Privacy policy
Your course plan belongs to your own account. This policy explains the information we process, why it is needed, when external services are used, and how you can manage data or make a request.
Browse policy contents
- Scope and responsibility
- Information we process
- How information is used
- AI requests and provider selection
- Google sign-in
- Service providers and disclosure
- Storage, transfers, and retention
- Cookies and local browser data
- Security and account separation
- Your choices and privacy requests
- Young users
- Policy updates
- Contact and provider policies
Scope and responsibility
This Privacy Policy describes how BU Graduation Planner (the “Planner”, “we”, “us”) handles information when you visit this website, create an account, save an academic plan, or use its AI assistant. The website maintainer is responsible for the Planner’s own data practices and can be contacted at kennethzhang0@outlook.com.
The Planner is an independently maintained planning tool. It is not Boston University’s official registration system, does not use BU single sign-on, and does not request your BU Portal password or Duo approval. Public university course information is used as a reference. A plan or AI answer does not constitute an official university decision or confirmation of graduation eligibility. This policy covers the Planner; third-party websites and services also have their own policies.
Information we process
Account information includes a username, an internal account identifier, an account creation date, and a password hash for password-based accounts. We do not store your password as readable text. If you choose Google sign-in, we receive and store the verified email address and stable Google account identifier needed to recognize that account. We do not receive your Google password.
Planning information is information you enter or choose: degree and minor, semesters, selected courses and sections, course status, grades or GPA if supplied, external credits, equivalencies, approval status, notes, graduation target, career interests, and course, Hub, and workload preferences. You should enter only information relevant to planning and avoid unnecessary sensitive information about yourself or other people.
Technical information may include an IP address used for request limiting, browser and request information processed by the hosting platform, timestamps, request paths, response status, diagnostic events, and model/token usage counters. If you email us, we process your email address, message, and information needed to respond. Public course and professor-review data comes from public sources and is distinguished from your private academic records.
How information is used
We use account information to authenticate you, maintain sessions, keep accounts separate, and protect saved plans. Planning information is used to show your plan, calculate modeled degree and Hub progress, check prerequisites and published schedules, propose changes, and tailor recommendations to your stated interests. Preferences you submit during setup are saved for later planning and assistant requests.
Technical information supports reliability, abuse prevention, request limiting, error diagnosis, and monitoring AI usage and cost. We use correspondence to handle support and privacy requests. The Planner does not add advertising trackers or sell personal information. Where a legal basis is required, processing depends on the requested service, necessary security and operational interests, applicable legal obligations, or consent where required. This policy itself is not a substitute for consent that applicable law separately requires.
AI requests and provider selection
Using the AI assistant sends your current question, recent conversation, saved planning preferences, and relevant live-plan and course information to the selected AI provider so it can answer in the context of your degree, missing Hub requirements, selected courses, and workload. This can include planning information you supplied, such as grades or external-credit details. You can use the ordinary planning tools without sending an AI question.
Cloudflare Workers AI is the first provider. DeepSeek is used as a backup when the free allowance is unavailable and you have connected your own DeepSeek API key. A new account does not inherit the website owner’s private key. Provider/model selection can vary with the question’s complexity and current allowance. Connecting DeepSeek uses your API balance; payment information is handled by DeepSeek rather than by this Planner.
AI providers handle submitted information under their applicable service terms and privacy policies. Their retention and model-improvement practices may differ; this website does not make a blanket promise that every provider retains nothing or never uses inputs for model improvement. Review the provider policies before submitting information you consider sensitive. Model output can be incorrect. Proposed course changes remain subject to your review and confirmation; the assistant does not make admissions or official academic eligibility decisions.
Google sign-in
Google sign-in is available only after this website’s real Google client configuration is enabled. It requests basic identity scopes (openid, email, and profile). It does not request access to Gmail, Google Drive, your Google Calendar, or offline access. The Planner uses the verified account identifier and email to authenticate the Google account; it does not store Google access or refresh tokens.
