Summary: Welcome, here is our policy on privacy. This policy sets out how Canva collects and uses the information that we collect about you when you use the Service. This policy also explains the choices that you can make about the way that we use your information.
We collect the following types of information about you:
(a) Information you provide us directly
We may ask for certain information when you register for a Canva account or correspond with us (such as a username, your first and last names, birthdate, phone number, profession, physical and e-mail address).
We also collect any messages you send us through the Service, and may collect information you provide in User Content you post to the Service (such as text and photos you upload to use in your designs). We use this information to operate, maintain, and provide the features and functionality of the Service to you, to correspond with you, and to address any issues you raise about the Service.
If you don’t provide your personal information to us, you may not be able to access or use our Service or your experience of using our Service may not be as enjoyable.
Summary: We collect info about you that you choose to give us, for example when you register an account, use the Service or otherwise interact with us.
(b) Information we receive from third-party applications
We may receive information about you from third parties. For example, if you access the Service through a third-party connection or log-in, such as Facebook Connect, by “following,” “liking,” adding the Canva application, linking your account to the Canva Service, etc., that third party may pass certain information about your use of its service to Canva. This information could include, but is not limited to, the user ID associated with your account (for example, your Facebook UID), an access token necessary to access that service, any information that you have permitted the third party to share with us, and any information you have made public in connection with that service. You should always review, and if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them to the Service. You may also unlink your third party account from the Service by adjusting your settings on the third party service. If you unlink your third party account, we will no longer receive information collected about you in connection with that service. And if you choose to integrate with a third party application to incorporate elements into your designs, enhance media, supercharge your workflow or share to social media, we could receive data from such apps (as well as disclose data to such apps). If you communicate with us via social media, including Instagram, Facebook or TikTok and choose to share your user generated content with us, we may receive information such as videos you’ve created, your photo, your account name and your comments about Canva.
Summary: When you use our Service, for example, if you log in through a third-party application, we may obtain information about you from such third-party application.
(c) Information we receive from other third parties
We may obtain information about you from third-party sources, such as public sources, social media platforms (like Facebook, Instagram, LinkedIn, Twitter and other platforms) and third-party data providers and information services. Examples of the information we may obtain from such third parties include your company, company size, job title and seniority, industry and other profile information. We may share your email address or other information in order to obtain and combine this information with information that you provide to us or other information that we collect when you use our Service. We do this to better understand your profile and interests so that we can deliver customized offers and other personalized services to you, such as to serve relevant offers to you via email, chatbots, phone or personalized advertising. You can opt out of Canva collecting more data about you from third-party providers to tailor your experience and messages we send you here.
Some of these providers may combine data collected from our Service through cookies, pixels, tags and similar technologies, with email or mailing addresses to which they have access to help us serve relevant offers to you.
If you are not a Canva subscriber, we may obtain your contact details from a social media platform, such as LinkedIn, or a third party data provider, so that we can promote our product offerings and subscriptions to you if we think they would be helpful in your role.
We also may have obtained your details from another Canva user, for example when they have shared a design with you.
We may also receive information about you and your engagement with our advertisements from our ad servers, ad networks and social media platforms. This may include the websites you visited before coming to Canva so that we can determine advertising effectiveness and pay our referral partners.
If you prefer not to have your information used for this purpose, you can opt out at any time by emailing us at firstname.lastname@example.org.
Canva for Education: Please note that references to utilizing third-party information for offers and advertising in this Section 1(c) do not apply to students using Canva for Education. We do not serve advertising to students using Canva for Education.
Summary: We may obtain information about you from third-party sources so that we can understand your interests and personalize our communications and promotions to you. You can opt out at any time.
(d) Information we collect from you automatically
We will directly collect analytics data, or use third-party analytics tools, to help us measure traffic and usage trends for the Service. These tools collect information sent by your browser or mobile device, including the pages you visit and other information (please see the paragraph on log file information below) that assists us in improving the Service. For more information on the analytics cookies we use and how to opt out of third-party collection of this information, please see our Cookies Policy.
Summary: We collect certain info about how you use our Service automatically. For more information on how we collect this information from you, please see our Cookies Policy.
