Privacy

How we get the data

You create an access token in your own Canvas parent (observer) account and give it to us. We use it only to read what that account can already see: your linked students, their courses and scores, missing work, and upcoming assignments. We never post, submit, or change anything in Canvas.

What we store

• Your name and email address, when you agreed to the Terms, and the email addresses you add for students and other adults.
• Your school's Canvas address and your access token, encrypted (AES-256-GCM).
• Your schedule settings and which school years you've paid for.
• A daily snapshot of numbers only, used to show what changed since the last report: a score for each course and a list of which assignments were missing. Courses, assignments and students are recorded as one-way keyed codes, not Canvas IDs, and snapshots are deleted after 400 days.

What we don't store

• Student names, course names, assignment titles, teacher names, comments or submissions.
• The report contents. Each report is built in memory from Canvas, emailed, and discarded.

Afterbell runs on Vercel, with its database on Supabase. We use Vercel Web Analytics to count page views on this website. It uses no cookies, doesn't identify you, and never sees report contents. Report emails pass through our email provider (Resend) to be delivered, with open and click tracking turned off. Payments are handled by Stripe; Stripe never receives your students' names.

Nobody gets email they didn't agree to

• Students and other adults you add get one invitation. They only get reports if they accept it.
• If they don't answer, we send one reminder after 3 days. The invitation expires after 14 days.
• Every report has a one-click unsubscribe link. Anyone who declines or unsubscribes can't be invited again by the same family, and can block Afterbell invitations entirely. We keep only a one-way code for blocked addresses, not the address.
• We record when each person accepted, so there's proof of consent, and delete it with your account.

Your control

You can remove your Canvas token, turn reports off, or delete your account and everything above at any time from your dashboard. You can also revoke the token yourself in Canvas under Account → Settings → Approved Integrations.