Last updated: March 2026
Gradovate is built on a simple principle: your academic data belongs to you. Here's exactly how we handle it.
When you log in through ClassLink SSO, we receive an authentication token that lasts only for your session. We use this token to fetch your grades from HAC in real time. We also collect anonymous usage analytics — things like which features you use and how often — to improve the product. That's it.
Your grades are never stored on Gradovate servers. All grade data is fetched in real time during your session and discarded the moment you close the app. We never sell, share, or transfer your academic data to anyone. We don't build profiles. We don't serve ads. We don't monetize your information.
Gradovate does not store student education records. Grade data passes through our servers during AI analysis but is never persisted. We act as a conduit, not a repository. This session-only architecture means we don't maintain the kind of records that FERPA regulates — because we don't maintain records at all.
If you connect your Canvas LMS account, your personal access token is encrypted using AES-256 encryption and stored solely to enable automatic assignment fetching. You can delete your Canvas token at any time from your account settings, and it will be permanently removed from our systems.
We use minimal analytics to understand aggregate usage patterns — things like page views and feature adoption. These analytics are anonymous. We don't use advertising trackers, retargeting pixels, or any third-party data sharing services.
Since we don't store your grades, there's very little to delete. If you've connected Canvas and want your token removed, you can do it from the app or email us at privacy@gradovate.com and we'll handle it within 48 hours.
If we make material changes to how we handle your data, we'll notify you through the app before the changes take effect. We won't quietly change the rules.
Questions about your privacy? Email privacy@gradovate.com