DegreeAI
Back to site
Privacy
Last updated October 27, 2026
This page covers the DegreeAI website, the waitlist, account sign-in and the invite-only beta workspace.
What we collect and why
- Waitlist
- Your email address and the time you joined. We use it only to tell you when access opens. It is removed from the list when you are invited, or earlier if you ask.
- Accounts
- Your email address and a password. The password is held by our sign-in provider in hashed form. It passes through our server on its way there and is never stored or logged by us.
- Server logs
- For every request: your IP address, the time, the address requested and the standard headers your browser sends, such as its user-agent string. We keep these for 90 days to investigate abuse and security problems, then they are deleted. Passwords, form contents, sign-in link tokens and cookies are never written to the logs.
- Canvas connection
- The Canvas address and access token you give us, stored encrypted. We use it only to read your courses and assignments and to open them for the agent. Disconnecting deletes the token from our side; you can also revoke it in Canvas at any time.
- Coursework
- Assignment names, instructions and due dates from Canvas, the drafts and answers the agent prepares, and what it did on each assignment (questions answered, whether they were marked correct, and any problem it stopped on). We keep this so the agent can work and so you can review its work.
- School sign-in in the remote browser
- If you sign in to your school or a homework tool in the remote browser, the browser's cookies are saved encrypted so you do not have to sign in every time. You can forget them from the workspace. We never see or store your school password.
- AI usage
- For each AI request: when it was made, which assignment it was for, the model, how many tokens it used and what it cost. We use this to enforce your monthly allowance and to keep the service affordable.
- Account activity
- Sign-ins and failed sign-in attempts (with the IP address they came from), sign-outs, Canvas connections, problem reports you send, and changes our team makes to your account. We use this to keep accounts secure and to support you. The beta team can see this activity and your agent's results for your account.
- Abuse limits
- To limit spam and password guessing we keep short-lived counters tied to a scrambled form of your IP address or email address. They expire within 15 minutes.
Cookies
We set two cookies, both only when you sign in. Neither is used for advertising or tracking.
- Session
- Keeps you signed in. It lasts up to 7 days and is removed when you sign out.
- Known browser
- Remembers that this browser has signed in before, so that someone else guessing your password cannot lock you out. It lasts 180 days and gives no access to your account.
Who else handles this data
- Supabase
- Stores account email addresses and hashed passwords, and issues sign-in links.
- Resend
- Delivers the emails we send you, such as invitations and password links.
- DigitalOcean
- Hosts our servers, in the United States. The waitlist, your workspace data and logs are stored there.
- AI provider
- Assignment text and screenshots of the question on screen are sent to our AI provider (OpenRouter, which passes them to the model host it selects) to prepare answers and drafts. Your name, email address and Canvas token are not sent.
- Sentry
- May receive reports when part of DegreeAI fails. Reports contain the error and the page or operation involved, never cookies, form contents or your account details.
- Google Fonts
- Serves the typeface on these pages, so Google receives your IP address when a page loads.
- Cloudflare Turnstile
- May be used on the waitlist form to tell people from bots. When it is, Cloudflare receives your IP address and details about your browser.
We do not sell your data or share it with anyone else.
How long we keep it
Workspace data stays while your account is open. When you delete your account, your Canvas connection, saved school sign-in, coursework, drafts and agent history are deleted at once, and your email address and sign-in IP addresses are removed from our records. We keep a record of AI costs without your details, for our accounts.
Your choices
In the workspace profile you can download a copy of your data, sign out of other devices and delete your account. You can also ask us for a copy, a correction or deletion, including removal from the waitlist. Write to support@degreeai.net.
Changes
If this page changes, the date at the top changes with it.