Last updated: March 17, 2026
Zeric ("Zeric," "we," "us," or "our") is an independent study-aid platform. We are not affiliated with, endorsed by, or sponsored by Instructure, Inc., Canvas LMS, or any educational institution. Zeric is a tool built for students, by a student.
When you create an account, we collect your email address and a hashed password. We use Supabase for authentication; passwords are never stored in plaintext.
You may provide a Canvas Personal Access Token to connect your course data. This token is encrypted at rest using AES-256-GCM encryption and is used solely to retrieve your own course data from Canvas on your behalf. We do not share your token with any third party and do not use it to take any action on Canvas other than reading data you have authorized us to access.
With your authorization, we retrieve and store course data from Canvas including: course names and codes, assignment names and descriptions, announcements, course pages, uploaded files (PDFs, documents, presentations), quiz descriptions, and grade summaries. This data is stored in your private account and is never shared with other users.
We store your chat history with the Zeric AI assistant. Your messages and course context are sent to Anthropic's Claude API to generate responses. Anthropic's API does not use your data to train their models. You can find Anthropic's privacy policy at anthropic.com/privacy.
We collect basic usage metrics (number of AI messages sent per month) to enforce plan limits and improve the service. We do not sell usage data.
Payment processing is handled by Stripe, Inc. We do not store credit card numbers or payment details on our servers. Stripe's privacy policy applies to payment data.
We do not sell your personal data, course materials, or chat history to any third party. We do not use your course data to train any AI model.
The Family Educational Rights and Privacy Act (FERPA) generally governs how educational institutions handle student education records. When you voluntarily provide your Canvas access token and authorize Zeric to retrieve your own records, you are exercising your own rights as the student data subject. Zeric acts on your behalf, at your direction, to access records you have a right to access. We do not disclose your education records to any other party and do not use them for any purpose other than providing the service to you. You may revoke access at any time by deleting your Canvas token in Settings or deleting your account.
We share data only with the following sub-processors, strictly as necessary to provide the service:
| Provider | Purpose |
|---|---|
| Supabase | Authentication and database hosting |
| Anthropic | AI response generation (Claude API) |
| Voyage AI | Text embedding for semantic search (optional) |
| Deepgram | Audio transcription for lecture recordings (audio discarded after transcription) |
| Stripe | Payment processing |
| Vercel | Application hosting and infrastructure |
No other third parties receive your personal data or course content.
Zeric offers an optional lecture recording feature that transcribes audio from your device's microphone using Deepgram's speech-to-text API. By using this feature, you acknowledge and agree to the following:
Important: If your institution, instructor, or applicable law prohibits recording, do not use this feature. Zeric takes no responsibility for any policy violation, legal liability, or disciplinary consequence arising from unauthorized use of the recording feature.
We retain your account data and course data for as long as your account is active. If you delete your account, we will delete your personal data, Canvas token, course data, and chat history within 30 days, except where we are required to retain records for legal or financial compliance purposes (e.g., payment records required by law).
We use industry-standard security practices including AES-256-GCM encryption for stored Canvas tokens, TLS for all data in transit, and access controls to prevent unauthorized access to your data. No method of transmission or storage is 100% secure. You use the service at your own risk and are responsible for keeping your Zeric account credentials confidential.
You may at any time:
Zeric is intended for use by college and university students who are at least 13 years old. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will delete it promptly.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of Zeric after changes are posted constitutes your acceptance of the updated policy.
For privacy questions, data requests, or to delete your account, contact us at: privacy@zeric.app