Security
How we protect your data
The short version. Details are in the Privacy Policy.
Encrypted everywhere
Every connection to CoursePro uses HTTPS, and browsers are told never to connect without it.
Your Canvas key is encrypted with AES-256. The encryption key is stored apart from your data, and only our server can decrypt your Canvas key.
Your password is stored hashed by our sign-in provider, Supabase. We can't read it.
Read-only Canvas access
CoursePro only reads from Canvas. It never submits, edits or deletes anything in your classes.
You can remove your Canvas key in Settings at any time. Deleting your account deletes it too.
Your data stays yours
Database rules let each account see only its own data.
We don't sell data, show ads or use tracking pixels.
Payments go through Paddle. We never see your card number.
Built-in browser protections
A strict security policy blocks scripts that aren't ours, and no other site can show CoursePro inside its own page.
Found a problem?
Email support@canvaspro.app with “Security” in the subject. We reply quickly and fix confirmed issues first.