A Google identity is not automatically attached to a password account simply because email text matches. Google consent and account-security controls are managed by Google. Password-based registration and login remain independent of Google. If Google sign-in is not available, use a username and password.
Storage, transfers, and retention
Account records, saved plans, and preferences are stored using Cloudflare infrastructure. Providers can process information in countries different from where you live. DeepSeek’s published privacy policy states that it processes and stores personal data in the People’s Republic of China. Do not assume this website or its AI providers process all information only in your home country. Where applicable law requires transfer safeguards, those requirements remain relevant to the provider relationship and the particular processing.
Saved account and plan records currently have no automatic inactivity-deletion deadline. They remain until you change them or a verified deletion request is handled, subject to justified retention for security or legal obligations. Unsaved-plan backups remain in your browser until removed or browser storage is cleared. Current chat messages are held in the page’s temporary browser state and are not saved by this application as a durable server chat archive; the recent conversation is still transmitted when you send another AI request.
Our AI usage logs contain provider/model and actual token/cache counters, rather than the question text or API key. Hosting-platform request and diagnostic logs follow the platform’s current settings and retention limits. Provider-side copies and service logs follow the provider’s own policies; clearing this browser does not delete them. We do not promise instant removal from every provider or backup system. A deletion request can be made using the contact address below.
Security and account separation
We use password hashing, signed expiring sessions, account-specific storage and browser-backup identifiers, origin checks, request limits, and owner-only access for shared catalog changes. Stored DeepSeek API keys are encrypted on the server and are not returned to the browser as plain text. Google sign-in uses server-side verification, a one-use state check, PKCE, and a nonce.
These measures reduce risk but cannot guarantee absolute security. Use a unique password and protect the account and devices you use. Do not send passwords, API keys, identification documents, or unrelated sensitive records in support email or assistant messages. The Planner does not obtain authority to change your official BU records or enroll you in a course.
Your choices and privacy requests
You can edit your course plan, degree settings, external-credit information, and planning preferences through the available tools; change the interface language; sign out; and choose not to use the AI assistant or Google sign-in. Password accounts can change their login details in account settings. Google accounts manage their Google credentials through Google.
You may contact kennethzhang0@outlook.com to request information about your account data, a copy, correction, or deletion, or to raise a privacy concern. Depending on applicable law, you may also have rights to restrict or object to certain processing, receive portable data, withdraw consent where consent is the basis, or complain to an appropriate supervisory authority. These rights can be subject to legal conditions and exceptions.
Please identify the account and the request without sending its password or API key. We may ask for reasonable verification before disclosing or deleting private information, and will handle the request according to applicable requirements. Account deletion is currently handled by request to the maintainer; there is no automated self-service deletion button. Removing a course or clearing your browser is not the same as deleting the server account. Withdrawing an optional choice does not undo processing already lawfully performed.
Young users
The Planner is intended for university course planning and is not designed as a service directed to children. It does not currently verify every user’s age. If a parent or guardian believes that a child has submitted information that should not have been collected, contact kennethzhang0@outlook.com so the matter can be investigated and appropriate action taken. Users who require a parent or guardian’s permission under applicable rules should obtain it before submitting information.
Policy updates
We may update this policy when the website’s features, providers, data practices, or applicable requirements change. The effective and last-updated dates will be revised on this page. Where a material change requires additional notice or consent, it will be handled as required rather than treating publication alone as sufficient. The current English and Simplified Chinese versions are intended to describe the same practices; contact us if a translation appears unclear or inconsistent.
Contact and provider policies
The contact for this website’s privacy and data requests is kennethzhang0@outlook.com. Include enough information to locate the account and explain the request, but do not include secrets.
You can also review the independent policies of Cloudflare, Google, and DeepSeek. These links are provided for transparency and do not incorporate a claim that this Planner has adopted every practice described by those companies.