(e) Cookies information and information taken from similar technologies
When you visit the Service, we (and our third-party partners) will send cookies — small text files containing a string of alphanumeric characters — to your computer that uniquely identifies your browser and lets Canva do things like help you log in faster, enhance your navigation through the site, remember your preferences and generally improve the user experience. Cookies also convey information to us about how you use the Service (e.g., the pages you view, the links you click and other actions you take on the Service), and allow us or our business partners to track your usage of the Service over time. They also allow us to measure traffic and usage trends for the Service, deliver personalized advertisements that may be of interest to you and measure their effectiveness, and find potential new users of the Service.
Canva for Education: Please note that references to utilizing cookies for advertising in this Section 1(e) do not apply to students using "Canva for Education" - we do not serve advertising to students using Canva for Education.
(f) Log file information
Log file information is automatically reported by your browser or mobile device each time you access the Service. When you use our Service, our servers automatically record certain log file information. These server logs may include anonymous information such as your web request, browser type, referring / exit pages and URLs, number of clicks and how you interact with links on the Service, domain names, landing pages, pages viewed, and other such information.
Summary: Whenever you load a page from Canva, your browser sends us info about itself and your interactions with our Service. That info gets stored on our servers.
(g) Clear gifs/web beacons information
When you use the Service, we may employ clear GIFs (also known as web beacons) which are used to anonymously track the online usage patterns of our users. In addition, we may also use clear GIFs in HTML-based emails sent to our users to track which emails are opened and which links are clicked by recipients. This information allows for more accurate reporting and improvement of the Service.
Summary: We might use small images in order to check how many people open our emails and visit our site.
(h) Device identifiers
When you access the Service on a device (including smart-phones or tablets), we may access, collect and/or monitor one or more “device identifiers,” such as a universally unique identifier (“UUID”). Device identifiers are small data files that uniquely identify your mobile device. A device identifier may convey information to us about how you use the Service. A device identifier may remain persistently on your device, to help you log in and navigate the Service better. Some features of the Service may not function properly if use of device identifiers is impaired. Device Identifiers used by Canva include the Android Advertising ID and iOS Advertising Identifier.
Summary: Your phone or device sends us information about your usage.
(i) Location data
Canva collects information in order to understand where its users are located for a number of reasons. It helps Canva to localize and personalize content, comply with local laws, undertake aggregated analytics, understand if its users use Canva for domestic, business or educational use, improve advertising efficiency and estimate the tax liability of Canva.
Canva may collect your precise or approximate location:
- from you, when you provide, correct or confirm your location (e.g., when you purchase products from us);
- by inferring your location from your IP address; and
- from our partners or your payment provider.
Canva for Education: Please note that references to advertising in this Section 1(i) do not apply to students using Canva for Education - we do not serve advertising to students using Canva for Education.
Summary: Canva may collect and use your location data for personalization, analytics, advertising and tax purposes.
(j) Content within your account
We receive content that you create within your Canva account and media you upload for use within it, such as designs, images, documents, videos, and metadata about your content.
Summary: Canva collects the content you upload to your account.
We use the information we collect about you for the purposes set out below:
Canva for Education: Please note that references to advertising in this Section 2 do not apply to students using Canva for Education - we do not serve advertising to students using Canva for Education.
Summary: Canva uses information about you for different reasons, including to provide, customize and improve the Service.
(a) How we share your information
Some of the third parties with whom Canva may share your personal information are service providers who assist Canva with functions such as:
Summary: We might share some information about you with our business partners and third-party service providers in order to provide the Service to you or to fulfill Canva’s legitimate business interests.
(b) How you can share your User Content
(i) Public Posts
Any information or content that you voluntarily disclose for posting to the Service, such as public User Content, becomes available to be read, collected and used by the public. When you set your profile to public, or make User Content public, your information becomes publicly available globally, searchable by other users and can be indexed by search engines. If you or Canva remove information that you posted to the Service, copies remain viewable in cached and archived pages of the Service, or if other users have copied or saved that information.
You may share your Canva designs to your social media accounts, including LinkedIn, Facebook, Twitter, Pinterest and Tumblr. You should ensure that you familiarize yourself with the privacy policies of each of these services and any privacy settings that may apply to the designs you choose to share on those accounts.
