We may ask for certain information such as a username, your first and last names, birthdate, phone number, profession and e-mail address when you register for a Canva account, or if you correspond with us. We also collect any messages you send us through the Service, and may collect information you provide in User Content you post to the Service (such as text and photos you upload to use in your designs). We use this information to operate, maintain, and provide the features and functionality of the Service to you, to correspond with you, and to address any issues you raise about the Service.
We may receive information about you from third parties. For example, if you access our websites or Service through a third-party connection or log-in, for example, through Facebook Connect, by “following,” “liking,” adding the Canva application, linking your account to the Canva Service, etc., that third party may pass certain information about your use of its service to Canva. This information could include, but is not limited to, the user ID associated with your account (for example, your Facebook UID), an access token necessary to access that service, any information that you have permitted the third party to share with us, and any information you have made public in connection with that service. You should always review, and if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them to the Canva Service. You may also unlink your third party account from the Service by adjusting your settings on the third party service. If you unlink your third party account, we will no longer receive information collected about you in connection with that service.
We will directly collect analytics data, or use third-party analytics tools, to help us measure traffic and usage trends for the Service. These tools collect information sent by your browser or mobile device, including the pages you visit and other information (in respect of which, please see the paragraph on log file information below) that assists us in improving the Service. For more information on the analytics cookies we use and how to opt out of third parties collecting this information, please see our Cookies Policy.
When you visit the Service, we will send cookies — small text files containing a string of alphanumeric characters — to your computer that uniquely identifies your browser and lets Canva help you log in faster and enhance your navigation through the site. A cookie may also convey information to us about how you use the Service (e.g., the pages you view, the links you click and other actions you take on the Service), and allow us or our business partners to track your usage of the Service over time.
Log file information is automatically reported by your browser or mobile device each time you access the Service. When you use our Service, our servers automatically record certain log file information. These server logs may include anonymous information such as your web request, Internet Protocol (“IP”) address, browser type, referring / exit pages and URLs, number of clicks and how you interact with links on the Service, domain names, landing pages, pages viewed, and other such information.
When you use the Service, we may employ clear GIFs (also known as web beacons) which are used to anonymously track the online usage patterns of our Users. In addition, we may also use clear GIFs in HTML-based emails sent to our users to track which emails are opened and which links are clicked by recipients. This information allows for more accurate reporting and improvement of the Service.
When you access the Service by or through a mobile device (including but not limited to smart-phones or tablets), we may access, collect, monitor and/or remotely store one or more “device identifiers,” such as a universally unique identifier (“UUID”). Device identifiers are small data files or similar data structures stored on or associated with your mobile device, which uniquely identify your mobile device. A device identifier may be data stored in connection with the device hardware, data stored in connection with the device’s operating system or other software, or data sent to the device by Canva. A device identifier may convey information to us about how you browse and use the Service. A device identifier may remain persistently on your device, to help you log in faster and enhance your navigation through the Service. Some features of the Service may not function properly if use or availability of device identifiers is impaired or disabled. Device Identifiers used by Canva include the Android Advertising ID and iOS Advertising Identifier.
Canva collects information in order to understand where its users are located for a number of reasons. It helps Canva to localise and personalise content, undertake aggregated analytics, understand if its users are from homes, businesses or schools, improve advertising efficiency and estimate the tax liability of Canva.
Canva may collect your precise or approximate location:
Summary: Canva may collect and use your location data for personalisation, analytics, advertising and tax purposes.
We use the information we collect about you for the purposes set out above which we have described in more detail below:
For Canva users in the the European Economic Area (EEA) Canva processes your information in accordance with European laws and regulations such as the General Data Protection Regulation (GDPR). The GDPR governs how Canva may process your information, and the rights that EEA users have in relation to it.
This means that Canva will collect and use your information only where:
If you have consented to our use of your information you can withdraw that consent at any time. Depending on the situation you can either withdraw your consent by emailing [email protected], or through your account settings page. Where we are using your information because of a legitimate interest to do so, you have the right to object to that use. However, if you do so it may mean that it is not possible for you to continue using the Services.
We will not rent or sell your information to third parties outside Canva and its group companies (including any parent, subsidiaries and affiliates) without your consent, except as noted in this section:
Some of the third parties that Canva may share your personal information with include providers who assist Canva with functions such as:
Any information or content that you voluntarily disclose for posting to the Service, such as User Content, becomes available to the public, as controlled by any applicable privacy settings. Subject to your profile and privacy settings, any User Content that you make public is searchable by other Users. If you remove information that you posted to the Service, copies remain viewable in cached and archived pages of the Service, or if other Users have copied or saved that information. By default all content you post on Canva is private. When you set your profile to public, your information becomes publicly available.
You may share your Canva designs to your social media accounts, including LinkedIn, Facebook, Twitter, Pinterest and Tumblr. You should ensure that you familiarise yourself with the privacy policies of each of these services and any privacy settings that may apply to the designs you choose to share on those accounts.
Canva will also share your information with third parties in certain circumstances, such as where:
Canva will also share your information with a third party in circumstances where we sell, divest or transfer Canva (including any shares in Canva), or any combination of its products, services, assets and/or businesses to a third party. Information such as customer names and email addresses, User Content and other user information related to the Service may be among the items sold or otherwise transferred in these types of transactions. We will also sell, assign or otherwise transfer such information in the event of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions, reorganisations, liquidations, similar transactions or proceedings involving all or a portion of Canva. You will be notified via email and/or a prominent notice on the Service if such a transaction takes place and be given notice of any material changes to the way we handle your data under this policy.
We may also aggregate or otherwise strip data of all personally identifying characteristics and may share that aggregated, anonymized data with third parties.
