What Collego Keeps

Updated September 23, 2026. Collego, Santa Clara, CA. Contact: hello@collego.app.

What Collego Collects

• Account details. Your name and email address from Google sign-in, or the email address and a hashed password if you create a Collego account.
• Your Canvas calendar feed link and the assignment data it contains: assignment names, course names, due dates, and links back to Canvas.
• An optional Canvas connection. If you connect Canvas with a personal access token or the iPhone setup, Collego keeps an encrypted access credential, your school address, the account identity you confirm, your selected courses, and connection and cleanup status. This is separate from a calendar feed.
• Coursework you authorize Collego to read. This can include assignment instructions, due dates, points, your own submission status and released scores, modules, pages, rubrics, and linked course files. An unavailable field is not treated as a missing assignment.
• Assistant conversations and files. Your messages, answers, project instructions, enabled memories, feedback, uploaded documents and images, generated downloads, study decks made from your course files, and the course-file copies needed to answer. We also keep usage counts and operational records needed to enforce allowances, recover interrupted work, and diagnose failures.
• Temporary iPhone setup information. The Wi-Fi name you enter, a browser setup cookie, the selected school, temporary certificate/profile configuration, and setup progress. The connector retains recovery metadata so it can explain unfinished cleanup; that journal does not contain the Canvas credential, raw browser cookie, proxy password, certificate private key, or captured request contents.
• Your settings. Notification channels, schedule, timezone, course nicknames and colors, custom tasks, reminders, and which items you have checked off.
• Notes. The post-it notes and doodles you pin on the dashboard, and which of them you chose to add to memories. These are account-private; enabled memories can be processed by our AI provider when helping you.
• Text messages. If you opt in, your mobile number, the time and wording of your consent, and whether you have confirmed or stopped.
• Phone notifications. If you turn them on, the push subscription your browser issues so Collego can reach your device.
• Google Calendar. If connected in Settings, Collego stores encrypted credentials with Google's Calendar events permission for your reminder sync. If you also enable My calendar in an assistant chat, it can read event titles and times from your primary calendar in a bounded 1–30 day window. That assistant tool cannot create or edit events.
• Google Drive, where available. A separate, optional connection uses Google's per-file permission. Only files you explicitly choose in Google Picker are imported into your saved assistant uploads; this is not permission to browse your entire Drive. Collego keeps the encrypted grant until disconnected.
• Billing status. Whether you are on the free trial or subscribed, and your Stripe customer ID. Your card details go to Stripe and never reach Collego.
• Referrals and rewards. Your invite code, the account relationship established through it, signup and payment dates, qualifying Stripe payment references, reward status, and payout records. If you request a payout, we collect the contact email you provide to arrange payment. We do not collect bank account numbers on the referral page. Your inviter sees a numbered referral and reward status, not your email, coursework, or card details.

Your Canvas Connection

Collego does not ask you to paste your Canvas password. A connected account uses the credential you authorize to read coursework as your Canvas account. Collego's coursework tools do not submit work, change grades, or send Canvas messages. That restriction is enforced by Collego; it does not mean the underlying credential has only read permissions.

The iPhone option uses temporary Wi-Fi/proxy settings and certificate trust to route the selected school's Canvas traffic through the hosted connector during setup. Certificate trust is a device-level setting, not a limited Canvas permission. Follow the removal steps when setup ends, including if it fails. Collego cannot remove or inspect those settings remotely. Your reported cleanup confirmation is kept separately from whether an account connection was saved.

How Collego Uses It

To show coursework, answer your questions, maintain your conversations and chosen personalization, generate requested files, send the reminders you configured, and operate the service. We do not sell your personal data or use it for advertising.

Services that process this data include Vercel for the website and background work, Upstash for storage, Railway for the temporary phone connector, OpenAI for AI answers, optional web search and hosted workspaces, Resend for email, Twilio for text messages, Stripe for payments, and Google for sign-in and optional Calendar or Drive connections. Different providers receive the data needed for their part of the service, not every category listed above.

AI Processing And Hosted Workspaces

When you use the assistant, relevant coursework, conversation context, your attachments, enabled memories, and project instructions are sent to OpenAI. Hosted workspaces can process file contents, run calculations, and create downloads. Collego keeps Canvas credentials on its server rather than placing them in assistant prompts. You can turn memories off and choose which courses the assistant may read.

