Privacy Policy

This policy explains what information Aeero collects, why, who sees it, and how you can control it. Aeero is run by David Junior Nintang, Epaphras Akinola, and Foster Yaw Oppong, students at Grambling State University and Wingate University (“Aeero”, “we”, “us”). It applies to the Aeero web app, the texting line, and Aeero on WhatsApp (the “Service”). It is part of our Terms of Service.

The short version

• We collect what you give us (your account, your messages, your uploads), what you connect (your Canvas courses, assignments, and grades, and your email or an app such as Google Docs if you choose to connect it), and basic usage data.
• We use it to run Aeero for you, and for nothing else. No selling, no advertising, no training AI on your data.
• To answer you, we send your messages and relevant course data to Anthropic, PBC, under terms that forbid them from training on it. We also use Round One, Inc. (Sendblue) and Photon to deliver texts and Cloudflare, Inc. to store data.
• Delete your account and we delete your data, most of it within 7 days. Section 5 explains what can take longer. Text STOP and the messages stop.
• Canvas data is your education record. We only ever access it because you chose to connect it, and you can disconnect at any time.

What we collect

We collect only what Aeero needs to work.

What we do not collect. We do not ask for or store your university password, your Social Security or student ID number beyond what Canvas itself exposes, payment details, precise location, or contacts. Aeero does not read anything on your phone other than the messages you send it.

Cookies and analytics. The web app uses your browser’s local storage to keep you signed in. We do not use third-party analytics tools or advertising trackers.

How we use it

We use your information to:

• answer your questions and carry out what you ask, including reading your Canvas data and, if you connect them, your email and your documents, to give you accurate, personal answers;
• notice new email that matters to you, such as an interview invitation or a deadline, and remember it so Aeero can help you with it;
• track deadlines and send the reminders you set;
• take actions you have confirmed, such as sending a Canvas message or an email, or changing a document you already have;
• make a new document, or a copy of one, when you ask for it;
• organize your email when you ask, such as labeling it, drafting a reply, or moving a message to the trash;
• keep your account secure and prevent abuse;
• fix bugs and understand which features are used, so we can improve Aeero;
• respond when you contact us for help; and
• meet legal obligations.

How the AI part works. When you ask Aeero something, we send your message, recent conversation, and the relevant parts of your Canvas data, email and connected documents to Anthropic, PBC, to generate a reply. We send only what is needed for that reply. Anthropic, PBC’s terms for this service do not permit them to train models on your data and limit how long they retain it (see Anthropic’s privacy policy). If we ever change providers, the new provider must meet the same standard.

What we never do

• We do not sell your information, and we never have.
• We do not use it for advertising, ours or anyone else’s.
• We do not use your information to train AI models, and we do not allow our providers to.
• We do not share your information with your university, your instructors, or anyone else unless you ask us to (for example, by confirming a Canvas message or an email), or the law requires it.
• We do not look at your conversations unless you ask us for help with one, or we need to investigate abuse or a security problem, and then only the founders named above, and only what is necessary.

Who we share it with

We share information only with the providers that run Aeero, and only what each one needs:

When Aeero runs code to process a file or create a document, the code and files are sent to Anthropic’s hosted sandbox. Anthropic retains sandbox contents for up to 30 days. Aeero deletes the separate Files API copies after transferring the results.

Each provider is bound by its own terms and by our agreement with it to use your information only to provide its service to us. We will update this table if we add or change a provider.

We may also disclose information if the law requires it, to protect someone’s safety, or to enforce our Terms. If we receive a legal request for your data, we will tell you unless the law forbids it.

Canvas is run by Instructure and your university, under their own terms and privacy policies. When you connect Canvas, Aeero acts as your agent, reading what you could read yourself. Aeero does not give Instructure or your university any information about you that they did not already have, except the messages you confirm and ask Aeero to send.

Email. If you connect your email, Aeero uses it only to help you, and you can disconnect it at any time. You connect it through Composio, Inc., so Google’s sign-in screen names Composio and lists the access that connection allows. Aeero reads your email, and when you ask, it organizes it (labels, drafts, moving a message to the trash) and tells you what it changed. Aeero never sends, replies to, or forwards an email until it has shown you the exact message and you have replied SEND. Aeero does not permanently delete email, change your mail settings or filters, or manage your contacts. Aeero’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. This covers your email and the documents and files from an app you connect. We do not use that content for advertising, do not sell it, do not use it to train AI models, and do not let people read it unless you ask us to, it is needed for security, or the law requires it.

