[Archive] Privacy Policy

See previous versions of this and other policies in our Policy Archives.(opens in a new tab or window)

The highlighted text is aimed to give a plain English summary of our Privacy Policy. Please ensure you read the main text , as the plain English summary is just a summary and doesn’t capture all of the terms.

What does this policy cover

Welcome to Canva, the online and mobile service of Canva Pty Ltd (“Canva,” “we,” or “us”). Our Privacy Policy explains how we collect, use, disclose, and protect information that applies to our Service, and your choices about the collection and use of your information. Capitalized terms that are not defined in this Privacy Policy have the meaning given to them in our Terms of Use(opens in a new tab or window). If you do not want your information processed in accordance with this Privacy Policy in general or any part of it, you should not use our online or mobile services. This policy applies to all users of the Service, including, but not limited to users of our Developer Portal.

Welcome, here is our policy on privacy. Our privacy policy, if you will.

Summary: This policy sets out how Canva collects and uses the information that we collect about you when you use the Canva services. This policy also explains the choices that you can make about the way that we use your information.

1. Information we collect and its use

We collect the following types of information about you:

(a) Information you provide us directly

We may ask for certain information when you register for a Canva account or correspond with us (such as a username, your first and last names, birthdate, phone number, profession and e-mail address).

If you join our forum located at http://community.canva.com where our users discuss Canva’s services and products (Community), we receive additional information (such as your location, company, title, website and social media links, personal description) which will be associated with your posts and activity in the Community.

We also collect any messages you send us through the Service, and may collect information you provide in User Content you post to the Service (such as text and photos you upload to use in your designs or posts in our Community). We use this information to operate, maintain, and provide the features and functionality of the Service to you, to correspond with you, and to address any issues you raise about the Service.

If you don’t provide your personal information to us, you may not be able to access or use our Service or Community or your experience of using our Service or Community may not be as enjoyable.

Summary: If you give us info about you, we will keep it and use it to provide our Service and make our service better.

(b) Information we receive from third parties

We may receive information about you from third parties. For example, if you access our websites or Service through a third-party connection or log-in, for example, through Facebook Connect, by “following,” “liking,” adding the Canva application, linking your account to the Canva Service, etc., that third party may pass certain information about your use of its service to Canva. This information could include, but is not limited to, the user ID associated with your account (for example, your Facebook UID), an access token necessary to access that service, any information that you have permitted the third party to share with us, and any information you have made public in connection with that service. You should always review, and if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them to the Canva Service. You may also unlink your third party account from the Service by adjusting your settings on the third party service. If you unlink your third party account, we will no longer receive information collected about you in connection with that service. We may also receive information about you and your engagement with our advertisements from our ad servers, ad networks and social media platforms. And if you choose to integrate with a third party application to incorporate elements into your designs, enhance media, supercharge your workflow or share to social media, we could receive data from such apps (as well as disclose to such apps as set out below).

Summary: When you use our Service, third parties might give us some info about you, especially if you are signed into a third party account while using our Service. When you choose to link your social media account with our Service such as by logging in through Facebook or Gmail, your social media account provider (such as Google and Facebook) will give us some info about you such as your Facebook user identification number.

(c) Information we collect from you automatically

We will directly collect analytics data, or use third-party analytics tools, to help us measure traffic and usage trends for the Service. These tools collect information sent by your browser or mobile device, including the pages you visit and other information (in respect of which, please see the paragraph on log file information below) that assists us in improving the Service. For more information on the analytics cookies we use and how to opt out of third parties collecting this information, please see our Cookies Policy(opens in a new tab or window).

Summary: To help us improve our service we keep info about how you use our service.

(d) Cookies information and information taken from similar technologies

When you visit the Service, we (and our third-party partners) will send cookies — small text files containing a string of alphanumeric characters — to your computer that uniquely identifies your browser and lets Canva do things like help you log in faster, enhance your navigation through the site, remembering your preferences and generally improve the user experience. Cookies also convey information to us about how you use the Service (e.g., the pages you view, the links you click and other actions you take on the Service), and allow us or our business partners to track your usage of the Service over time. They also allow us to deliver personalized advertisements that may be of interest to you and measure their effectiveness.