Web search and My calendar are off by default and stay selected for a chat until you remove their chips. Before each web-enabled question, you review a separate public search phrase. Only that phrase and generic search instructions enter a separate OpenAI search request; your private conversation, course files, memories and calendar are not included in that request. The search model may rephrase or expand those public terms. Do not put private information in the public phrase. This request uses OpenAI's no-response-storage setting, which is not a promise of zero provider retention. Public references remain separate from Canvas evidence. Calendar titles and times read for a question are processed by the private assistant, and details quoted in an answer remain in saved chat history. Removing a tool stops new use, not deletion of saved answers. Changing tools refreshes the assistant's working context. Gmail access is not provided.

An explicit command you type to add a dated task or exam can save it directly to your own Collego plan and offer Undo. Other proposed changes require your confirmation. These actions do not submit coursework or alter Canvas. An exam command may create Collego reminders; delivery still follows your saved notification settings.

OpenAI's API data controls describe provider-side storage and retention. API data is not used for model training by default; this is not a promise of zero retention. Managed session state can remain until deletion, and provider safety logs or asynchronous cleanup can outlast removal from Collego. See OpenAI's data controls and managed-session deletion.

Text Messages

Texting is optional and only starts after you enter your mobile number on the Settings page, tick the consent box, and reply YES to a confirmation text. Collego sends at most four texts a day: an evening nudge and the reminders you set yourself. Reply STOP at any time to end them and HELP for help, or turn texting off in Settings.

Your mobile number and your text-messaging consent are used only to send you the reminders you asked for. Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent are not shared with any third party, except the carrier and messaging provider needed to deliver your messages.

Google User Data

Collego's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Sign-in reads your name, email address, and profile picture. Calendar access supports the reminder sync you enable and, only with a separate chat selection, the assistant's primary-calendar read. Drive access, where enabled, imports only the files you select. These optional connections can be disconnected in Collego or revoked at myaccount.google.com/permissions. Disconnecting Drive removes its stored grant and pending selections, not copies you already imported; delete those through Files or delete the associated chat/account. Revoking Google access may also affect other Collego permissions granted within the same Google project.

Retention And Deletion

Referral links use a signed first-party cookie for up to 30 days to remember the first valid invitation through sign-in. The referral relationship is recorded only for a new account. Account deletion disables the invite link. Minimum referral and payout history, payment references, and keyed hashes used to prevent duplicate rewards may remain for payment reconciliation and abuse prevention. Outstanding rewards and payment requests must be resolved before an account with those claims can be deleted; the deletion screen explains when this applies.

Choose how long Collego keeps a Canvas connection: 3 days, 7 days, 30 days, or until you disconnect. This controls Collego's retained copy, not the credential's actual lifetime; Canvas can expire or revoke access sooner. Disconnecting Collego does not revoke Canvas Student or other Canvas integrations, and does not by itself delete saved chat text.

Saved conversations remain until you delete them. Course-file copies have a four-month expiry refreshed by use. Original attachments and generated downloads have their own file and chat deletion controls and may have earlier technical expiry. Disconnect removes retained course-file and attachment copies and study decks; material already quoted in a saved conversation can remain with that conversation.

Account deletion removes account data and requests cleanup of associated AI sessions and stored files. Active work must stop first. If cleanup cannot finish, the service reports that it needs a retry rather than treating the attempt as complete. Provider cleanup may continue asynchronously. Content-free deletion barriers and limited security or recovery metadata may remain to prevent late work from recreating deleted data or to explain unfinished phone cleanup. Contact hello@collego.app for a deletion or recovery request.

Security

Account data is protected by authenticated access; Canvas credentials, saved assistant conversations, and retained file copies are encrypted in Collego's storage. Website traffic uses HTTPS. The iPhone setup separately explains its proxy transport and certificate settings. Your feed link and connection credentials can grant access to personal coursework: do not share them in chats or screenshots. Your saved calendar feed can be revealed through its own signed-in settings controls.

Changes

If this policy changes, this page and the date above are updated.