Privacy Policy

1. Who we are

Junebot ("we", "us", "our") operates junebot.com, a service that aggregates school information from Canvas LMS and Gmail to deliver daily summaries to parents. We are not affiliated with Instructure, Google, or any school district.

2. Information we collect

Account information: Your email address when you create an account. Passwords are hashed and managed by our authentication provider (Supabase) — we never see or store your raw password.

Canvas data: With your authorization via Canvas OAuth, we access assignments, grades, and course announcements for the students linked to your observer account. We access this data in read-only mode and do not modify any Canvas content.

Gmail data: With your explicit authorization via Google OAuth, we access emails from your school district senders only. We use the gmail.readonly scope and never read, send, delete, or modify emails outside of identifying school-related messages. We do not store the full content of your emails — only the synthesized summary we generate from them.

Usage data: Basic logs (page views, errors) to operate and improve the service. We do not sell this data.

3. How we use your information

• To generate and deliver your daily school summary
• To authenticate your connected accounts (Canvas, Gmail)
• To send you the summary via email or SMS per your preferences
• To improve the accuracy and relevance of summaries

We do not sell, rent, or share your personal information or your children's educational data with third parties, except as required to operate the service (e.g., email delivery providers) or as required by law.

4. Gmail API usage

Junebot's use of Gmail data is limited to reading emails for the purpose of generating your school summary. We do not use Gmail data for advertising, do not allow humans to read your email (summaries are generated by AI), and do not transfer Gmail data to third parties except to AI inference services (Anthropic) solely to generate your summary. Our use of Gmail data complies with the Google API Services User Data Policy, including the Limited Use requirements.

5. Children's privacy (FERPA/COPPA)

Junebot is a service for parents, not children. We access student educational records only on behalf of a parent or legal guardian who has authorized us through their Canvas observer account. We do not knowingly collect personal information directly from children under 13. Educational records accessed through Canvas are treated in accordance with FERPA guidelines.

Junebot may optionally deliver summaries via SMS directly to a student's phone, but only when explicitly enabled by a parent or legal guardian. A student's phone number is collected solely for this purpose and is never used for marketing or shared with third parties.

6. Data retention and deletion

You can delete your account at any time by emailing privacy@junebot.com. Upon deletion, we remove your account data, connected account tokens, and stored summaries within 30 days. You can also revoke Canvas or Gmail access at any time through your Canvas account settings or Google account permissions page, which will immediately stop data collection.

7. Security

OAuth tokens are stored encrypted. We use Supabase with row-level security so each user can only access their own data. All data is transmitted over HTTPS.

8. Contact

Questions about this policy: privacy@junebot.com