Your information

Privacy policy

Effective November 9, 2026

StudyTrellis is an independently operated private pilot for organizing school learning materials. The site owner operates the pilot. Invited participants can contact the operator through the private channel used to arrange their pilot access. This policy covers the public information website and the current desktop collector, including its operational alert checker.

Information we access

• Google identity: email address and account-verification information, used to check that the intended account is connected.
• School Gmail: relevant school notices, message identifiers, dates, headers, message bodies, and attachments. The application searches for school and classroom notices; it does not intentionally collect unrelated personal correspondence.
• Google Drive: metadata and contents of files linked from authorized school sources, including file identifiers, names, types, timestamps, and versions. Supported native Google documents may be exported to PDF.
• Signed-in school browser: teacher-post titles, instructions, links, and screenshot evidence. Screenshots can incidentally contain student names, assignment status, or other student-specific interface information; they are kept separately from reusable teacher-source bundles.
• Operations: collection status, error diagnostics, file-integrity hashes, processing history, and alert-delivery records.

Google permissions and their purpose

The school connection requests openid, email, gmail.readonly, and drive.readonly. These support identity checking, school-notice collection, and retrieval of exact linked files. The application does not send school email, modify mailbox labels or read status, upload Drive files, submit assignments, or post comments.

A separate personal connection requests openid, email, and gmail.send. It verifies the personal sender and sends authorized operational failure alerts to the operator's designated recipient. It does not request access to read that personal inbox. Alert content describes operational problems rather than attaching school materials.

The dedicated school-browser session is separate from Google API authorization. The operator signs in manually. The application does not enter passwords or solve sign-in challenges.

How information is used

Information is used to route relevant school sources, preserve original instructions and files, identify changes or incomplete collection, check file integrity, and provide source bundles for authorized study preparation. Student-specific browser content is excluded from reusable teacher-source downloads where identified. Incidental student information may remain in private evidence until reviewed or removed.

Google API data is not sold, used for advertising, or used to train generalized AI or machine-learning models. The current collector makes no AI API calls. Any future hosted service or AI-processing integration will require updated disclosures and appropriate authorization before introducing new uses or transfers of Google data.

StudyTrellis's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Storage and security

Collected notices, original files, source bundles, and operational records are stored on the operator's computer. Google access and refresh tokens are encrypted using the application's local data-protection system; on Windows, its encryption keys are protected for the Windows user. Tokens, keys, private browser sessions, and private screenshot evidence are stored outside the project's synced folder.

The operator may back up the project and collected material using a personally configured desktop-sync service, such as Google Drive. The OAuth desktop client configuration may also be backed up at the operator's choice. Cloud backup providers process those copies under their own terms. The local dashboard is restricted to the computer's loopback interface.

These controls reduce risk but do not guarantee security. People with access to the operator's unlocked Windows account or authorized backup storage may be able to access the corresponding data.

Sharing and service providers

The current pilot communicates with Google for account authorization, identity checking, source retrieval, and authorized personal Gmail alerts. Alert recipients receive the operational information in those messages. The operator's chosen backup provider may store synced copies. The public website is intended for Cloudflare Pages hosting; its hosting provider may process network information such as IP addresses and request logs to deliver and protect the site. See Cloudflare's privacy policy.

School files and collected account data are not served by this public website. Access to local records is limited to the operator and people the operator authorizes. Information may also be disclosed when legally required.

Retention, deletion, and your controls

Original sources, snapshots, and audit records are retained until the operator removes them; there is no automatic retention deadline in the current pilot. You can stop the collector, disable alerts, and revoke access through your Google account connections. Revocation stops future authorized API access but does not delete material already collected or end a separate saved browser session.

For deletion, the operator can remove local collected material, private credentials, browser profiles, and evidence, then remove corresponding backup copies. Invited participants can send access, correction, or deletion requests to the operator through their existing private support channel. Acknowledged sent alerts may remain in the sender's and recipient's mailboxes until deleted there.

Children and school information

The pilot is managed by invited adult account holders. Children do not register on this website. School sources may contain children's information, so operators must have permission to access and use them and must keep student-specific records separate from materials intended for reuse or wider sharing.

Website cookies and changes

The information pages do not include application analytics, advertising scripts, or registration forms. Hosting infrastructure may use essential security mechanisms. If you email the contact address, the email provider processes your message. Material changes to data practices will be reflected here, and new Google-data uses will require notice and appropriate renewed consent before taking effect.