You can control or reset your cookies and similar technologies through your web browser, which will allow you to customise your cookie preferences and to refuse all cookies or to indicate when a cookie is being sent. However, some features of the Service may not function properly if the ability to accept cookies is disabled. For more information on how we use cookies and other technologies and how you can control them, please read our Cookies Policy(opens in a new tab or window).

Summary: We will send cookies (not the yummy kind) to your web browser to help you use Canva and for other business purposes. For more information on how we use cookies and how you can control them, please see our Cookies Policy.

(e) Log file information

Log file information is automatically reported by your browser or mobile device each time you access the Service. When you use our Service, our servers automatically record certain log file information. These server logs may include anonymous information such as your web request, Internet Protocol (“IP”) address, browser type, referring / exit pages and URLs, number of clicks and how you interact with links on the Service, domain names, landing pages, pages viewed, and other such information.

Summary: Whenever you load a page from Canva, your browser sends us info about itself and your interactions with our Service. That info gets stored on our servers.

(f) Clear gifs/web beacons information

When you use the Service, we may employ clear GIFs (also known as web beacons) which are used to anonymously track the online usage patterns of our Users. In addition, we may also use clear GIFs in HTML-based emails sent to our users to track which emails are opened and which links are clicked by recipients. This information allows for more accurate reporting and improvement of the Service.

Summary: We might do clever stuff with images in order to check how many people open our emails and visit our site.

(g) Device identifiers

When you access the Service by or through a mobile device (including but not limited to smart-phones or tablets), we may access, collect, monitor and/or remotely store one or more “device identifiers,” such as a universally unique identifier (“UUID”). Device identifiers are small data files or similar data structures stored on or associated with your mobile device, which uniquely identify your mobile device. A device identifier may be data stored in connection with the device hardware, data stored in connection with the device’s operating system or other software, or data sent to the device by Canva. A device identifier may convey information to us about how you browse and use the Service. A device identifier may remain persistently on your device, to help you log in faster and enhance your navigation through the Service. Some features of the Service may not function properly if use or availability of device identifiers is impaired or disabled. Device Identifiers used by Canva include the Android Advertising ID and iOS Advertising Identifier.

Summary: In order to track how different people are using our Service we might store a unique ID on your mobile that helps us do that.

(h) Location data

Canva collects information in order to understand where its users are located for a number of reasons. It helps Canva to localise and personalise content, undertake aggregated analytics, understand if its users are from homes, businesses or schools, improve advertising efficiency and estimate the tax liability of Canva.

Canva may collect your precise or approximate location:

- from you, when you provide, correct or confirm your location ( e.g. when you purchase products from us);

- by inferring your location from your IP address; and

- from our partners or your payment provider.

Summary: Canva may collect and use your location data for personalisation, analytics, advertising and tax purposes.

2. How we use your information

We use the information we collect about you for the purposes set out above which we have described in more detail below:

  • Providing you with the Service: We use the information that you provide us to provide the Service to you. This includes allowing you to log in to Canva, operating and maintaining the Service, giving you access to your designs and billing you for transactions that you make via the Service. We also use information we collect about you automatically to remember information about you so that you will not have to re-enter it during your visit or the next time you visit the site.
  • Allowing you to participate in our Community of Canva Users so that you can view and share information in a forum about the Services and connect with other Users.
  • For data analytics: We use information about you to help us improve the Canva Service and our users’ experience, including by monitoring aggregate metrics such as total number of visitors, traffic, and demographic patterns.
  • For data labelling and machine learning to improve our services: We use content and media in user’s private accounts (such as photos, videos and audio) to train our models to apply machine learning to new unseen media and improve our service for users. This could include: components (ie background, eyes);labelling raw individual data (ie “man with dog”);detecting content prohibited by our terms of use for moderation and security purposes (i.e. pornographic or copyright protected material);translating audio soundtracks. This improves our service to users by for example, allowing our photo editing tools to rectify red eye and blemishes, recolour or erase components and remove backgrounds from photos and video.
  • Customising the Service for you: We use information you provide us and information about you to make sure that your use of the Service is customised to your needs. For example, if you tell us your profession to recommend designs that are likely to be relevant to you.
  • To communicate with you about the Service: We use your contact information to get in touch with you and to send communications about critical elements of the Service. For example, we may send you emails about technical issues, security alerts or administrative matters.
  • To promote and drive engagement with the Canva Service: We use your contact information to get in touch with you about features and offers relating to the Service that we think you would be interested in. We also use information we collect about you to make sure that you get the most relevant offers and promotions based on your use of the Service, and your preferences. You can opt-out of getting these communications as described below.
  • For advertising purposes: We use information about you, including cookies information and other information we (and our third-party partners) collect from you automatically, to serve and measure the effectiveness of advertising on the Service and third-party sites and platforms.
  • Customer happiness: We use information about you, information that you provide to our customer happiness team, and information about your interactions with the Service to resolve technical issues you experience with the Service, and to ensure that we can repair and improve the Service for all Canva users.
  • For security measures: We use information about you to monitor activity that we think is suspicious or potentially fraudulent, and to identify violations or this Privacy Policy or our Terms of Service.
  • For matters that you have specifically consent to: From time to time Canva may seek your consent to use your information for a particular purpose. Where you consent to our doing so, we will use it for that purpose. Where you no longer want us to use your information for that purpose you may withdraw your consent to this use.
  • For matters that we are required to use your information by law: Canva will use or disclose your information where we reasonably believe that such action is necessary to (a) comply with the law and the reasonable requests of law enforcement; (b) to enforce our Terms of Use or to protect the security or integrity of our Service; and/or (c) to exercise or protect the rights, property, or personal safety of Canva, our Users or others.

