Privacy Policy

This Policy covers information we process when you browse our website, create an account, connect Canvas or other supported tools, and use features such as calendars, study plans, notes, and Ask Cluma.

This Policy does not apply to third-party websites, platforms, learning management systems, AI providers, or services that we do not control, including Canvas, your institution, and any tools you choose to connect. Their privacy practices are governed by their own policies.

We collect the following categories of information:

• Account information, such as your name, email address, school, login credentials or authentication identifiers, and account settings.
• Connected course and calendar data, such as courses, assignments, due dates, grades, syllabi, course files, calendar events, announcements, and other information you authorize us to access from Canvas or other connected tools.
• Content you create or provide, including notes, study plans, uploaded files, questions, prompts, AI outputs, feedback, and support messages.
• Usage and device information, such as pages viewed, features used, log data, approximate location derived from IP address, browser type, device identifiers, referring pages, and similar analytics.
• Cookies and similar technologies, which help us operate the Services, remember preferences, analyze usage, and improve performance.
• Payment information, if you purchase a paid plan. Payment information may be processed by our payment providers, and we may receive limited billing details such as transaction status, plan type, and billing contact information.

When you connect Canvas or another supported tool, you authorize Cluma to access and sync information from that account so we can provide the Services. Depending on the permissions you grant and the features you use, this may include course names, assignments, due dates, grades, syllabi, course files, calendar items, announcements, and related educational content.

We use connected data to provide, personalize, secure, troubleshoot, and improve the Services. We do not sell connected course data. We do not use connected course data, grades, course files, student notes, or Ask Cluma prompts for targeted advertising. We do not use your connected course content to train public, general-purpose AI models.

You should review the permissions requested before connecting Canvas or another service. You can disconnect Canvas or other connected tools from your account settings, or, where applicable, revoke access through the connected service. Disconnecting stops future syncing, but it does not automatically delete information that was already synced; you may request deletion of your account or previously synced data as described in Your choices & rights.

Cluma is not affiliated with or endorsed by Canvas unless we expressly state otherwise.

We use information to:

• Provide, maintain, personalize, and secure the Services;
• Create and manage accounts;
• Sync and organize your courses, deadlines, files, grades, calendars, and study plans;
• Generate suggestions and responses, including through Ask Cluma;
• Provide customer support and troubleshoot issues;
• Communicate with you about product updates, security, support, and administrative matters;
• Analyze usage, improve existing features, and develop new features;
• Detect, prevent, and respond to fraud, abuse, security incidents, and misuse of the Services;
• Comply with law, enforce our Terms, and protect our rights and users.

We may create aggregated or de-identified information that does not reasonably identify you and use it for any lawful purpose, including improving, analyzing, and promoting the Services. We will not attempt to re-identify de-identified data except as permitted by law.

Ask Cluma uses information you provide and relevant connected course context to generate study plans, summaries, reminders, explanations, and other responses. To operate these features, we and our service providers may process relevant prompts, outputs, course information, files, and related context.

Our AI service providers are required to process this information only to provide services to Cluma and not for their own independent purposes. We do not permit our AI service providers to use your connected course content, grades, files, notes, or Ask Cluma prompts to train their public, general-purpose AI models.

Authorized Cluma personnel may access personal information when reasonably necessary to provide support, troubleshoot issues, maintain safety and security, investigate misuse, comply with law, or operate and improve the Services.

AI-generated output may be incomplete, inaccurate, or inappropriate for your situation. You should verify AI output before relying on it, and it should not be treated as academic, legal, medical, financial, or other professional advice. Do not submit information you are not authorized to share, and use the Services consistent with your institution's academic-integrity policies and course rules.

We do not sell your personal information. We do not use connected course data, grades, course files, notes, or Ask Cluma prompts for targeted advertising. We may share information as follows:

• Service providers that help us host, secure, analyze, support, communicate, process payments, and operate the Services, including AI service providers, under contractual obligations.
• Institutions or program administrators, if your account is provided, sponsored, or managed by a school, university, instructor, employer, or other organization, for information reasonably necessary to administer the account, provide support, comply with our agreement with that organization, report usage or engagement, or protect the integrity of the Services. We do not share your private notes, Ask Cluma prompts, or connected course files with your institution unless required to provide the Services, requested by the institution under its agreement with us, directed by you, or required by law.
• At your direction, such as when you connect a third-party service, share content, invite another user, or authorize an integration.
• Legal, safety, and enforcement reasons, when we believe disclosure is required by law or reasonably necessary to protect users, Cluma, the Services, or others.
• Professional advisors, such as lawyers, auditors, insurers, bankers, and consultants, where reasonably necessary.
• Business transfers, in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to this Policy or appropriate protections.

We retain personal information for as long as reasonably necessary to provide the Services, maintain your account, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and operate our business.

If you disconnect Canvas or another connected service, we stop future syncing from that service. Previously synced information may remain in your Cluma account unless you delete it, delete your account, or request deletion.

If you request account deletion, we will delete or de-identify personal information associated with your account, subject to reasonable exceptions for backups, security logs, legal obligations, dispute resolution, fraud prevention, and enforcement of our agreements. Backup copies may persist for a limited period before being overwritten in the ordinary course. We may retain aggregated or de-identified information.

You can access and update certain account information, disconnect Canvas or other connected services, and request deletion of your account by contacting support@cluma.ai.

Depending on where you live, you may have rights to request access to, correction of, deletion of, or portability of your personal information, or to object to or restrict certain processing. You may also have the right to opt out of certain sales, sharing, targeted advertising, or profiling if applicable, and to appeal a denied request. We will honor requests as required by applicable law and may verify your identity before acting on a request.

We do not currently sell personal information or share personal information for cross-context behavioral advertising.

You may unsubscribe from marketing emails by using the unsubscribe link in those emails; we may still send transactional, security, and service-related messages. You can control cookies through your browser settings, though some parts of the Services may not function properly if cookies are disabled.

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, access controls, logging, and vendor review. Where appropriate, we also use encryption at rest.

No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.

The Services are intended for users who are at least 16 years old, unless made available through a school, parent, guardian, or other authorized program. We do not knowingly collect personal information from children under 13 without appropriate consent or authorization. If you believe a child under 13 has provided us personal information, please contact us and we will take appropriate steps to delete it or obtain any required consent.

We are based in the United States, and your information may be processed in the United States and other countries where we or our service providers operate. These countries may have data-protection laws that differ from those in your location. Where required, we use appropriate safeguards for international transfers.

We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as through the Services, by email, or by updating the "Last updated" date above. The updated Policy will apply as of its effective date.

Questions about this Policy or our privacy practices? We are glad to help.

Email us at support@cluma.ai.