Apps you connect, such as Google Docs. Connecting an app is optional, and you can disconnect it at any time. You connect Google Docs through Composio, Inc., so Google’s sign-in screen names Composio and lists the access that connection allows, which is Google Docs and Google Drive. Composio holds the connection, linked to a random ID. Aeero never sees or holds your Google password or tokens. Aeero can find and read your documents and the details of your Drive files, and it does so only when you ask for something that needs them. It does not read your documents in the background. Aeero makes a new document, or a copy of one, when you ask for it, and tells you what it made. Aeero changes a document you already have only after it has shown you exactly what it will do and you have replied YES. Aeero does not share a document with someone else or delete one. The tools it uses cannot do either.

How long we keep it

If we are legally required to keep something longer, we will keep only that, for only as long as required.

Security

We use encryption in transit and at rest, limit who can access production data to the founders named above, and store Canvas tokens encrypted. During the pilot, we do not yet have a security audit, a dedicated security team, or insurance. We will tell you within 72 hours of confirming a breach that affects your data, and we will say what happened and what we are doing about it.

Chats with Aeero on WhatsApp are not end-to-end encrypted.

No system is perfectly secure. Do not send Aeero anything you would not want exposed, such as a password or a government ID.

Your rights and choices

You can do all of these yourself, at any time:

• See your data: ask us at support@aeero.io and we will send you a copy within 30 days.
• Fix it: edit your account details in Settings.
• Disconnect Canvas: in Settings, or by deleting the token in Canvas. Aeero loses access immediately.
• Disconnect email: in Connections, by asking Aeero, or from your email provider’s account settings. Aeero loses access immediately.
• Disconnect an app: in Connections, or by asking Aeero.
• Stop messages: reply STOP to any text. You will get one confirmation and nothing more. On WhatsApp you can also block Aeero.
• Delete everything: in Settings, by texting DELETE MY DATA, or by emailing support@aeero.io. We will confirm once and delete as section 5 describes.
• Ask questions or complain: email support@aeero.io. We will answer within 7 days.

We will not treat you differently for exercising any of these.

If you live in a place with a data-protection law that gives you additional rights (for example the EU, the UK, or California), you have those rights too, and you can exercise them the same way. We do not sell or share personal information for advertising as those laws define it.

Education records

Your grades, assignments, and other Canvas data are education records protected by FERPA and by your university’s policies. Aeero is not your university and is not acting for it. We access your education records only because you, the student, chose to connect Canvas and directed us to read them on your behalf. That is your choice to make, and you can withdraw it at any time by disconnecting.

If your university signs an agreement with Aeero covering your use, that agreement will control how your education records are handled, and we will update this policy to say so.

Age

Aeero is for college and university students who are 18 or older. If you are 17, a parent or guardian must agree to the Terms for you, and they can exercise your rights under this policy. We do not knowingly collect information from anyone under 13. If you believe a child has given us information, email support@aeero.io and we will delete it.

Where your data lives

Your data is stored in the United States by the providers named in section 4. If you use Aeero from outside the United States, your information is transferred to and processed in the United States, where privacy laws may differ from those where you live.

If we form a company

We intend to form a company to run Aeero. When we do, your information will transfer to that company, which will take our place under this policy and the Terms. We will tell you in the app or by message before this happens. The company will be bound by every promise in this policy, including that your information will not be sold, used for advertising, or used to train AI. If you do not want your data to transfer, you can delete your account before it does.

If Aeero is ever acquired or shuts down, the same rules apply: you will be told first, your data goes only to a successor bound by this policy, and you can delete it before it moves.

Changes to this policy

We may update this policy. We will post the new version here with a new “last updated” date. If a change reduces your rights or lets us do more with your data, we will tell you in the app or by message at least 14 days before it takes effect, and the notice will say what changed. We will never apply a change retroactively to data we already hold without your consent.

Contact

David Junior Nintang, Epaphras Akinola, and Foster Yaw Oppong doing business as Aeero, 403 Main St, Grambling, Louisiana 71245, support@aeero.io.

We are students running a pilot, not a large company. If something about how we handle your data seems wrong, tell us, and we will fix it.