Summary: These are the reasons that Canva needs to use information about you.

3. Sharing your information

(a) Who we share your information with

We share your information with third-party service providers for the purpose of providing the Service to you that is useful and safe and to facilitate Canva’s legitimate interests. Those service providers will only be provided with access to your information as is reasonably necessary for the purpose that Canva has engaged the service provider, and we will require that such third parties comply with this Privacy Policy, appropriate data processing terms and any applicable laws.

Some of the third parties that Canva may share your personal information with include providers who assist Canva with functions such as:

  • Billing;
  • Customer support and customer management;
  • Email services;
  • Hosting and storage;
  • Analytics;
  • Data labelling and machine learning;
  • Security;
  • Advertising and marketing services;
  • Delivery of physical products; and
  • Other service providers.

Summary: We might share some information on you with our business partners and third party service providers, but only as necessary to provide the service to you or to fulfil Canva’s legitimate business interests.

(b) Who you can choose to share your User Content with

Any information or content that you voluntarily disclose for posting to the Service, such as public User Content (including Community Content as defined below), becomes available to be read, collected and used by the public. When you set your profile to public, join our Community or make User Content public, your information becomes publicly available globally, searchable by other Users and can be indexed by search engines. If you or Canva remove information that you posted to the Service, copies remain viewable in cached and archived pages of the Service, or if other Users have copied or saved that information. In the Community, your posts and other information will remain accessible (but with your profile information removed where possible – this may have been indexed by search engines or copied by other Users or included in the body of posts) to ensure the continued functioning of the Community.

You may share your Canva designs to your social media accounts, including LinkedIn, Facebook, Twitter, Pinterest and Tumblr. You should ensure that you familiarise yourself with the privacy policies of each of these services and any privacy settings that may apply to the designs you choose to share on those accounts.

If you join a Team, then any information or content that you create in that Team or activity you take within the Team may be shared with other Team members and the Team Owner. If requested by the Team Owner, Canva may re-assign ownership of any User Content you post in the Team to the Team Owner or to another Team member. You should ensure that any personal information or confidential information that you’d like to maintain ownership over is retained in a separate account.

If you accept an invitation to view or edit a Canva design:

  • your name and avatar will be visible to anyone else in the design at the same time as you, whether or not they are logged in to Canva or anonymous;
  • your name and time of login will become available to any other person that also has edit access to that design, whether or not they are within your Team.

If you do not wish for this to occur, simply click here(opens in a new tab or window) to make your access anonymous.

Summary: Make sure the privacy settings you have selected for your designs or other information public (including on the Community) are appropriate. For designs with personal or confidential information, we don’t recommend allowing access for anyone on the internet with the link.

