VU Assist — Privacy Policy

Effective date: October 18, 2026

VU Assist ("the extension", "we", "us") is a Chrome extension for Virtual University of Pakistan (VU) students that shows upcoming LMS deadlines and can send deadline email reminders. This policy explains what user data the extension collects, how it is used, handled, stored and shared, how long it is kept, and the choices you have. VU Assist is not affiliated with or endorsed by Virtual University of Pakistan.

1. Data we collect

Category	What exactly	When / how
Install information	A randomly generated install ID, the extension version, and your browser name.	Automatically when the extension is installed or the browser starts.
Personally identifiable information	Your VU student ID (e.g. BC2104…), your name, current semester and enrolled course codes.	Read from the VU LMS pages (vulms.vu.edu.pk) you visit while logged in.
Deadline information	Titles, course codes, types (quiz / assignment / GDB / fee challan), due dates and LMS links of your upcoming deadlines.	Read from the VU LMS activity calendar. Stored locally in your browser; uploaded to our server only if you turn on email reminders.
Email address	The email address you type in for deadline reminders or payment verification.	Only when you enter it yourself.
Payment information	Easypaisa transaction ID, amount paid, promo code (if any) and your email.	Only when you submit the "I've Paid" verification form. We never collect card numbers, wallet PINs or bank credentials — payment happens entirely inside the Easypaisa app.
Usage data	Counts and timestamps of actions in the extension (for example, opening the Deadlines panel).	Automatically while you use the extension.

2. Data we do NOT collect

Your VU password or any login credentials.
Your grades, marks, results or other academic records.
The content of your assignments, quizzes, GDB posts or messages.
Your browsing history outside vulms.vu.edu.pk.
Location, contacts, financial account numbers or health information.

3. How we use the data

Provide the core feature: showing your upcoming deadlines on the VU LMS and on the toolbar badge.
Send email reminders: your email and deadline dates are used to email you on a deadline's due day.
Manage your plan: your student ID and payment details are used to verify payment and activate your Pro plan for the semester.
Improve the product: install and usage data is used in aggregate to count active users and see which features are useful.

We do not use your data for advertising, to determine creditworthiness, or for any purpose unrelated to the extension's single purpose of helping you track VU deadlines.

4. How we handle and store the data

Settings and the cached deadline list are stored locally in your browser using Chrome's storage API.
Data sent to our server is transmitted only over encrypted HTTPS connections.
Server-side data is stored in a private Supabase (PostgreSQL) database. The extension can only call a few narrowly scoped functions and cannot read other users' records; database access is restricted by row-level security and is available only to the developer through an authenticated account.

5. How we share the data

We do not sell, rent or trade your data, and we do not share it with advertisers or data brokers. Data is shared only with the following service providers, solely to operate the extension:

Supabase (database hosting) — stores the data described above.
Brevo (email delivery) — receives your email address and the list of deadlines due that day, only to deliver your reminder email.

We may also disclose data if required by law or to protect the security of the service.

6. Data retention

Deadline rows are replaced each time your deadlines sync, so only your current upcoming deadlines are kept.
Student, email and usage records are kept while you use the extension and for up to 12 months after your last activity, then deleted.
Payment verification records are kept for up to 24 months for accounting and dispute purposes.

7. Your choices and rights

Stop email reminders: clear your email address in the extension popup.
Stop all collection: uninstall the extension; nothing further is sent.
Access or delete your data: email us (below) with your VU student ID and we will send you a copy or delete your records within 30 days.

8. Chrome Web Store Limited Use

The use of information received by VU Assist complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

9. Children

VU Assist is intended for enrolled university students and is not directed at children under 13.

10. Changes to this policy

If we change this policy, we will update the effective date above and, for material changes, notify users in the extension.

11. Contact

Questions or data requests: devcodexa@gmail.com