If you join a Team, then any information or content that you create in that Team or activity you take within the Team may be shared with other Team members and the Team Owner. If requested by the Team Owner, Canva may re-assign ownership of any User Content you post in the Team to the Team Owner or to another Team member. You should ensure that any personal information, confidential information, or User Content that you’d like to keep private is retained in a separate personal account.
(iii) Design Collaboration
If you accept an invitation to view or edit a Canva design:
If you do not wish for this to occur, simply click here and select "Opt out of insights collection" under the Insights section to make your access anonymous.
As the owner or editor of an individual design, you can choose to give other people access to your designs using the following link sharing settings:
1. “Only people added can access”: Only people who have been added to those designs via their email or Canva account will have access to your design. Anyone who hasn’t been added to a design will need to request access from you. This is the most private sharing option, and Canva uses this as the default setting for all designs .
2. “Anyone with the link”: Anyone on the internet who has the link can access your design (and view or edit if you select this). We do not recommend this option for information you wish to keep confidential. Please note that this setting will, by default (except for Canva for Education subscriptions) also allow non-Canva users to anonymously access your design (and view the full names, avatars, cursors and comments of logged in users).
3. “Only your team*”: Only people on your team that have the link can access, view or edit (as you select) your design. This means if you share the link on an email or Slack communication with numerous people in your Team, any of them can access the design without further permission. *Subject to being made available for your team.
Canva collects your links and they may be shared with service providers where required to provide the Services. Once you share a link, it may be on-shared by your recipients.
Summary: Our designs are private by default. When sharing designs, make sure the privacy settings are appropriate. For designs with personal or confidential information, we don’t recommend "anyone with the link" setting.
(c) Sharing in connection with a merger, acquisition or reorganization
Canva may also share, sell or transfer your information to third parties in connection with or contemplation of (including as part of the due diligence process) any merger, acquisition, reorganization, financing, sale of assets, bankruptcy or insolvency event involving Canva or any portion of our assets, services or businesses. Information such as customer names and email addresses, User Content and other user information related to the Service may be among the items shared, sold or otherwise transferred in these types of transactions. You will be notified via email and/or a notice on the Service if such a transaction takes place and be given notice of any material changes to the way we handle your data under this policy.
Summary: If we sell our business, any of the info which we’ve acquired about you may be part of the sale.
(d) Your employer
If you access Canva with an email address issued to you by your employer (either a business, non-profit or educational institution), and your employer has established an account with Canva (or is considering doing so), you acknowledge that Canva may share your name, email, and the existence of your Canva account with your employer. If you do not use Canva in connection with your employment and do not wish for this information to be shared with your employer you can opt out at any time by emailing us at email@example.com.
Summary: We might share limited information with your employer.
(e) Sharing with other third parties
Canva will also share your information with third parties in certain circumstances, such as where you consent to our sharing it with a third party for a particular purpose.
Summary: We may share your data where you have integrated your use of Canva with third-party applications that are not controlled by us.
(f) Sharing aggregate data
We may also aggregate or otherwise strip data of all personally identifying characteristics and may share that aggregated such anonymized data with third parties
Summary: We may share anonymized data with third parties.
(g) Sharing with authorities
Summary: We may share data with authorities in accordance with our Authority Request Policy or where we feel it is necessary.
We partner with third party ad servers, ad networks and social media platforms (like Facebook, Google, LiveRamp, Outbrain, Taboola and Appsflyer) to deliver personalized advertisements (“ads”) on our Service and other sites that may be of interest to you and/or to measure their effectiveness, and/or to identify potential new users of our Service.
Canva may share certain information with our third party advertising partners, such as your email address, location, cookie information and information relating to your use of our Service, and allow partners to perform a match of your information against information from other third party networks or sites to serve ads either on the Service or on third party sites (including, but not limited to Facebook, Google and Samsung televisions) and to measure the effectiveness of these ads. We also share certain information with social media platforms, such as Facebook and Tiktok, to display advertising to potential new users whose demographics and behaviour look like those of our existing users. You can opt out of having your email matched by Liveramp here or by emailing firstname.lastname@example.org.
Canva does not sell or rent the information we collect directly from you or about you from third parties with these third-party ad servers or ad networks for such parties’ own marketing purposes.