(c) Sharing with other third parties

Canva will also share your information with third parties in certain circumstances, such as where:

  • we are required to do so as a result of a court order, subpoena or other legal requirement;
  • we believe that it is necessary to protect you or Canva or other people from harm, such as where we consider that there is a need to investigate or warn of potentially fraudulent, malicious or criminal activity or remove malicious content. For example, this may involve sharing details of an account or website engaged in phishing or a breach of our Terms of Use with take down services, intelligence sharing services, law enforcement bodies or on public websites;
  • you have consented to our sharing it with a third party for a particular purpose;

You or your account administrator may also choose to work with third party applications (listed here(opens in a new tab or window)) from within Canva so that you can incorporate elements into your designs (e.g. YouTube and Google Drive), enhance your media (e.g. with dutone and shadows) or supercharge your workflow (e.g. with LinkedIn or Slack). For example, you may install a third-party document sharing app in order to store, share and edit content through our Service. Integrating with third party applications could involve importing data from that third party to Canva and/or exporting data from Canva to that third party. If this requires connecting your Canva account to your account on the third party application, you will be asked for permission. These third-party apps are not controlled by us, and this privacy policy does not cover how third-party apps use your information. You should review the terms and conditions of any third party apps before connecting them to the Service. If you object to information about you being shared with these third parties, do not install the app.

Summary: These ones speak for themselves.

Canva will also share your information with a third party in circumstances where we sell, divest or transfer Canva (including any shares in Canva), or any combination of its products, services, assets and/or businesses to a third party. Information such as customer names and email addresses, User Content and other user information related to the Service may be among the items sold or otherwise transferred in these types of transactions. We will also sell, assign or otherwise transfer such information in the event of corporate divestitures, mergers, acquisitions, bankruptcies, dissolutions, reorganisations, liquidations, similar transactions or proceedings involving all or a portion of Canva. You will be notified via email and/or a prominent notice on the Service if such a transaction takes place and be given notice of any material changes to the way we handle your data under this policy.

We may also aggregate or otherwise strip data of all personally identifying characteristics and may share that aggregated, anonymized data with third parties.

Summary: If we sell our business, any of the info which we’ve acquired about you may be part of the sale.

4. Ads on Canva

We partner with third party ad servers, ad networks and social media platforms (like Facebook, Google, LiveRamp and Appsflyer) to deliver personalized advertisements (“ads”) on our Services and other sites that may be of interest to you and/or to measure their effectiveness.

Canva may share certain information with our third party advertising partners, such as your email address, location, cookie information and information relating to your use of our Services, and allow partners to perform a match of your information against information from other third party networks or sites to serve ads either on the Service or on third party sites (including, but not limited to Facebook, Google and Samsung televisions) and to measure the effectiveness of these ads. You can opt out of having your email matched by Liveramp here or by emailing privacy@canva.com.

In addition, these third-party ad servers or ad networks may use technology to send, directly to your browser or mobile device, these personalized ads and ad links, and will automatically receive your IP address when they do so. They may also use other technologies (such as cookies, JavaScript, device identifiers, location data, and clear gifs, see above) to compile information about your browser’s or device’s visits and usage patterns on the Service, and to measure the effectiveness of their ads and to personalize the advertising content. Please see our Cookies Policy for more information about how we and our third party partners use cookies and other technologies to deliver ads to you.

Canva does not sell, rent, or share the information we collect directly from you or about you from third parties with these third-party ad servers or ad networks for such parties’ own marketing purposes.

Please note that an advertiser may ask Canva to show an ad to a certain audience of Users (e.g., based on demographics or other interests). In that situation, Canva determines the target audience and Canva serves the advertising to that audience and only provides anonymous aggregated data to the advertiser. If you respond to such an ad, the advertiser or ad server may conclude that you fit the description of the audience they are trying to reach.

The Canva Privacy Policy does not apply to, and we cannot control the activities of, third-party advertisers. Please consult the respective privacy policies of such advertisers or contact such advertisers for more information.

Canva for Education: Please note that this section 4 does not apply to Canva for Education users – we do not serve advertising to Canva for Education users.

Summary: If we have to have ads on our site *ewww* we might use some of your info to show you appropriate ads. We may also use some of that info to send you relevant ads on other sites, like Facebook or Google.

