Privacy policy

Privacy policy

Short version: Gradeshuttle works entirely inside your browser. We never receive, store, sell or share the student information it handles, because it never reaches us.

Draft for legal review · Effective [date of publication] · Bracketed items to be completed

Who we are

Gradeshuttle is made by [Legal entity name], [address], Alberta, Canada (“we”). Our privacy officer is [name], reachable at andreas.much@gmail.com.

The Gradeshuttle extension

Gradeshuttle is a Chrome extension that copies a column of grades from one web page and types it into another, usually a school gradebook.

What it reads

Only when you press Grab or Fill, and only on the page you’re looking at, Gradeshuttle reads:

  • the student names on the rows of the column you click;
  • the one value in that column for each of those students (and, when you fill, the value already in your gradebook cell);
  • the website’s host name and the column’s title, so you can see where the data came from.

It doesn’t read other columns, other tabs, your passwords, cookies, browsing history or clipboard. If you use Paste, it reads only what you paste or the file you choose.

Where it’s kept, and for how long

  • Grabbed names and grades are held in your browser’s session memory, available only to Gradeshuttle. They’re erased when you close Chrome, press Clear, finish a transfer, or after 60 minutes (your school may set a shorter time).
  • Settings and your license key are stored on your computer until you remove them. If you start the 7-day Pro trial, its start date is stored on your computer too (it identifies no one). It stays after “Delete all Gradeshuttle data” so a trial runs once.
  • Remembered matches (optional, Pro) are stored on your computer as one-way keyed codes, not as names. They expire on July 31 at the end of the school year in which they were made.
  • Receipts are CSV files you choose to download. They contain student names and grades, and you control where they’re saved. Please follow your school’s records rules.

What’s sent to us or anyone else

No student information, ever. Gradeshuttle has no servers, accounts, analytics, advertising, crash reporting or tracking. Its own screens are blocked from connecting to the internet, and the code that reads web pages contains no network features. We check both on every release. License keys are checked on your computer, and teacher keys contain no personal information.

Gradeshuttle never opens our website on its own. After you install it yourself, it shows a welcome tour that is built into the extension. Installs managed by a school open nothing. Our website is visited only if you click a help, pricing or privacy link.

Deleting your data

In Gradeshuttle, open Privacy at a glance (the shield icon). Erase grabbed data now clears the current transfer, and Delete all Gradeshuttle data removes everything Gradeshuttle stored on that computer. Uninstalling the extension also removes its data.

Permissions and why

PermissionWhy Gradeshuttle needs it
sidePanelShows Gradeshuttle in Chrome’s side panel so it stays open while you switch tabs.
scripting + site access (asked for at first use)Runs Gradeshuttle’s page script only after you press Grab or Fill, so it can highlight the column, read it, and type values.
activeTabLets Gradeshuttle work on the tab you’re using when you invoke it.
storageKeeps grabbed data in session memory, and your settings on your computer.
alarmsErases grabbed data automatically after the time limit.

Students and children

Gradeshuttle is a tool for teachers and school staff. It isn’t directed at children and collects nothing from them. The student information it handles belongs to the school and stays on the teacher’s device. We don’t use it to build profiles, train models, advertise, or for any purpose other than the transfer the teacher asked for.

Information we do handle

Outside the extension, we handle a small amount of information about adults:

  • This website: it has no analytics, cookies or trackers. Our host keeps standard server logs (IP address, page, time) for security, for [30] days. [Hosting provider, country].
  • Email you send us: kept to answer you and for support records, for [2] years. [Email provider, country]. Please don’t send student names. If you do, we delete them.
  • Purchases: Stripe (Stripe, Inc., United States, and Stripe Payments Canada) runs checkout and holds your name, email, billing address and payment details; we never see full card numbers. Stripe is our record of who paid: our small license service does not keep its own database. It reads your purchase from Stripe to create your license key, shows the key on the thank-you page and emails it to you through [Resend, United States]. Stripe keeps invoices for tax records ([7] years). School and district purchases include the contact details on the purchase order.
  • Handing a key to the extension: when you press “Add to Gradeshuttle” on our website, the page passes your license key to the extension on your computer. Only gradeshuttle.com can do this, the extension accepts nothing but a valid signed key, and nothing about you is sent back.

We don’t sell personal information or share it for advertising. We use processors only to run the services above. Some of them (Stripe, our email sender and our host) store or process data outside Canada, mainly in the United States, where it may be subject to the laws of that country. To learn more about how these service providers handle your information, or with any question about it, write to andreas.much@gmail.com.

Chrome Web Store Limited Use

The use of information received from Chrome APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Gradeshuttle uses the web content it reads only to provide its single purpose: transferring grades the user selects. That data isn’t transferred to anyone, isn’t used for advertising or creditworthiness, and isn’t read by humans.

Schools and the law

Schools stay in control of their student information. In Alberta, school authorities are subject to the Protection of Privacy Act and independent schools to PIPA. In the United States, schools are subject to FERPA and state student-privacy laws. We support schools’ reviews with a PIA support pack, a privacy schedule or DPA, and security answers. See Schools & districts.

Your rights

You may ask to see, correct or delete the personal information we hold about you (email, purchase records) by writing to andreas.much@gmail.com. We answer within 30 days. If you’re not satisfied, you can contact the Office of the Information and Privacy Commissioner of Alberta or the Office of the Privacy Commissioner of Canada. Requests about student records go to the student’s school, which controls them.

If a security incident ever affected information we hold, we would notify affected people and regulators as the law requires, and tell schools without undue delay.

Changes and contact

If we change this policy, we’ll update the date at the top and describe material changes on this page and in Gradeshuttle’s release notes before they take effect. Questions: andreas.much@gmail.com.