Please note that an advertiser may ask Canva to show an ad on the Service to a certain audience of users (e.g., based on demographics or other interests). In that situation, Canva determines the target audience and Canva serves the advertising to that audience and only provides anonymous aggregated data to the advertiser. If you respond to such an ad, the advertiser or ad server may conclude that you fit the description of the audience they are trying to reach.
Canva for Education: Please note that this Section 4 does not apply to students using Canva for Education – we do not serve advertising to students using Canva for Education.
Summary: If we have ads on our site we might use some of your info to show you appropriate ads. We may also use some of that info to send you relevant ads on other sites, like Facebook or Google.
Summary: To run our Service, we’ll have to use our Canva group members and vendors around the world. This means your information might be transferred to the U.S., Australia, Europe, Singapore, Philippines, New Zealand and anywhere else the Service is operated.
Canva cares about the security of your information, and uses appropriate safeguards to preserve the integrity and security of all information collected through the Service. To protect your privacy and security, we take reasonable steps (such as requesting a unique password) to verify your identity before granting you access to your account. You are responsible for maintaining the secrecy of your unique password and account information, and for controlling access to your email communications from Canva, at all times. However, Canva cannot ensure or warrant the security of any information you transmit to Canva or guarantee that information on the Service may not be accessed, disclosed, altered, or destroyed. Your privacy settings may also be affected by changes to the functionality of third party sites and services that you add to the Canva Service, such as social networks. Canva is not responsible for the functionality or security measures of any third party.
For more information about Canva security, please visit Security at Canva.
Summary: We care about the safety of your data and have implemented industry recognized measures to protect it, but unfortunately we can’t guarantee that nothing bad will ever happen to it.
(a) You control your account information and settings
We provide choices about how we process your account information:
Summary: You have control over your account settings, such as your account information and marketing email notifications, but there’s some important stuff we’ll always send you. If you have any questions about reviewing or modifying your account information, you can contact us directly at email@example.com.
(b) Opting out of collection of your information through tracking technologies
Please refer to your mobile device or browser’s technical information for instructions on how to delete and disable cookies, and other tracking/recording tools. Depending on your type of device, it may not be possible to delete or disable tracking mechanisms on your mobile device. Note that disabling cookies and/or other tracking tools prevents Canva or its business partners from tracking your browser’s activities in relation to the Service, and for use in targeted advertising activities by Canva, including via third-party websites. However, doing so may disable many of the features available through the Service. If you have any questions about opting out of the collection of cookies and other tracking/recording tools, please read our Cookies Policy or you can contact us directly at firstname.lastname@example.org.
Summary: If you want us to stop collecting information about you, there may be some settings you can adjust in your browser or device. But Canva might not be personalized for you without it, making it harder to find what you're looking for.
(c) Opting out of enrichment using third-party data
As described above, we may combine information about you with information obtained from third-party sources to better understand your profile and interests so that we can deliver customized offers and other personalized services. You can opt out of Canva collecting more data about you from third-party providers to tailor your experience and messages we send you email@example.com.
Summary: You can opt out of receiving Canva promotions based on information we learn about you from third parties, for example, your job title and employer.
(d) Rights in respect of your Information
The laws of some countries grant particular rights in respect of personal information. Individuals in certain countries, including the European Union, United Kingdom, and Brazil have the right to:
Should you wish to make a request in respect of your personal information please contact us at firstname.lastname@example.org. You also have the right to object to our processing of personal data about you in for marketing purposes and we will stop processing data for that purpose.
In some circumstances Canva will not be able to comply with your request regarding your personal data. If we are unable to remove any of your information, we will explain why. For example, we may not be able to provide a copy of your information where it infringes on the rights of another user. In some cases, you may have shared your information with third parties, such as by publishing a design on a third party’s website. In that case Canva will not be able to delete the information, and you will need to contact that third party directly.
If we are unable to resolve your request, or if you are concerned about a potential violation, you also have the option to report the issue or make a complaint to the data protection authority in your jurisdiction. Where you have provided your consent to certain processing and no longer want us to use your information for that purpose, you may withdraw your consent to this use, although this will not affect the lawfulness of processing based on consent before its withdrawal. Please see paragraph “You control your account information and settings” for more options on how to opt-out of marketing communications.
Summary: You may have specific rights in relation to your information depending on where you live. Canva provides you with a number of controls in Your Account settings and you can access your privacy rights by emailing email@example.com.