5. How we transfer, store and protect your data

Your information collected through the Service will be stored and processed in the United States, Australia and any other country in which Canva or its subsidiaries, affiliates or service providers maintain facilities. Canva transfers information that we collect about you, including personal information, to affiliated entities, and to other third parties across borders and from your country or jurisdiction to other countries or jurisdictions around the world. As a result, we may transfer information, including personal information, to a country and jurisdiction that does not have the same data protection laws as your jurisdiction. However, we always take steps to ensure that your information remains protected wherever it is stored and processed in accordance with applicable laws. Where required under applicable laws, you consent to the transfer of information to the U.S. or any other country in which Canva or its parent, subsidiaries, affiliates or service providers maintain facilities and the use and disclosure of information about you as described in this Privacy Policy.

Summary: To run our service we’ll have to use computers all over the world. This means your information might be transferred to the US, Australia, Europe and anywhere else the service is operated.

6. Keeping your information safe

Canva cares about the security of your information, and uses appropriate safeguards to preserve the integrity and security of all information collected through the Service. To protect your privacy and security, we take reasonable steps (such as requesting a unique password) to verify your identity before granting you access to your account. You are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to your email communications from Canva, at all times. However, Canva cannot ensure or warrant the security of any information you transmit to Canva or guarantee that information on the Service may not be accessed, disclosed, altered, or destroyed. Your privacy settings may also be affected by changes to the functionality of third party sites and services that you add to the Canva Service, such as social networks. Canva is not responsible for the functionality or security measures of any third party.

For more information about Canva security, please visit Security at Canva(opens in a new tab or window).

Summary: We care about the safety of your data and, have implemented industry recognized measures to protect it, but unfortunately we can’t guarantee that nothing bad will ever happen to it. (A troop of rabid baboons springs to mind).

7. Compromise of information

In the event that any information under our control is compromised as a result of a breach of security, Canva will take reasonable steps to investigate the situation and where appropriate, notify those individuals whose information may have been compromised and take other steps, in accordance with any applicable laws and regulations.

Summary: If there is a breach of our security we will investigate it and let any affected users know.

8. Your choices about your information

(a) You control your account information and settings

You may update your account information by logging into your account and changing your profile settings. You can also stop receiving promotional email communications from us by clicking on the “unsubscribe link” provided in such communications. We make every effort to promptly process all unsubscribe requests.

You may not opt out of Service-related communications (e.g., account verification, purchase and billing confirmations and reminders, changes/updates to features of the Service, technical and security notices) although you can object to us providing these emails by emailing privacy@canva.com.

If you have any questions about reviewing or modifying your account information, you can contact us directly at privacy@canva.com.

Summary: You have control over your account settings, such as your account information and marketing email notifications, but there’s some important stuff we’ll always send you. If you have any questions about reviewing or modifying your account information, you can contact us directly at privacy@canva.com.

(b) Opting out of collection of your information

Please refer to your mobile device or browser’s technical information for instructions on how to delete and disable cookies, and other tracking/recording tools. Depending on your type of device, it may not be possible to delete or disable tracking mechanisms on your mobile device. Note that disabling cookies and/or other tracking tools prevents Canva or its business partners from tracking your browser’s activities in relation to the Service, and for use in targeted advertising activities by Canva, including via third parties’ websites. However, doing so may disable many of the features available through the Service. If you have any questions about opting out of the collection of cookies and other tracking/recording tools, please read our Cookies Policy(opens in a new tab or window) or you can contact us directly at privacy@canva.com.

If you want us to stop collecting information about you, there may be some settings you can adjust in your browser or device. But Canva might be pretty boring without it.

(c) Rights in respect of your Information

The laws of some countries grant particular rights in respect of personal information. In certain circumstances, users in the EEA have the right to:

  • Request a copy of your information;
  • Request that we correct inaccuracies relating to your information;
  • Request that your information be deleted or that we restrict access to it;
  • Request a structured electronic version of your information; and
  • Object to our use of your information.

Should you wish to make a request in respect of your personal information please contact us at privacy@canva.com. You also have the right to object to our processing of personal data about you in order to send you marketing and we will stop processing data for that purpose.

In some circumstances Canva will not be able to comply with a request that you make in respect of your personal data. If we are unable to remove any of your information, we will let you know why. For example, we may not be able to provide a copy of your information where it infringes on the rights of another User. For our Community, we will remove your profile information where possible , but this may have been indexed by search engines or copied by other Users or included in the body of posts. We may also be required to retain certain information that you ask us to delete for various reasons, such as where there is a legal requirement to do so. In some cases, you may have shared your information with third parties, such as by publishing a design on a third party’s website. In that case Canva will not be able to delete the information, and you will need to contact that third party directly.

