. We do not store full credit card numbers.
1.4 Device, Usage, and Cookie Data
We may collect session cookies, login cookies, pages visited on StuFlo, browser and device information, approximate network information, timestamps, logs, error reports, and product usage metrics to operate, secure, debug, and improve StuFlo.
2. How We Use Information
We use information to:
- Provide, operate, secure, and improve StuFlo.
- Authenticate users and maintain logged-in sessions.
- Connect Canvas, Google Calendar, Telegram, and other supported integrations.
- Retrieve, summarize, and organize academic information you ask StuFlo to process.
- Create, update, or move calendar events when you ask StuFlo to do so.
- Process subscriptions, billing, trials, cancellations, and account access.
- Send transactional emails, login links, product notices, and support replies.
- Detect abuse, troubleshoot errors, enforce limits, and comply with legal obligations.
3. Google API Limited Use Disclosure
StuFlo's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We use Google Calendar data only to provide user-facing calendar features that you request, such as listing calendars, reading events, checking availability, creating events, updating events, or moving events between calendars. We do not use Google user data for advertising. We do not sell Google user data. We do not use Google user data to train generalized AI or machine learning models.
4. How We Share Information
We do not sell personal information. We share information only as needed to provide StuFlo, comply with law, protect rights and safety, or with your direction. Service providers may include:
- Hosting, database, infrastructure, logging, and security providers.
- Stripe for payments and subscription management.
- Resend or other email providers for transactional email.
- Google APIs when you connect Google Calendar.
- Telegram when you connect Telegram.
- AI model and agent infrastructure providers used to process your chat requests and operate StuFlo's assistant features.
- Canvas LMS systems through your authenticated Canvas session when you connect Canvas.
These providers process information according to their own terms and privacy policies and only as needed for the services they provide to StuFlo.
5. Security
We use reasonable administrative, technical, and organizational safeguards to protect information. Canvas session cookies are encrypted before storage. Access to production systems is limited to authorized operators. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.
6. Your Choices and Controls
You can disconnect integrations by revoking access with the third-party service, removing the Chrome extension, reconnecting with new credentials, or contacting us. You can cancel subscriptions through the billing portal. You may request access, correction, or deletion of your account information by contacting us at the email below.
7. Data Retention
We keep information for as long as needed to provide StuFlo, maintain account and billing records, comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements. We may retain limited logs and backup copies for a reasonable period.
8. Children's Privacy
StuFlo is designed for college students and users who can legally consent to use the service. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information improperly, contact us and we will take appropriate action.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last Updated" date will show when the policy was last revised. Continued use of StuFlo after an update means you accept the updated policy.
10. Contact
If you have questions about this Privacy Policy or your data, contact:
contact@stuflo.com