Following termination or deactivation of your user account, Canva will retain your profile information and User Content for a commercially reasonable time, and for as long as we have a valid purpose to do so. In particular, Canva will retain your information for the purpose of complying with its legal and audit obligations, and for backup and archival purposes.
Summary: We retain your profile information and user content for the purpose of providing our Service to you and to comply with our legal and regulatory obligations.
In this policy, a child is considered a person under the age of 13 years old (or the minimum legal age in the child’s country to be able to provide lawful consent to the processing of their personal data where the age is higher than 13 years old).
The Service and our content are not directed at children. Children are not permitted to sign up by themselves for the Service.
Other than as part of Canva for Education (set out below), Canva does not knowingly collect or solicit personal information from children. If we learn that we have collected personal information from a child without verification of parental consent where this is required, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child, please contact us at firstname.lastname@example.org.
Canva for Education: Children may use our Canva for Education service under the supervision of their teacher. Canva's collection of student data is authorized by participating teachers and/or educational institutions obtaining parental consent or providing consent on behalf of the parent, if applicable, or as a proxy for the parent in certain circumstances. We will share student data with our third party service providers who have security, privacy, and data retention policies consistent with our policies and solely to the extent necessary for them to perform a business or technology support function for us. This may include data processing, account management or providing us with usage analytics. Canva does not sell student data.
The following third party service providers will process student data for the sole purpose of delivering the Canva for Education service. If a school deletes their Canva for Education account, or requests the deletion of personally identifiable information associated with a student’s account, Canva will direct these services to delete any such information they hold:
Annually, at or around the end of the school year, if a student account has not been logged into by a student for more than 12 months, we will send an email to the email address associated with that account to notify the student that their account will be deleted unless they log into such account. If the student does not log in to their account within 3 months following the receipt of that email, we will delete that account.
Upon termination of a school’s Canva for Education account, we will delete all student accounts associated with that school.
Educational institutions will have direct control of student data at all times. If a school wishes to inspect, review, amend or delete data we have collected from a student, they may submit an authorised request to email@example.com or to any of the contact details provided in section 15 below. Such a request must come from the email address that owns or is the Team Owner of the Canva for Education account. To protect children’s privacy and security, we will take reasonable steps to help verify the school’s identity before granting access to any personal information.
If you are part of a Canva for Education Team, whether this is at a classroom or school level (“School Team”), the educational institution your Team is employed by or part of (“District Team”), may request to add your School Team to its District Team. Such a request must come from the email address that owns or is the Team Owner of the District. To protect children’s privacy and security, we will take reasonable steps to help verify the district's identity and relationship to the School Team before granting access to any personal information. If your Team is added to a District Team, then any information or content that you created in the School Team or activity you have taken within the School may be shared with the Team Owner of the District. If requested by the Team Owner of the District, Canva may re-assign ownership of any User Content you post in the School Team to District Team. You should ensure that any personal information, intellectual property or confidential information that you’d like to maintain ownership over is retained or moved to a separate personal account with an email address not issued by your employer.
Canva and its service providers may communicate directly with students for technical support purposes where requested by the student or their teacher. Canva may also send emails in relation to product changes, privacy changes and other service-related emails to students and teachers.
All designs in a Canva for Education account are private by default so that only people specifically added to the design can access it. A student may make their design public so that anyone with the link can access, view or edit it. But it will only be accessible to anonymous, non-logged in users if a teacher turns on anonymous collaboration (which is switched off by default). This might occur to facilitate collaboration with students that are not registered with Canva or have forgotten their password. This will allow them to view or edit a design.
Summary: We’ve created a safe space for children, who are supervised by teachers, to use Canva. Our main Service at canva.com is not intended for children.
This section of the policy applies to Canva users that are located in the European Economic Area (EEA), Switzerland or United Kingdom (UK). Canva processes your personal data in accordance with European laws and regulations, such as the General Data Protection Regulation (GDPR) and UK General Data Protection Regulation (UK GDPR).
(a) Controller's details
For the purposes of the GDPR and UK GDPR, Canva Pty Ltd is the controller of your personal data. Canva Pty Ltd’s registered address is at 110 Kippax St, Surry Hills, NSW, Australia 2010, and we can be contacted using the details provided in section 15 below. “How to contact us” heading.