Please note that an advertiser may ask Canva to show an ad to a certain audience of Users (e.g., based on demographics or other interests). In that situation, Canva determines the target audience and Canva serves the advertising to that audience and only provides anonymous aggregated data to the advertiser. If you respond to such an ad, the advertiser or ad server may conclude that you fit the description of the audience they are trying to reach.
Canva for Education: Please note that this section 4 does not apply to Canva for Education users – we do not serve advertising to Canva for Education users.
For Users in the EEA, where we transfer your information to a third party provider that is not located in the EEA, and is not subject to an adequacy decision by the EU Commission, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses.
Canva cares about the security of your information, and uses appropriate safeguards to preserve the integrity and security of all information collected through the Service. To protect your privacy and security, we take reasonable steps (such as requesting a unique password) to verify your identity before granting you access to your account. You are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to your email communications from Canva, at all times. However, Canva cannot ensure or warrant the security of any information you transmit to Canva or guarantee that information on the Service may not be accessed, disclosed, altered, or destroyed. Your privacy settings may also be affected by changes to the functionality of third party sites and services that you add to the Canva Service, such as social networks. Canva is not responsible for the functionality or security measures of any third party.
For more information about Canva security, please visit Security at Canva.
In the event that any information under our control is compromised as a result of a breach of security, Canva will take reasonable steps to investigate the situation and where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.
You may update your account information by logging into your account and changing your profile settings. You can also stop receiving promotional email communications from us by clicking on the “unsubscribe link” provided in such communications. We make every effort to promptly process all unsubscribe requests.
You may not opt out of Service-related communications (e.g., account verification, purchase and billing confirmations and reminders, changes/updates to features of the Service, technical and security notices) although you can object to us providing these emails by emailing [email protected]
If you have any questions about reviewing or modifying your account information, you can contact us directly at [email protected]
Please refer to your mobile device or browser’s technical information for instructions on how to delete and disable cookies, and other tracking/recording tools. Depending on your type of device, it may not be possible to delete or disable tracking mechanisms on your mobile device. Note that disabling cookies and/or other tracking tools prevents Canva or its business partners from tracking your browser’s activities in relation to the Service, and for use in targeted advertising activities by Canva, including via third parties’ websites. However, doing so may disable many of the features available through the Service. If you have any questions about opting out of the collection of cookies and other tracking/recording tools, please read our Cookies Policy or you can contact us directly at [email protected]
The laws of some countries grant particular rights in respect of personal information. In certain circumstances, users in the EEA have the right to:
Should you wish to make a request in respect of your personal information please contact us at [email protected] You also have the right to object to our processing of personal data about you in order to send you marketing and we will stop processing data for that purpose.
In some circumstances Canva will not be able to comply with a request that you make in respect of your personal data. For example, we may not be able to provide a copy of your information where it infringes on the rights of another User. We may also be required to retain certain information that you ask us to delete for various reasons, such as where there is a legal requirement to do so. In some cases, you may have shared your information with third parties, such as by publishing a design on a third party’s website. In that case Canva will not be able to delete the information, and you will need to contact that third party directly.
If we are unable to resolve your request, or if you are concerned about a potential violation, you also have the option to report the issue or make a complaint to the data protection authority in your jurisdiction. Where you have provided your consent to certain processing and no longer want us to use your information for that purpose, you may withdraw your consent to this use, although this will not affect the lawfulness of processing based on consent before its withdrawal. Please see paragraph “You control your account information and settings” for more options on how to opt-out of marketing communications.
Following termination or deactivation of your User account, Canva will retain your profile information and User Content for a commercially reasonable time, and for as long as we have a valid purpose to do so. In particular, Canva will retain your information for the purpose of complying with its legal and audit obligations, and for backup and archival purposes.
Canva does not knowingly collect or solicit personal information from children under the age of 13 and the Service and its content are not directed at children under the age of 13. In the event that we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 13, please contact us at [email protected]
Canva for Education: Children under the age of 13 may use our Canva for Education service under the supervision of their teacher. We will only collect student data where such collection is authorised by participating educational institutions who have obtained parental consent. We will share student data with our third party service providers solely to the extent necessary for them to perform a business or technology support function for us. This may include data processing, account management or the provision of usage analytics.
The following third party service providers will process student data for the sole purpose of delivering the Canva for Education service. If a school deletes their Canva for Education account, or requests the deletion of personally identifiable information associated with a student’s account, Canva will direct these services to delete any such information they hold:
If a student account is inactive for more than 12 months, we will send an email to the email address associated with that account to confirm if the student wishes to continue using the service. If the student does not respond within 3 months of receipt of that email and there has been no activity on the account, we will delete their account.
Upon termination of a school’s Canva for Education account, we will delete all student accounts associated with that school.
Educational institutions will have direct control of student data at all times. If a school wishes to inspect, review, amend or delete data we have collected from a student, they may submit an authorised request to [email protected] or by any of the contact details provided in section 16 below. Such a request must come from the email address that owns the Canva for Education account. To protect children’s privacy and security, we will take reasonable steps to help verify the school’s identity before granting access to any personal information.
We may update this policy from time to time to reflect our current practice and ensure compliance with applicable laws. When we post changes to this policy, we will revise the “Last Updated” date at the top of this policy. If we make any material changes to the way we collect, use, store and/or share your personal information, we will notify you by prominently posting notice of the changes on our website and/or sending an email to the email address associated with your Canva account. We recommend that you check this page from time to time to inform yourself of any changes.
Children under 13 using Canva for Education: If we make any material changes to the way we collect, use, store and/or share personal information about children under 13 using Canva for Education, we will seek updated parental consent for each through the school that owns the Canva for Education classroom.