Canva stores your data in the United States.
Canva is a global company with staff all around the world. Data is processed by Canva group members in Australia, New Zealand, the Philippines, the United Kingdom, Singapore, Europe and the United States pursuant to our intra-group Data Transfer Agreement.
We have a range of globally respected service providers around the world that help us deliver Canva to you. We require them to enter into Data Processing Agreements with Canva.
These agreements have been designed to comply with privacy laws protecting the data of our users around the world. For our users in Europe and the United Kingdom, they include the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. We also carry out transfer impact assessments on vendors that receive personal data from Europe and the United Kingdom to assess technical and organizational measures, in addition to security due diligence.
Yes. We have a team of specialists across Australia, the United States, United Kingdom, China and the Philippines and a network of advisors across the globe dedicated to ensuring we’re building a safe and trusted platform.
Your designs are set to our highest privacy setting by default. This means only people added to a design can access it, anyone that hasn’t been added will need to request access.
You can update the privacy of your designs so that anyone with the link can access, or use a view-only link, which will allow anyone on the internet with the link or URL to access your design. Because links can be on-forwarded or placed on the internet by recipients, be careful not to include any confidential information in designs with these settings enabled.
For more information on design privacy settings, see our help center article here.
Canva is committed to ensuring the safety of students and educators when using Canva for Education. We are a trusted partner to schools and districts, and strive to meet or exceed student data compliance obligations under applicable law. Canva for Education and our privacy policies are designed to meet our responsibilities under the Family Educational Rights and Privacy Act (FERPA) and the Children’s Online Privacy Protection Act (COPPA) and our compliance has been certified by iKeepSafe.
Canva is a signatory to the United States National Data Privacy Agreement (drafted by the Student Data Privacy Consortium) and has signed this model agreement with a number of States in the United States. For States or districts who have not signed onto the National Data Privacy Agreement, Canva offers a Data Processing Addendum (DPA) that is automatically incorporated into your agreement with us. Canva will also review data privacy and data sharing agreements at the State or district level. To find out how to enter into a National Data Privacy Agreement with Canva or provide an agreement for review, email edu-experts@canva.com. If you are ready to start using Canva, go to: https://www.canva.com/education/
If you are a Canva Team customer, we offer a Data Processing Addendum (DPA) to Canva Teams that is automatically incorporated into your agreement with us.
For our customers in Europe and the United Kingdom, we act on your behalf as your Data Processor in relation to any personal data within your Team. So that you can meet your legal obligations, we have ensured the DPA contains the:
You can contact Canva at any time at privacy@canva.com.
If you are in the United Kingdom, our local representative is:
European Data Protection Office UK (EDPO UK)
8 Northumberland Avenue,
London WC2N 5BY, United Kingdom
If you are in the European Economic Area, our local representative is
European Data Protection Office (EDPO)
Regus Block 1, Blanchardstown Corporate Park,
Ballycoolen Road, Blanchardstown,
Dublin, D15 AKK1, Ireland.
We take our responsibility to safeguard your data seriously. We strive to be transparent about the privacy policies, practices and technologies we’ve put in place to keep your data safe.
To ensure you’re always in control of how we use your data, we’ve introduced two new privacy settings that you’re able to manage. One setting relates to your general usage and activity data, and the other setting relates to your user content. These new settings let you choose the type of data you’re comfortable sharing with us, and how we may (or may not) use it to train AI.
Rest assured, you can always change and manage how we collect and use your data by visiting the Privacy Settings page and updating your preferences at any time.
Canva does not train AI on your user content, unless you enable the setting in your Privacy Settings.
We’re developing our AI features using a combination of:
Our range of AI features are powered by a variety of models and technologies, including open source models developed by our partners. We do not allow our partners to train models on user content without express consent.
General usage and activity data covers information about how people use Canva, but never your user content. General usage and activity data includes things like:
We use this information to help build better products and features. For example, by knowing which fonts are most popular, we can provide better font combinations and suggestions. You can opt out of sharing this data with us at any time in Privacy Settings.
Your content includes things like the text in your designs, media you upload, and prompts you enter that are content-based (we also refer to this as your 'user content'). For example, the photos and videos you submit through Magic Video or the prompts you use for Magic Write are considered content-based prompts. By default, we do not use this information to train our AI products and we don’t allow third parties to do so either. You can choose to opt into sharing this information to help us improve Canva, but this is entirely optional.
We know this data is sensitive, so if you do decide to opt-in to sharing this to help us build better products, we have strict controls and policies in place designed to protect your privacy.
You can manage how we use your data to improve our product by visiting Canva’s Privacy Settings page and updating your preferences. You can change these preferences at any time.
To opt-in to Canva using your user content:
To manage how Canva uses your general usage and activity data:
Canva Creators are in full control of how their content and data is used. Creators can opt-out of Canva’s AI training process by updating their preferences through the Creators Support Form at any time.
By default, we do not allow third parties to train AI on your user content. However, if you opt-in to Canva using your user content to train AI, we may occasionally share your user content with our trusted third party partners who are assisting us in enhancing our AI products. Rest assured, we have vetted these third parties and have strict measures and policies in place to ensure the security and privacy of your data.
The privacy settings for Canva for Education users are disabled. This means Canva for Education users can not opt-in or opt-out of these privacy settings. Canva does not train on the user content of students using Canva for Education, and we do not allow these users to opt in to this privacy setting.
For users who have a Canva for Teams account, you will see that this control in the Privacy Settings page is currently disabled. This setting can only be changed and managed by your Team Administrator. The ability to opt-in is coming soon, and we’ll let you know when it’s ready. This means that we do not use your user content to improve and train AI, and we don’t allow third parties to do so either.
No. If you choose to use a third party app available at canva.com/apps, the terms and conditions and privacy policies of the third party will apply. We recommend familiarizing yourself with how the third party uses your data and user content before using the third party app.
Authority Request Policy (and Transparency Reports)
Data Processing Addendum (for Canva Teams only)
Canva Philippines