Privacy Policy

How SyllaBuddy collects, processes, protects, and deletes your academic and account information.

Effective 2026 Beta

Summary: SyllaBuddy is an academic scheduling tool. We collect only the information required to run your account, parse the syllabus PDFs you choose to upload, and optionally sync events to your Google Calendar.

1. Information We Collect

  • Account Data: Username, email address, and bcrypt-hashed password (or verified Google Sign-In email/subject identifier when using Google Sign-In).
  • User-Uploaded Content: Course syllabus PDFs you upload, generated first-page preview thumbnails, and extracted or user-edited course metadata and calendar events.
  • Operational Logs: Standard HTTP access and error logs (request path, status code, latency, IP address) retained briefly for security, rate limiting, and debugging. Passwords, session tokens, and API keys are never logged.

2. Google API Services User Data Policy (Limited Use)

SyllaBuddy's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
  • Google Sign-In: Used solely to verify your identity and sign you into your SyllaBuddy account.
  • Google Calendar Sync: When you explicitly click "Sync to Google Calendar," SyllaBuddy requests short-lived OAuth permission (https://www.googleapis.com/auth/calendar.events) to create your course events in your Google Calendar. We do not read unrelated calendars, sell data, transfer data to third-party brokers, or use Google Workspace data for advertising or AI model training.

3. Gemini AI PDF Processing

When you upload a syllabus PDF, its contents are transmitted securely to Google's Gemini API solely to extract structured course titles, instructors, and academic dates. Do not upload sensitive personal documents, financial records, or confidential third-party files—upload academic course syllabi only.

4. Cookies & Local Storage

  • Essential Session Cookie: SyllaBuddy sets a strictly necessary HttpOnly, SameSite=Lax authentication cookie so your browser can load pages, thumbnails, and PDFs securely without exposing tokens to JavaScript.
  • Theme Preference: Your light/dark theme choice is stored locally in your browser under localStorage["syllabuddy-theme"].
  • No Ad or Tracking Cookies: SyllaBuddy does not use third-party advertising cookies or cross-site trackers.

5. Data Isolation, Retention & Deletion

Uploaded syllabi and calendar events are isolated strictly to your user account and are never published or shared with other users. You may delete any individual syllabus from Syllabi or permanently delete your entire account and all stored files at any time from Settings.