Privacy Policy

Coursecal turns your course syllabi into a calendar and a semester timeline. This policy explains what we collect, how we use it, and the choices you have. It applies to the Coursecal app at coursecal.bandonc.com.

Information we collect

• Google account info. When you sign in with Google, we receive your email address, name, and profile picture. We use this to identify your account.
• Google Calendar access. With your permission (the calendar.events scope), we create, update, and delete calendar events for the deadlines in your courses. We only touch events Coursecal creates; we do not read your existing calendar.
• Syllabus content. The syllabus text you paste, or that we extract from a PDF or DOCX, so we can find your assignments, quizzes, and exams. Files are read in your browser — the file itself is never uploaded, only the extracted text.
• Data you create. The semesters, courses, and deliverables you save, and the IDs of the calendar events we create for you.
• Usage & error data. Aggregate, non-identifying product analytics and error reports to keep the app working. These exclude your email, name, and syllabus content.

How we use your information

• To sign you in and keep you signed in.
• To parse your syllabi into a structured list of deadlines.
• To create and keep your Google Calendar events in sync with those deadlines.
• To show your semester as a timeline with heavy weeks and deadline clusters flagged.

We do not sell your data, and we do not use it for advertising.

How syllabus content is processed

To find deadlines, your syllabus text is sent to Anthropic's Claude API and treated strictly as data to extract from — not as instructions. Anthropic does not use content submitted through its API to train its models. We keep only the structured result (course and deliverable details); we retain the original syllabus text so you can re-parse or review a course, and you can delete it at any time.

Google user data and Limited Use

Coursecal's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the calendar features you request, never for advertising, and never sold to third parties. Human access to this data occurs only with your consent, for security or legal reasons, or on de-identified data.

Service providers

We share data only with the providers needed to run Coursecal, each under their own terms:

• Google — sign-in and Calendar.
• Anthropic — parsing syllabus text (as above).
• Neon — the database that stores your account and course data.
• Vercel — application hosting.
• PostHog and Sentry — non-identifying analytics and error monitoring.

Data retention and deletion

We keep your data until you delete it. From your account settings you can export all your data as a file, or delete your account, which permanently removes your account and all associated semesters, courses, deliverables, and stored tokens, and removes the calendar events Coursecal created where possible.

Security

Your Google refresh token is encrypted at rest (AES-256-GCM), all traffic is served over HTTPS, and every request for your data is scoped to your account. No system is perfectly secure, but we take reasonable measures to protect your information.

Your choices

You can revoke Coursecal's access to your Google account at any time from your Google Account permissions, and you can delete your Coursecal account and data from the app at any time.

Changes to this policy

If we make material changes, we'll update the “Last updated” date above. Continued use of Coursecal after a change means you accept the revised policy.

Contact

Questions about this policy or your data? Email brandonjchong@gmail.com.