Privacy Policy

1. Information We Collect

We collect information that you provide directly, information collected automatically when you use the Services, and information from third parties.

Information You Provide to Us

When you create an account or use the Services, we may collect:

Account Information

• Name
• Email address
• Username
• Password

Profile or Workspace Information

• Organization name
• Team members
• Workspace settings

Content and Inputs

• Text prompts
• Uploaded images, videos, or reference assets
• Moodboards or creative libraries
• Generated outputs

Communications

• Messages sent to customer support
• Feedback and survey responses

Payment Information

If you subscribe to a paid plan, payment information may be collected and processed by third party payment processors. Open Canva does not store full credit card numbers.

2. Information Collected Automatically

When you use the Services, we may automatically collect certain information, including:

Usage Data

• Features used
• Prompts submitted
• Generated outputs
• Time spent on the platform
• Interaction with tools and models

Device Information

• IP address
• Browser type
• Operating system
• Device identifiers

Analytics Data

• Pages visited
• Session duration
• Referral sources
• Performance metrics

We may collect this information using cookies, analytics tools, and similar technologies.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Services
• Process prompts and generate AI outputs
• Enable creative workflows and asset management
• Improve product features and performance
• Analyze usage patterns and platform analytics
• Provide customer support
• Process subscription payments
• Prevent fraud, abuse, or unauthorized activity
• Comply with legal obligations

4. AI Processing and Generated Content

Open Canva enables users to generate images, videos, and other creative assets using artificial intelligence models.

To provide these features:

• Prompts and uploaded assets may be processed by AI models
• Generated outputs may be temporarily stored to enable downloads, editing, or collaboration

Some AI models integrated into the platform may be provided by third party services.

Open Canva does not claim ownership of user generated content.

5. Sharing of Information

We do not sell your personal information.

We may share information with trusted service providers, including:

Infrastructure Providers

• Cloud hosting services
• Storage providers
• Content delivery networks

AI Model Providers

• Third party AI platforms used to generate images or video

Payment Processors

• Subscription billing and payment management

Analytics Providers

• Product analytics and performance monitoring

These providers only receive the information necessary to perform services on our behalf.

We may also disclose information:

• To comply with legal obligations
• To protect our rights or safety
• In connection with a business transfer such as a merger or acquisition

6. Data Retention

We retain personal information for as long as necessary to:

• Provide the Services
• Maintain user accounts
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

Users may request deletion of their accounts and associated data.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain user sessions
• Remember preferences
• Analyze platform performance
• Improve user experience

On our marketing site (opencanva.co) we surface a consent banner on first visit. Analytics and marketing trackers do not fire until you opt in. Necessary cookies (auth, theme, video player) cannot be disabled.

For the full per-cookie list and an in-page control to change your preferences, see our Cookie Policy.

PostHog reverse-proxy disclosure: we proxy PostHog through our own /px/* path to reduce ad-blocker breakage. PostHog cookies therefore appear first-party in your browser, but PostHog Inc. (United States) is the actual data processor.

7a. Third-Party Processors

The Services rely on the following processors. Each receives only the data necessary to perform their function. Where a processor is based outside your jurisdiction, transfers are governed by the legal mechanisms described in section 9.

7b. Your California Privacy Rights (CPRA)

California residents have specific rights under the California Privacy Rights Act (CPRA). We process the following categories of personal information:

• Identifiers (name, email, IP address)
• Internet or other network activity (usage logs, prompts, generated outputs)
• Commercial information (subscription tier, billing history)
• Inferences drawn from the above (segment, ICP fit for B2B contact)

Sharing disclosure:Apollo.io and Instantly receive identifying signals about business visitors to opencanva.co for sales prospecting. Under CPRA, this constitutes “sharing” for cross-context behavioral advertising purposes. You can opt out at any time using the Cookie Settings link in our footer.

Global Privacy Control: we honor the Global Privacy Control (GPC) browser signal. If your browser sends Sec-GPC: 1 or exposes navigator.globalPrivacyControl === true, the marketing tracker category is pre-disabled on first visit and Apollo / Instantly will not fire unless you explicitly enable them.

Verifiable consumer requests: California residents may request access to, deletion of, or correction of personal information by emailing founders@opencanva.co from the address associated with the account. We respond within 45 days.

8. Data Security

We implement reasonable administrative, technical, and organizational measures designed to protect your information.

However, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security.

9. International Data Transfers

Open Canva may process or store information in the United States or other jurisdictions where our service providers operate.

By using the Services, you acknowledge that your information may be transferred across international borders.

10. Your Privacy Rights

Depending on your location, you may have rights regarding your personal data, including:

• Accessing your information
• Correcting inaccurate information
• Requesting deletion of personal data
• Restricting certain data processing
• Requesting data portability

Requests may be submitted by contacting us at the email listed below.

11. Children's Privacy

The Services are not intended for individuals under the age of 18.

We do not knowingly collect personal information from children.

If we learn that personal information from a child has been collected, we will take steps to delete such information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will update the “Last Updated” date and may provide additional notice through the Services.

Continued use of the Services after changes constitutes acceptance of the updated policy.

13. Contact Information

If you have questions about this Privacy Policy, please contact:

Open Canva, Inc.

Email: founders@opencanva.co