If we are unable to resolve your request, or if you are concerned about a potential violation, you also have the option to report the issue or make a complaint to the data protection authority in your jurisdiction. Where you have provided your consent to certain processing and no longer want us to use your information for that purpose, you may withdraw your consent to this use, although this will not affect the lawfulness of processing based on consent before its withdrawal. Please see paragraph “You control your account information and settings” for more options on how to opt-out of marketing communications.

Summary: You may have specific rights in relation to your information depending on where you live. In particular, if you are located in the EEA, in certain circumstances you have a right to request a copy of your information, object to your use of information and a right to request that your information be deleted or that we restrict access to it.

9. How long we keep your information

Following termination or deactivation of your User account, Canva will retain your profile information and User Content for a commercially reasonable time, and for as long as we have a valid purpose to do so. In particular, Canva will retain your information for the purpose of complying with its legal and audit obligations, and for backup and archival purposes.

Summary: We retain your profile information and user content for the purpose of providing our Service to you and to comply with our legal and regulatory obligations.

10. Canva for Education

In this policy, a child is considered a person under the age of 13 years old (or the minimum legal age in the child’s country to be able to consent themselves to the processing of their personal data if this age is higher than 13 years old).

The Service, Community and their content are not directed at children. Children are not permitted to sign up by themselves for Canva Services or the Community.

Other than as part of Canva for Education (set out below), Canva does not knowingly collect or solicit personal information from children. In the event that we learn that we have collected personal information from a child without verification of parental consent where this is required, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child , please contact us at privacy@canva.com.

Canva for Education: Children may use our Canva for Education(opens in a new tab or window) service under the supervision of their teacher. We will only collect student data where such collection is authorised by participating educational institutions who have obtained parental consent. We will share student data with our third party service providers solely to the extent necessary for them to perform a business or technology support function for us. This may include data processing, account management or the provision of usage analytics.

The following third party service providers will process student data for the sole purpose of delivering the Canva for Education service. If a school deletes their Canva for Education account, or requests the deletion of personally identifiable information associated with a student’s account, Canva will direct these services to delete any such information they hold:

Provider (Purpose)

  • Amazon Web Services (data storage)
  • Amplitude (Analysis of aggregated user behaviour data)
  • Appbot (user support)
  • Canva Solutions, Inc. (user support)
  • Concentrix (user support)
  • Jira (user support)
  • Loggly (logging)
  • Looker (Analysis of aggregated user behaviour data)
  • Mailchimp (service emails)
  • Mode (Analysis of aggregated user behaviour data)
  • MongoDB (Atlas) (data storage)
  • Sentry (error monitoring)
  • Snowflake (data storage)
  • Zendesk (user support)

If a student account is inactive for more than 12 months, we will send an email to the email address associated with that account to confirm if the student wishes to continue using the service. If the student does not respond within 3 months of receipt of that email and there has been no activity on the account, we will delete their account.

Upon termination of a school’s Canva for Education account, we will delete all student accounts associated with that school.

Educational institutions will have direct control of student data at all times. If a school wishes to inspect, review, amend or delete data we have collected from a student, they may submit an authorised request to privacy@canva.com or by any of the contact details provided in section 16 below. Such a request must come from the email address that owns the Canva for Education account. To protect children’s privacy and security, we will take reasonable steps to help verify the school’s identity before granting access to any personal information.

(US only): Canva for Education has been certified compliant with the Children’s Online Privacy Protection Act (COPPA) and the Family Educational Rights and Privacy Act (FERPA) by iKeepSafe(opens in a new tab or window). Teachers and parents may contact us on +1 855 228 9195 (toll free) with inquiries concerning our Privacy Policy and use of children’s information.

Summary: Like many other things in life, parents, guardians and schools have control over how children use Canva. We don’t want children to upload personal information and we’ll delete that information if we learn about it (unless we know it has been authorised by a parent, guardian or school).

