Privacy Policy

Corvus ("we," "us," "our") is an independently operated service based in Massachusetts. "You" means the student using the Corvus dashboard and browser extension.

This policy explains what personal data Corvus collects, why, who else touches it, and the choices you have. It covers both the web dashboard and the Corvus Chrome extension.

We collect only what the product needs to work. Concretely, that is:

Account data. Your name, your school, your email address, and a password. Authentication is handled by Supabase Auth; your password is stored by Supabase as a salted hash, never in plain text, and Corvus never sees it.

Blackboard-derived data, synced by your own extension. When you run a sync, the Corvus extension reads your Blackboard Learn session in your own browser and sends the results to your Corvus account. This includes your courses; your assignments and their due dates; your grades; course announcements; and course materials, including text extracted from documents and your syllabus PDFs. The extension only ever reads what you can already see when signed in to Blackboard yourself.

Product data. The things you create while using Corvus: your TA chat conversations and messages, AI usage counters, deadline-drift events, and your preferences (theme, which courses are visible, grade-row settings), plus sync metadata such as when your last sync ran.

Technical data. Your authentication session token and a small set of preferences stored in your browser's localStorage. That's the extent of it.

Corvus runs no analytics, no advertising, and no third-party trackers. We do not use cookies to profile you, and there is no tracking pixel anywhere in the product.

We use the data above only to operate the product for you. Specifically, to:

• show your courses, assignments, deadlines, and weighted grades;
• detect and flag deadline drift when a due date changes;
• answer your questions in the per-course AI TA, using your own course materials as context;
• serve your syllabus and course documents back to you on demand;
• keep you signed in and remember your preferences;
• enforce fair-use limits and keep the service secure and working.

We do not use your academic data to build advertising profiles, and we do not use it to make any decision about your credit, eligibility, or worthiness.

Corvus is built on a small number of trusted infrastructure providers. They process data on our behalf, under their own security and privacy commitments, only to provide their service:

• Supabase: our database, authentication, and file storage, hosted in the United States. This is where your account and synced Blackboard data live.
• Anthropic: the AI provider behind the TA chatbot and drift detection. When you use the AI TA, your message and the relevant course context are sent to Anthropic's API to generate a response. Anthropic does not train its models on data sent through its API.
• Netlify: hosting and edge delivery for the dashboard.
• Stripe: payment processing for paid subscriptions. Stripe receives your payment details and the email address tied to your subscription. We never see or store your full card number; Stripe handles card data directly under its own PCI compliance.

The AI TA answers using your own course context: your syllabus, assignments, grades, and anything you add. Its answers are AI-generated and can be wrong; you should double-check anything you'll rely on. The product tells you this at the point where you're chatting.

Course context and your messages are sent to Anthropic's API to produce each answer. Anthropic does not use API data to train its models, and Corvus never trains any AI model on your data. Not your messages, not your grades, not your documents.

Some commitments are easier to state as a plain list of nevers:

• We do not sell your data. Not to anyone, for any reason.
• We do not use your data for advertising, and we run no ads.
• We do not train AI models on your student data.
• We do not run analytics or third-party trackers.
• We do not share your data except with the processors listed above, or where the law requires it.

Your academic record is sensitive. We treat it that way by default, not as a setting you have to find and switch on.

We keep your data for as long as your account is active, because the product is only useful with it. You are in control of removing it.

You can delete your account at any time from Settings → Danger zone. Deletion cascades: it removes your account and every row tied to it (courses, assignments, grades, announcements, TA conversations, drift events, preferences, and synced materials), along with your stored syllabus and document PDFs in file storage. This is a permanent, self-serve erase; we don't hold a hidden copy.

Your data is isolated per account. Every database table enforces row-level security, so a signed-in request can only ever read or write rows that belong to that account. Server-side functions verify your identity before they touch anything, and file downloads are served through short-lived signed links rather than public URLs.

No online service can promise perfect security, but access control is the foundation Corvus is built on rather than a feature bolted on afterward.

Most of your data is visible to you directly in the dashboard. Beyond that, you can:

• delete everything yourself at any time (Settings → Danger zone);
• control what the extension syncs by choosing when to run it, since nothing syncs unless you trigger it;
• reach us with any access, correction, or deletion request through the contact form.

Depending on where you live, you may have additional rights over your personal data (such as access, correction, portability, or erasure). We honor those requests; contact us and we'll help.

Corvus is intended for students aged 13 or older who are enrolled at an institution that uses Blackboard Learn. It is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has created an account, contact us and we'll remove it.

Corvus is an independent product. It is not affiliated with, endorsed by, or sponsored by Blackboard Inc., Anthology Inc., or any college or university. "Blackboard" and other names are the trademarks of their respective owners and are used only to describe what Corvus works with.

We may update this policy as the product evolves. When we make a material change, we'll update the "Last updated" date above and, where appropriate, notify you in the product. Your continued use after an update means you accept the revised policy.

Questions about your privacy, or a request about your data? Reach us through the Corvus contact form. We read every message.