Profet by TAUR — Connect Brightspace

1. What the extension does

Brightspace has no way for a student to give an app access, so the extension does it for you. You sign in to Brightspace yourself, in your own browser (including any two-step check). The extension then sends TAUR the session cookies Brightspace gave that browser. With them, Profet can look up your courses, grades, due dates, announcements, assignments, quizzes and course content when you ask in your chat.

Profet only reads from Brightspace. It never submits, posts or changes anything there.

2. What the extension reads and keeps on your device

Read and sent to TAUR: only four Brightspace session cookies, d2lSessionVal, d2lSecureSessionVal, d2lSameSiteCanaryA and d2lSameSiteCanaryB, from your school's Brightspace site (e.g. brightspace.carleton.ca). The extension sends them again when you visit Brightspace, so the link stays current.

Never read: your Brightspace password, cookies or data from any other site, your browsing history, keystrokes, form contents or files.

Kept on your device only (the extension's local storage): the one-time link code, the tokens that tie this browser to your chat account, and when the last refresh and connection check happened. Removing the extension deletes them.

3. What TAUR stores on its servers

Everything below is stored against your chat account ID (for example your messaging user ID or phone number). You give it to us when you send Profet your link code.

Your Brightspace connection

• Your session cookies, encrypted, plus your school's Brightspace address and the API version it uses.
• Timestamps about the connection: when you linked, when you last used Profet, when the last keep-alive check (Section 5) succeeded or failed, when the session stopped working, when the next check is due, and how many times Brightspace refreshed the cookies.

The link between the extension and your chat

• The link code and tokens used to pair them, whether the link was confirmed, and when (including when Profet sent you its "you're all set" message).

Course material Profet reads to help you study

• The text of course files and announcements Profet pulled from Brightspace for your notes and practice tests, with each item's title and Brightspace link.
• The study material Profet made from them: topic notes, study guides, practice tests, flashcards, explanations and assignment kickoffs.
• Lessons: which lesson you told Profet a reference like "week 5" means (a correction you made), and when Profet last read each course's material.
• Mock tests: each mock test Profet makes for you, stored as two separate parts (the questions you were sent, and the answer key held back until you say you're done or time is up), plus when you started it and the score you told Profet.
• For an assignment kickoff, the text of the instruction files (at most three) in that assignment's folder.

Syllabus facts

• For each current-term course, the facts Profet read from your syllabus (or the course overview): instructor and contact details, office hours, textbooks and materials, and key policies such as late work, missed exams and academic integrity.
• Each graded item with its weight, date and type (exam, midterm, assignment, quiz and so on), where the value came from (syllabus, gradebook or calendar), and a note when the syllabus and Brightspace disagree. The weekly schedule of topics and readings, when the syllabus has one.
• Any correction you make ("no, the midterm is worth 25%"). Your correction wins over what Profet read.

Your planner

• The deadlines Profet saw in Brightspace, and the events, to-dos and study sessions you added yourself, each with its date, course and status. A deadline Profet noted from an announcement is marked as coming from an announcement.
• The reminders scheduled for them, your timezone, and your reminder preferences (such as quiet hours). Profet also keeps a count of how many reminders it sent you today, so it stays under its daily limit.

Usage records

• For each piece of study material Profet generated: what kind it was, which AI model made it, how many tokens it used and what it cost. We use this to cap each student's daily AI spending. It holds no course content.

Short-lived copies

• Brightspace answers (such as your course list or grades) are cached for between 1 and 60 minutes so repeated questions don't hit Brightspace every time. Each copy is tied to one linked session, so it can't be read once that session is gone.

Server logs record events such as "session linked" or an error. Your chat account ID is masked in them.

4. How we use it

• To answer your questions: Profet uses your session to make read-only Brightspace requests when you ask something that needs them.
• To build study material and mock tests from your own course content, and to reuse study material so the same request isn't generated (and paid for) twice.
• To answer questions about your syllabus (weightings, dates, policies) and to set reminders for the dated items in it.
• To remind you of the deadlines and to-dos in your planner (Section 5).
• To keep your connection working (Section 5) and to tell you once if it stops working.
• To limit how much AI generation each student can use per day.

We don't sell your data or use it for advertising.