11. Links to other websites and services

We are not responsible for the practices employed by websites or services linked to or from the Service, including the information or content contained therein. Please remember that when you use a link to go from the Service to another website, our Privacy Policy does not apply to third-party websites or services. Your browsing and interaction on any third-party website or service, including those that have a link or advertisement on our website, are subject to that third party’s own rules and policies. In addition, you acknowledge that we are not responsible for and we do not exercise control over any third-parties that you authorize to access your User Content. If you are using a third-party website or service (like Facebook) and you allow such a third-party access to your User Content you do so at your own risk. This Privacy Policy does not apply to information we collect by other means (including offline) or from other sources other than through the Service.

Summary: The Internet. It’s made of links. If we post a link to a third party website on Canva, we can’t control what happens on the other end. The same goes if you let another site use your data on Canva; the use of your information will be governed by the Privacy Policy of the third party.

12. Additional information for users in Europe

This section of the policy applies to Canva users that are located in the European Economic Area (EEA), Switzerland or United Kingdom (UK). Canva processes your personal data in accordance with European laws and regulations, such as the General Data Protection Regulation (GDPR) and UK General Data Protection Regulation (UK GDPR).

(a) Controller's details

For the purposes of the GDPR and UK GDPR, Canva Pty Ltd is the controller of your personal data. Canva Pty Ltd’s registered address is at 110 Kippax St, Surry Hills, NSW, Australia 2010, and we can be contacted using the details provided under the “How to contact us” heading.

Where we process personal data in connection with a Canva Site created by a free user, we act as a joint controller with the relevant user. Our Joint Controller Addendum(opens in a new tab or window) sets out the respective compliance responsibilities of Canva and the user in respect of such processing under the GDPR and UK GDPR.

In certain circumstances, we process personal data as a processor on behalf of our customer (for example, where Canva processes personal data on behalf of a Canva Pro or Enterprise customer). Canva’s Terms of(opens in a new tab or window)Use(opens in a new tab or window) set out the circumstances where Canva processes personal data as a processor. In these cases, it is the Canva customer that is responsible for the processing of your personal data and Canva’s processing will be governed by the terms of the Data Processing Addendum(opens in a new tab or window) it has entered with the customer. If you have questions or concerns about how your personal data is handled by one of our customers, you should contact the relevant customer that is using our Service and refer to their separate privacy policies.

(b) Legal bases for processing

If you are located in the EEA, Switzerland or UK, we need a lawful basis to collect, use and disclose your personal data as a controller. Our lawful basis will depend on the information concerned and the context in which it is processed.

Generally, Canva will collect and use your information only where:

  • We need it to provide you the Service and fulfil our obligations to you under our Terms of Service. This includes providing you with access to the information that you create in your designs.
  • It is in our legitimate interests to do so. Our legitimate interests include providing a useful Service, obtaining payment for our Service (if applicable), sending you relevant marketing messages and advertising and tracking its effectiveness and enhancing our Service via research and development, data analytics, data labelling and machine learning. We do not rely on this lawful basis where our legitimate interest is overridden by your interest in protecting your data.
  • You consent to us or have a reasonable expectation of us using your information in a certain way – for example, to hear about new features or offers.
  • It is necessary for compliance with our legal obligations.

If you have consented to our use of your information you can withdraw that consent at any time. Depending on the situation you can either withdraw your consent by emailing privacy@canva.com, or through your account settings page. Where we are using your information because of a legitimate interest to do so, you have the right to object to that use. However, if you do so it may mean that it is not possible for you to continue using the Service.

(c) Cross-border transfers of information

By signing up, you’ve consented to Canva Pty Ltd (an entity in Australia) receiving your personal data. For Canva users in the EEA, Switzerland UK, where we transfer your information to a third party provider that is not located in the Europe, and is not in a country that benefits from an adequacy decision by the European Commission, we will require those third party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses.

Summary: GDPR, you may have heard of it? It’s kind of a big deal. If you are accessing our Service from Europe, Canva Pty Ltd is the controller of your personal data. In some cases, though, we may only be processing your information on behalf of our customer as a processor. We only process your data if we have a lawful basis. We transfer your information outside of Europe subject to appropriate safeguards.

13. California users’ Privacy Rights

Californian users of Canva have additional rights afforded to them under the California Consumer Privacy Act (CCPA).

Categories of personal information collected by Canva

For more details about the personal information Canva has collected in the past year, please see section 1 “Information we collect and its use”. For details on how we use that information, and who we share it with, please see section 2 “How we use your information” and section 3 “Sharing your information”.

