Privacy — Glassability

What Glass keeps

Who opened it. When an instructor or administrator opens Glassability from Canvas, Canvas sends their name, Canvas user id, role, and the course or account. Glass logs that launch and uses it to open a session that lasts up to eight hours of use.

Course content. Pages, assignments, discussions, quizzes, files and modules of a connected course, read as the instructor. Glass keeps copies so it can scan, prepare repairs, and show before and after.

A token that acts as the instructor. Stored encrypted on the server, used only for that course, never shown to anyone. Withdrawing it in Canvas ends Glass's access at once.

Rulings and receipts. Each go-ahead or decline an instructor gives, with their name when it came through Canvas, and a log of every change with the content before and after.

What Glass does not keep

Student submissions, grades, or the people in a course. Glass never requests them. The permission it asks for is used for course content only.
Anything from students' browsers. Students never see Glassability; the navigation item is shown to instructor roles only, and a student who reaches its address sees one sentence and nothing is recorded about them.
Cookies. Glass's pages inside Canvas set none. The address of a session is the session.
Student data in any AI model. The models Glass uses to draft repairs are shown course content only. Nothing about a student can reach them, because nothing about a student is here.

Where it lives, and for how long

On servers the provider operates in the United States, reached only over encrypted connections. Course content and receipts stay for as long as the course is connected and for thirty days after, then are deleted; a college may ask for deletion sooner at any time. Launch logs are kept for one year for security. Tokens are deleted the moment they are withdrawn or the course is disconnected.

What the AI sees

Where Glass drafts words, a description of an image, the wording of a link, a heading, it uses language models the provider runs on its own hardware. Course content may be shown to those models to draft the words; student data never is, because Glass never holds it. No content is used to train any model, and none is sent to a third-party model service.

Who to ask

Requests to see, correct or delete what Glass holds for a course or a college, and any question about this page, go to the address on the About page. This page describes the pilot service as of September 2026 and will be updated when the service changes.