5. What Profet does in the background

Profet sends you messages without being asked in only these cases: a reminder for something in your planner, the answer key of a mock test you started when its timer ends, and the one notice below that your connection stopped working. Reminders are sent from your planner alone: sending one never reads Brightspace. You can stop all messages from TAUR at any time by sending STOP.

The keep-alive check

A Brightspace session ends after a few hours without activity. To keep yours working without you signing in again, TAUR makes one small identity check to Brightspace about once an hour while you're using Profet. It asks Brightspace only "is this session still signed in?". It fetches no course data, grades or files. If Brightspace sends back a refreshed cookie, TAUR saves it, encrypted.

• If the check finds your session has ended, Profet sends you one message asking you to refresh it from the extension.
• The checks stop once you haven't used Profet for 14 days. After that your session ends on its own at Brightspace's usual timeout, and Profet doesn't message you about it.

6. Who else handles your data (sub-processors)

• TAUR's own servers store everything in Section 3.
• OpenRouter, which passes requests to AI model providers. Profet's defaults are Google (Gemini 2.5 Flash-Lite), with OpenAI (GPT-4.1 nano) as a fallback. They receive:
• your chat messages and the Brightspace details Profet looked up to answer them;
• the text of the course material (including your syllabus) a set of notes, flashcards, a mock test or an assignment kickoff is built from.

They never receive your session cookies or your password. Their own terms and privacy policies apply to what they receive.

• Your messaging service (whichever one you use to chat with Profet) carries messages between you and Profet, under that service's own privacy policy.

7. How long we keep it

• Your connection, the link, your course material, study material, syllabus facts, mock tests, planner and usage records are kept until you disconnect (Section 8). Nothing in this list is deleted automatically after a set time. Refreshing a course replaces the material stored for it.
• If your Brightspace session stops working, the encrypted cookies stay on file, marked unusable, so Profet can tell you to refresh rather than start over. They are replaced when you refresh, and deleted when you disconnect.
• Short-lived copies expire within 60 minutes.
• Device-side tokens stay until you remove the extension.

8. How to delete everything: disconnect

Send /disconnect, then /disconnect confirm, to Profet in your chat. If you share a TAUR number with other assistants, send disconnect brightspace. You can also email privacy@taur.ai.

Disconnecting deletes, right away:

• your encrypted session and all of its connection timestamps;
• the link between the extension and your chat;
• all course material, notes, study material, lesson corrections, syllabus facts (weights, dates, policies, schedule and your corrections to them), mock tests (questions, answer keys and scores) and usage records stored for you;
• your whole planner: its items, reminders and preferences, and any reminder or mock-test timer still waiting to go off;
• the short-lived cached copies of your Brightspace answers. If our cache can't be reached at that moment, those copies are already unreadable and expire within 60 minutes.

Once it's done, Profet can't reach your Brightspace until you link again.

What disconnecting does not cover:

• Your chat history. The TAUR chat platform keeps your conversation with Profet, and Profet's replies can include details it looked up, such as a grade. That history is covered by TAUR's general privacy policy. To have it deleted, email privacy@taur.ai.
• The extension on your device. Remove it from chrome://extensions to delete its local tokens.

Removing the extension alone doesn't delete anything on our servers, and the session TAUR holds can keep working (see Section 5). To cut off access and delete your data, disconnect.

9. Security

Session cookies are encrypted at rest with authenticated symmetric encryption and are sent only over HTTPS.

10. Children's privacy

Profet is for post-secondary students and is not directed at children under 13, or the minimum age in your jurisdiction.

11. Limited Use disclosure

TAUR's use of information received from the extension follows the Chrome Web Store User Data Policy, including the Limited Use requirements. Data accessed through this extension is used only to provide Profet's single feature described above: answering your Brightspace questions and building study material and mock tests from your own courses, and reminding you of your deadlines. It is not sold, not used for advertising, and not transferred to others except as needed to provide that feature (Section 6), to comply with the law, or as part of a merger with equivalent protections and your consent.

12. Changes to this policy

If this policy changes, the "Last updated" date will change too. For material changes we'll tell you in the product where appropriate.

13. Contact

Questions or data requests: privacy@taur.ai.