Canva does not “sell” (as defined in the CCPA) the personal information of Canva users.

Making a request in relation to your personal information

The CCPA gives California consumers various rights with respect to the personal information we collect, including the right to (subject to certain limitations):

  • Request to access the personal information Canva has about you; and
  • Request that Canva delete all of your personal information.

California users may make a request by contacting us at privacy@canva.com. We will authenticate your request using the email address associated with your Canva account and if necessary, proof of residency.

Summary: The CCPA creates new consumer rights for Californian users as of 1 January 2020.

14. Changes to this Policy

We may update this policy from time to time to reflect our current practice and ensure compliance with applicable laws. When we post changes to this policy, we will revise the “Last Updated” date at the top of this policy. If we make any material changes to the way we collect, use, store and/or share your personal information, we will notify you with a notice on our website and/by sending an email to the email address associated with your Canva account. We recommend that you check this page from time to time to inform yourself of any changes.

Children using Canva for Education: If we make any material changes to the way we collect, use, store and/or share personal information about children using Canva for Education, we will seek updated parental consent for each through the school that owns the Canva for Education classroom.

Summary: We won’t make any major changes to our Privacy Policy without giving you the heads up – but it’s still a good idea to visit this page every now and then.

15. How to contact us

If you have any questions about this Privacy Policy or the Service, or wish to make a complaint please contact us at:

Email: privacy@canva.com.


Head of Privacy

Canva Pty Ltd

110 Kippax St
Surry Hills NSW Australia 2010

Our local representative in the EEA is European Data Protection Office (EDPO) with registered address at Regus Block 1, Blanchardstown Corporate Park, Ballycoolen Road, Blanchardstown, Dublin, D15 AKK1, Ireland.

Our local representative in the United Kingdom is European Data Protection Office UK (EDPO UK) with registered address at 8 Northumberland Avenue, London WC2N 5BY, United Kingdom.

The EDPO and EDPO UK can both be contacted at info@edpo.com. If you are in the EEA, data subject request forms can be accessed at https://edpo.com/gdpr-data-request/. If you are in the UK, data subject request forms can be accessed at https://edpo.com/uk-gdpr-data-request/.

Summary: Your privacy is important to us and we are happy to answer any questions you may have.

Other policies

[Archive] AI Product Terms

[Archive] Magic Studio Terms

Cookies Policy

Canva's Content License Agreement

Terms of Use

[Archive] Privacy Policy

[Archive] Free Media License Agreement

[Archive] Multi-use License Agreement

[Archive] One-time Use License Agreement

[Archive] Multi-Seat Extended License Agreement

[Archive] Privacy Policy

[Archive] Items for Resale Extended License Agreement

[Archive] Unlimited Reproductions Extended License Agreement

[Archive] Contributor Agreement

[Archive] Privacy Policy

[Archive] Terms of Use

[Archive] Privacy Policy

[Archive] Contributor Agreement

[Archive] Extended License Agreement

[Archive] Terms of Use

[Archive] Terms of Use

[Archive] One Design Use License Agreement

[Archive] Free Images License Agreement

[Archive] One Design Use License Agreement

[Archive] Free Media License Agreement

[Archive] Terms of Use

Terms of Use

[Archive] Privacy Policy

[Archive] Terms of Use

[Archive] Free Media License Agreement

[Archive] One Design Use License Agreement

[Archive] Photos Unlimited Terms of Use

[Archive] Terms of Use

Data Processing Addendum

Privacy Policy

[Archive] Privacy Policy

Terms of Use

Data Processing Addendum

Joint Controller Addendum

[Archive] Canva for Enterprise - Master Services Agreement

Contributor Agreement

[Archive] Canva Subscription Service Agreement

Privacy Policy

[Archive] Terms of Use

[Archive] Free Media License Agreement

[Archive] One Design Use License Agreement

[Archive] Terms of Use

[Archive] Canva Community Celebration Contest Terms & Conditions

Privacy Policy

Canva Subscription Service Agreement

Text to Image Terms

Privacy Policy

[Archive] Terms of Use

Privacy Policy

Terms of Use

Privacy Policy

AI Product Terms

Privacy Policy

Terms of Use

[Archive] Privacy Policy

[Archive] Popular Music License Agreement