🚀 Premium features coming soon — Join 1.5M+ students using BetterCanvas!
BetterCanvasGet Extension

BetterCampus ("we," "us," "our") provides a browser extension and related sites that enhance the Canvas LMS experience. In some places our product or listings may still refer to "BetterCanvas" during a brand transition; this policy applies to both names. Questions or requests: hello@bettercampus.com.

What this policy covers

This notice explains how we collect, use, disclose, and protect information when you use:

  • Our browser extensions and websites
  • Our support channels
  • Optional integrations like Google Calendar

We aim to collect the minimum data needed to run the service. We do not sell personal information and do not use your data for cross‑context behavioral advertising.

Information we collect

You provide

  • Account or contact information you submit (e.g., email, name)
  • Messages you send to support

Collected automatically

  • Basic device and usage data (browser/OS type and version, feature interactions, basic diagnostics, crash logs)
  • Non-identifying analytics in aggregate (e.g., counts of feature usage)
  • Stored locally in your browser (not sent to us unless you choose to sync or reach out to support)
  • Extension settings, theme choices, and other preferences using browser storage APIs

From connected services (optional)

Google Calendar: If you connect it, we access event metadata limited to what's needed for push/pull features (see "Google Calendar integration").

How we use information

  • Operate the extension and sites, deliver features, and keep services secure
  • Provide support when you contact us
  • Measure de‑identified, aggregated usage to guide product decisions
  • Communicate important service updates

We may use de‑identified or aggregated data that cannot reasonably be linked to you.

Google Calendar integration (optional)

You're always in control. If you connect Google Calendar, we request the minimum scopes needed to power two user‑visible toggles:

1) Push to Calendar

What it does: Creates or updates events on your selected Google Calendar for classes, assignments, and due dates you choose to push.

Data used/stored: We store only what's required to keep those events in sync (e.g., Google event IDs, timestamps, and the fields we created/updated).

What we don't do: We don't read unrelated events when only pushing.

2) Pull from Calendar

What it does: Reads event summaries, start/end times, IDs, and calendar names from calendars you select, so your external events appear alongside coursework in our calendar tool.

Data used/stored: We cache limited event metadata to render your calendar quickly. We do not ingest event descriptions or attachments unless a specific feature clearly needs them (and you enable it).

Scopes we request

  • https://www.googleapis.com/auth/calendar.events (create/update events you explicitly push)
  • https://www.googleapis.com/auth/calendar.readonly (read events you choose to pull)

Tokens, security, and revocation

We store OAuth tokens and Google event IDs securely to keep things in sync.

All Google data is transmitted over HTTPS; access to tokens is restricted by least privilege.

You can disconnect Google Calendar in our settings and revoke our access anytime in your Google Account (Security → Third‑party access).

When you disconnect, we stop access immediately and delete stored Google tokens and event IDs within 30 days.

Google API Services User Data Policy ("Limited Use")

Our use and transfer of information received from Google APIs adheres to Google's Limited Use requirements. We only use Google data to provide or improve user‑facing features you see, we don't sell it, and human access is limited to cases like security or support with your consent.

Legal bases (EU/UK, where applicable)

  • Contract: To provide and support the service
  • Consent: Optional integrations like Google Calendar
  • Legitimate interests: Security, service improvement, minimal analytics

Sharing and subprocessors

We use service providers (hosting, analytics, error monitoring, support tooling) who process data on our instructions and may only use it to provide their services to us. We do not share Google Calendar data with third parties except as needed to provide the feature, comply with law, or with your explicit direction.

We maintain an up‑to‑date list of core subprocessors and their roles at bettercampus.com/subprocessors.

Data retention

  • Account/support data: Retained while you use the service and as needed for legal/accounting requirements.
  • Extension preferences: Kept locally in your browser until you remove the extension or reset settings.
  • Google Calendar tokens & event IDs: Retained only while the integration is connected and deleted within 30 days after you disconnect or revoke access.

Your choices and rights

Everyone

  • Use the product without connecting Google Calendar
  • Disconnect Google Calendar at any time in settings
  • Revoke access in your Google Account
  • Email hello@bettercampus.com to request access, correction, deletion, or a copy of your data

EU/UK residents

You may have rights to access, correct, delete, port, restrict/oppose processing, and withdraw consent. You can also complain to your local data protection authority.

United States (state privacy laws, including California)

We do not sell or share personal information for cross‑context behavioral advertising. If that changes, we'll provide a "Do Not Sell or Share My Personal Information" link and honor Global Privacy Control (GPC) signals.

If your state law grants additional rights (access, delete, correct, portability, limit the use of sensitive personal information), you can exercise them by emailing hello@bettercampus.com.

Verification: We may request information to verify your identity and protect your account.

Timing: We aim to respond within 45 days (and may extend where allowed by law).

Appeal: If we deny a request, you may ask us to review the decision at the same email; we'll explain our reasons and how to contact your regulator.

Do Not Track & GPC

Browser DNT signals lack a common standard, so we do not respond to DNT. We do honor GPC for applicable opt‑outs under state law.

Children's privacy

We don't knowingly collect personal information from children under 13. If you believe a child provided personal information, contact us and we'll delete it.

Education data notice (FERPA)

We are a direct‑to‑student tool. Unless we enter into a written agreement with an institution designating us as a school official, we do not operate under FERPA on a school's behalf.

International transfers

We operate in the United States. If we transfer personal data internationally, we use appropriate safeguards (for example, EU Standard Contractual Clauses for EEA/UK users) and apply additional measures as needed.

Security

We use industry‑standard safeguards, including encryption in transit, restricted token access, and least‑privilege internal controls. No method of transmission or storage is 100% secure, but we work continuously to protect your information.

Changes to this policy

We'll update this page when we make material changes and adjust the Effective date above. For significant changes, we'll provide a more prominent notice (for example, in‑product).

Contact

Questions or requests: hello@bettercampus.com

© 2025 BetterCampus, Inc. All rights reserved.