• Privacy

Privacy

Your privacy is incredibly important to us. One of our core values is to ‘be a good human’, and this applies to everything that we do, including the way we handle your information. We value that you trust us with your information, and we appreciate the important responsibility we have to keep this safe.

How we respect your privacy

  • You’re in Control - Users can delete or download their data in their Account Settings and make other privacy requests (such as to access their data) at privacy@canva.com. We comply with laws requiring consent for marketing and tracking and provide the ability to opt-out.
  • Strict Internal policies - On how we handle, secure and retain user data and respond to incidents. We also maintain up-to-date records of our data processing activities and data flows.
  • Safeguards on Overseas Transfers - Whenever Canva transfers your data to a place other than where you live (especially if it has less strict privacy laws), we ensure adequate technical, organizational and contractual safeguards are in place.
  • Data and Privacy Transparency - We are open about how we use your data in our privacy policy. We also provide regular Transparency Reports on requests we receive from government authorities to access user account data.
  • Data Protection Impact Assessments - We practice privacy by design, with new products and projects presenting privacy risk assessed for any impact.

Frequently asked questions - Privacy

Canva stores your data in the United States.

Canva is a global company with staff all around the world. Data is processed by Canva group members in Australia, New Zealand, the Philippines, the United Kingdom, Singapore, Europe and the United States pursuant to our intra-group Data Transfer Agreement.

We have a range of globally respected service providers around the world that help us deliver Canva to you. We require them to enter into Data Processing Agreements with Canva.

These agreements have been designed to comply with privacy laws protecting the data of our users around the world. For our users in Europe and the United Kingdom, they include the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. We also carry out transfer impact assessments on vendors that receive personal data from Europe and the United Kingdom to assess technical and organizational measures, in addition to security due diligence.

Yes. We have a team of specialists across Australia, the United States, United Kingdom, China and the Philippines and a network of advisors across the globe dedicated to ensuring we’re building a safe and trusted platform.

Your designs are set to our highest privacy setting by default. This means only people added to a design can access it, anyone that hasn’t been added will need to request access.

You can update the privacy of your designs so that anyone with the link can access, or use a view-only link, which will allow anyone on the internet with the link or URL to access your design. Because links can be on-forwarded or placed on the internet by recipients, be careful not to include any confidential information in designs with these settings enabled.

For more information on design privacy settings, see our help center article here.

Canva is committed to ensuring the safety of students and educators when using Canva for Education. We are a trusted partner to schools and districts, and strive to meet or exceed student data compliance obligations under applicable law. Canva for Education and our privacy policies are designed to meet our responsibilities under the Family Educational Rights and Privacy Act (FERPA) and the Children’s Online Privacy Protection Act (COPPA) and our compliance has been certified by iKeepSafe.

Canva is a signatory to the United States National Data Privacy Agreement (drafted by the Student Data Privacy Consortium) and has signed this model agreement with a number of States in the United States. For States or districts who have not signed onto the National Data Privacy Agreement, Canva offers a Data Processing Addendum (DPA) that is automatically incorporated into your agreement with us. Canva will also review data privacy and data sharing agreements at the State or district level. To find out how to enter into a National Data Privacy Agreement with Canva or provide an agreement for review, email edu-experts@canva.com. If you are ready to start using Canva, go to: https://www.canva.com/education/

If you are a Canva Team customer, we offer a Data Processing Addendum (DPA) to Canva Teams that is automatically incorporated into your agreement with us.

For our customers in Europe and the United Kingdom, we act on your behalf as your Data Processor in relation to any personal data within your Team. So that you can meet your legal obligations, we have ensured the DPA contains the:

You can contact Canva at any time at privacy@canva.com.

If you are in the United Kingdom, our local representative is:

European Data Protection Office UK (EDPO UK)

8 Northumberland Avenue,

London WC2N 5BY, United Kingdom

info@edpo.com.

If you are in the European Economic Area, our local representative is

European Data Protection Office (EDPO)

Regus Block 1, Blanchardstown Corporate Park,

Ballycoolen Road, Blanchardstown,

Dublin, D15 AKK1, Ireland.

info@edpo.com.

Privacy Policies

Compliance certifications

FERPA Compliant

COPPA Compliant