Your data

What it reads

• Only the apps you connect, and only to build your list and calendar.
• Canvas: your courses, assignments, due dates, whether you turned something in, announcements, course pages, files (including the syllabus) and your grades. With a Canvas calendar link instead, only due dates and class events.
• Google Classroom: your classes and your own assignments, with due dates and whether you turned each in. Never grades, posts or files.
• Blackboard, Brightspace and Moodle calendar links: due dates and class events, nothing else.
• Calendars and to-do apps: your events and tasks with their titles, times and notes.
• Outlook mail: the subject and sender of recent emails. If you turn on reading your emails for to-dos, new emails from people are read once by AI, and only the to-dos found and a short summary are kept.
• Slack and GroupMe: recent messages, checked with plain rules (not AI). Only events, and asks in the channels and groups you pick or that name you, are kept.
• Some features send what they need to AI (Anthropic and OpenAI, often through OpenRouter), like a syllabus to find its dates. None of them trains on it.
• Claude or another AI app you connect yourself can read your list, calendar and class material, and add to-dos when you ask it to.

What it never does

• It never sends, changes or deletes anything in Canvas or any other app. Checking something off here stays here.
• It never sells your data, shows ads or uses tracking pixels or analytics services.
• Your data is never used to train AI, ours or anyone else’s. Your grades are never sent to AI.
• The assistant never creates or changes anything until you confirm it.
• The person who runs Secretariat can’t see your to-dos, notes or connected app data.

Your Canvas token

A Canvas access token lets an app read Canvas as you, so it’s worth knowing how ours is handled. You make it yourself, by pasting it or with one tap in our Chrome extension, which names it so you can find it in Canvas. It’s encrypted (AES-256) before it’s stored, used only to read, and never shown to anyone. If your school doesn’t allow tokens, Secretariat uses your Canvas calendar link instead.

Anything a classmate shares through Canvas, like a group grade or a discussion post, can be visible to you, and so to any app you give a token. Secretariat only reads your own courses, assignments and grades to build your list, and never shows anyone else’s.

What classmates can see

Nothing about you. If a classmate in the very same Canvas course has no syllabus, they can be offered the dates read from yours: each one’s name, day and the line it came from. Never the file, its text or your name. You can turn that off in Settings > Your classes.

Classmates in the same Canvas course (and the same class at your school in later terms) also get how the class’s Canvas is laid out, so Secretariat finds its readings and homework sooner. And when Canvas and the syllabus disagree on a day, they see how many classmates moved it to the other one once at least two did. Never who.

Taking it back

• Disconnect any app in Settings, Connected apps. That deletes its sign-in, and you can remove what it brought in.
• Delete a Canvas token any time in Canvas, under Account, Settings, Approved integrations.
• Delete account in Settings removes everything tied to you.
• Questions, or a copy of your data: hello@getsecretariat.com. We’ll answer a school IT office too.