Privacy Policy

Effective Date: July 15, 2026

This Privacy Policy describes how UrBuddy collects, uses, shares, and safeguards your personal information when you use our website and Chrome browser extension.

Important: If you do not agree with this Policy, please do not access or use our Services.

1Information We Collect

We collect different types of information depending on how you interact with our Services:

Account Information

When you create an account, we collect your email address, username (if applicable), subscription tier, account creation date, and subscription status.

Authentication Information

Clerk provides authentication for the website and extension. Clerk may store the browser cookies and local session artifacts required to keep you signed in. UrBuddy does not include those authentication artifacts in settings downloads and does not accept imported settings as proof of identity or Premium access.

Extension Data Stored in Your Browser

Extension preferences, locally captured quiz answers, CSV history, themes, and optional user-supplied provider keys or Discord webhook URLs are stored in the browser profile. They remain local unless you explicitly use a feature that sends the relevant data to Canvas, Discord, an AI provider, or an UrBuddy managed service. Clearing extension data or uninstalling the extension removes this local copy, subject to browser sync and backup behavior.

Payment Information

Subscription and billing details are managed through Clerk Billing, and card payments are processed by Stripe. We do not have access to or store your complete credit card numbers.

Operational and Security Data

Our services record limited request, rate-limit, audit, billing-event, and error information needed to operate and secure the product. These records can include timestamps, request identifiers, account identifiers, event outcomes, and network-derived abuse-prevention data.

Managed AI Processing

When you explicitly request a managed AI answer, UrBuddy sends only the question text, answer choices, and question type needed to generate that answer to our configured AI provider. We do not include your name, email address, Canvas user ID, or unrelated page content in that provider request. Operational records contain request status, model, token counts, latency, and account identifiers, but do not routinely store the raw question or generated answer.

Shared Answer Corpus

Premium users may contribute and report Canvas-scoped answers to a shared managed answer corpus. Corpus records can include a one-way question hash, Canvas origin, course and quiz identifiers, answer text, quality status, and report counts. Other Premium users can receive matching answers, but never the contributor's identity. Contributor identifiers are removed when an account is deleted, and corpus records expire after 24 months without an update.

2How We Use Information

•
Service Delivery: To provide, operate, maintain, and deliver the features and functionality of our Services.
•
Payment Processing: To process transactions, manage billing, verify payment information, and detect fraud.
•
Communications: To send you service-related emails including account verification, subscription confirmations, and support responses.
•
Security: To monitor and analyze suspicious activities and protect the rights and safety of our users.

3Sharing Information

We DO NOT sell, rent, or trade your personal information to third parties for their marketing purposes.

We may share information with service providers who perform services on our behalf, including Clerk for authentication and subscription management, Stripe for payment processing and approved refunds, our cloud hosting providers, and the AI infrastructure providers configured to process user-requested managed AI answers. Bring-your-own-key requests are sent directly to the provider selected by the user. When you enable Canvas submission, Discord delivery, or another optional integration, the extension sends the selected information to that service at your direction.

4Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy.

→Active Accounts: Account and entitlement data is retained while your UrBuddy account remains active, whether Free or Premium.
→Deleted Accounts: Access is denied immediately when Clerk confirms deletion. Active service records are deleted or anonymized, except limited financial, backup, or legal records that must be retained. Account, entitlement, session, checkout, and per-user AI records are then deleted in bounded background jobs; shared answer, billing, payment, audit, and administrator records are stripped of the deleted account identifier. A minimal deletion tombstone is retained to prevent delayed events from recreating access.
→Financial Records: Retained for up to 7 years for compliance.
→Operational Records: Checkout tickets and rate-limit counters are kept for up to 24 hours, security and service audit logs for 90 days, managed AI request telemetry for 30 days, per-user AI allowance records for 90 days, administrator audit records for one year, de-identified monthly AI aggregates for 25 months, shared answer corpus records for 24 months after their last update, and inactive E2E test registries for 30 days. Raw quiz questions and generated answers are not retained in routine AI telemetry.

5Your Rights

Depending on your location, you may have the following rights:

→

Right to Access: Request a copy of your personal information.

→

Right to Rectification: Request correction of inaccurate information.

→

Right to Erasure: Request deletion of your personal information.

→

Right to Data Portability: Request a machine-readable copy of your data.

→

Right to Withdraw Consent: Withdraw consent at any time.

To exercise your rights, email us at omsimservices@gmail.com.

6Children's Privacy

Our Services are not directed to children under the age of 13. If you believe a child under 13 has provided us with personal information, please contact us immediately.

7Data Security

We implement reasonable security measures including encryption of data in transit and at rest, regular security audits, and access controls.

Important: No method of transmission is 100% secure. We cannot guarantee absolute security.

8Contact Us

If you have questions about this Policy, please contact us at:

Email:omsimservices@gmail.com

Back to Home

UrBuddy