In certain circumstances, we process personal data as a processor on behalf of our customer. Canva’s Terms ofUse set out the circumstances where Canva processes personal data as a processor. In these cases, it is the Canva customer that is responsible for the processing of your personal data and Canva’s processing will be governed by the terms of the Data Processing Addendum it has entered with the customer. If you have questions or concerns about how your personal data is handled by one of our customers, you should contact the relevant customer that is using our Service and refer to their separate privacy policies.
(b) Legal bases for processing
If you are located in the EEA, Switzerland or UK, we need a lawful basis to collect, use and disclose your personal data as a controller. Our lawful basis will depend on the information concerned and the context in which it is processed.
Generally, Canva will collect and use your information as follows:
If you consented to our use of your information, you can withdraw that consent at any time. Depending on the situation you can either withdraw your consent by emailing firstname.lastname@example.org, or through your account settings page.
Where we use your information for our legitimate interest, you have the right to object to that use by contacting email@example.com. However, if you do, it may diminish the quality of the Service you receive or prevent you from using the Service.
(c) Cross-border transfers of information
By signing up, you understand and agree that Canva Pty Ltd (an entity in Australia) will receive and process your personal data. We may transfer your personal data to other countries where our affiliates and service providers are located. Please note that some of these countries may have data protection laws that are different from your country (and, in some cases, may not be as protective). For Canva users in the EEA, Switzerland or UK, where we transfer your information to a third-party provider that is not located in Europe, and is not in a country that benefits from an adequacy decision by the European Commission, we will require those third-party providers to enter into an agreement that provides appropriate safeguards for your information, including by using the EU Model Clauses and the UK International Data Transfer Addendum.
Summary: If you are accessing our Service from Europe, Canva Pty Ltd is the controller of your personal data. In some cases, though, we may only be processing your information on behalf of a Team as a processor. We only process your data if we have a lawful basis. We may transfer your information outside of Europe subject to appropriate safeguards.
Californian users of Canva have additional rights afforded to them under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA, effective 1 January 2023).
The CCPA and CPRA give California consumers various rights with respect to the personal information we collect, including the right to (subject to certain limitations):
California users may make a request by contacting us at firstname.lastname@example.org. We will authenticate your request using the email address associated with your Canva account and if necessary, proof of residency.
Categories of personal information collected by Canva
For more details about the personal information Canva has collected in the past year, please see section 1 “Information we collect”. For details on how we use that information, who we share it with, and how long we keep it, please see section 2 “How we use your information”, section 3 “Sharing your information”, and section 8 “How long we keep your information.”
Under Californian law, as a resident, you may opt out of the “selling or sharing” of your personal information, which in this case would also include us providing your employer with information confirming whether or not you use Canva with their email domain. You can opt out by following the instructions on the “Do not sell or share my personal information” banner (once this is made available), or by emailing email@example.com.
Canva for Education: We do not sell or share personal information of students using Canva for Education.
Summary: The CCPA gives Californian users certain rights with respect to their personal information, and from 1 January 2023 the CPRA adds to those consumer rights.
We may update this policy from time to time to reflect our current practice and ensure compliance with applicable laws. When we post changes to this policy, we will revise the “Last Updated” date at the top of this policy. If we make any material changes to the way we collect, use, store and/or share your personal information, we will notify you on our website or by sending an email to the email address associated with your Canva account. We recommend that you check this page from time to time to inform yourself of any changes.
Head of Privacy
Canva Pty Ltd
110 Kippax St
Surry Hills NSW 2010
Our local representative in the EEA is European Data Protection Office (EDPO) with registered address at Regus Block 1, Blanchardstown Corporate Park, Ballycoolen Road, Blanchardstown, Dublin, D15 AKK1, Ireland.
Our local representative in the United Kingdom is European Data Protection Office UK (EDPO UK) with registered address at 8 Northumberland Avenue, London WC2N 5BY, United Kingdom.
The EDPO and EDPO UK can both be contacted at firstname.lastname@example.org. If you are in the EEA, data subject request forms can be accessed at http://edpo.com/gdpr-data-request/. If you are in the UK, data subject request forms can be accessed at https://edpo.com/uk-gdpr-data-request/.
Summary: Your privacy is important to us and we are happy to answer any questions you may have.