Privacy policy

Last updated: October 25, 2026

Canvas2Google copies your Canvas assignments into Google Tasks and your Canvas calendar events into a Google Calendar named “Canvas”. This page explains what it stores, why, for how long, and who else is involved.

What we store

• Your Google account email and ID, to recognize you when you sign in.
• Your Canvas calendar feed link, encrypted, so the app can read your Canvas calendar.
• Google access tokens, encrypted, so the app can update your “Canvas” calendar and tasks while you're away.
• Sync records: which Canvas item matches which Google event or task.
• Recent sync history: your 20 most recent syncs, including assignment titles. Older entries are deleted automatically.
• Your preferences: time zone and whether automatic sync is on.
• Abuse-prevention counters: to enforce rate limits, the site counts requests per visitor. IP addresses are never stored; only a one-way keyed hash is kept, for about a day.

What we access in Google

• Your email address, to sign you in.
• Google Calendar: only calendars this app creates. It can't see or change your other calendars.
• Google Tasks: the app creates and updates tasks in a list named “Canvas”.

Canvas2Google's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your data is used only to provide the sync. It is never sold, shared with third parties for their own use, used for advertising, or used to train AI models.

Service providers

The site runs on these providers, which process data only to operate the service:

• Vercel: hosts the website and runs the daily sync.
• Neon: hosts the database (your feed link and Google tokens are encrypted before they reach it).
• Google: sign-in, and the Calendar and Tasks APIs.
• Instructure (Canvas): the app reads your calendar feed from your school's Canvas site.

How it's protected

• All traffic uses HTTPS.
• Feed links and Google tokens are encrypted in the database with a key stored separately from it.
• Sign-in is through Google; this site never sees your Google password.
• Each account can only ever see its own data.

Deleting your data

• Signed in, go to Settings → Delete my account. That immediately removes everything listed above and revokes this app's Google access. Events and tasks already copied to your Google account stay there; delete the “Canvas” calendar and task list in Google if you don't want them.
• You can also remove access any time at myaccount.google.com/permissions.

Children

Canvas2Google isn't intended for children under 13, and doesn't knowingly collect their data.

Changes and contact

This policy may be updated; the date above shows the latest version. Questions? Use the support email shown on Google's sign-in consent screen for Canvas2Google. See also the terms of service.