Privacy Policy

Last updated: April 11, 2026

This Privacy Policy explains how canvs.io collects, uses, stores, and shares information when you use our website, application, and related features (the "Service"). It is intended to clearly disclose the categories of data we handle, why we handle them, who may receive them, how long we keep them, and what choices you have.

1. Scope

This Policy applies to canvs.io pages, app.canvs.io, waitlist and contact flows, payment or invite-request pages, and other Service features made available by canvs.io.

2. Information We Collect

Depending on how you use the Service, we may collect the following categories of information:

• Information you provide directly to us, including your name, email address, contact details, account information, support requests, waitlist submissions, payment or billing-related details, and any other information you choose to provide.
• Content you create, upload, submit, or store through the Service, including boards, files, messages, prompts, instructions, comments, shared content, and related outputs or workspace data.
• Referral, invitation, and shared-link data, including identifiers and related metadata used to create or track invitations or referrals.
• Usage and diagnostics data, including timestamps, page visits, feature interactions, event logs, error reports, and performance information.
• Technical data, including IP address, browser type, device type, operating system, language settings, referrer data, and similar connection information.
• Cookies, local browser storage, and similar technologies used for preferences, analytics, security, and Service functionality.

3. How We Use Information

We use collected information to operate and improve the Service, including to:

• provide, maintain, and improve the Service;
• create, store, display, organize, and retrieve content and other Service data;
• provide account, waitlist, referral, onboarding, payment, and support functionality;
• respond to your requests, communications, and customer support inquiries;
• monitor usage, analyze performance, troubleshoot issues, and improve reliability;
• detect, investigate, and prevent fraud, abuse, security incidents, and misuse; and
• comply with legal obligations and enforce our terms.

4. Information Sharing

We do not sell personal data. We may share information only in the following circumstances:

• With infrastructure and hosting providers that help us operate the Service.
• With vendors and service providers that help us operate, maintain, support, analyze, secure, or improve the Service.
• To comply with legal obligations, legal process, or enforceable governmental requests.
• To protect rights, safety, and the Service, including investigating fraud, abuse, or security issues.
• At your direction if you choose to follow external links, share content, or use integrations you initiate.

5. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including to operate the Service, maintain access to generated content, resolve disputes, and meet legal or security obligations.

• Account information, submitted content, and Service data may be retained while needed to provide continued access, functionality, or continuity of the Service.
• Contact, waitlist, and support records may be retained for follow-up, service administration, and audit purposes.
• Usage logs, analytics data, and technical diagnostics are generally retained for a limited period and may be kept longer when needed for abuse prevention, security, or legal compliance.
• We may delete or anonymize data earlier where it is no longer required.

6. Your Rights and Choices

Subject to applicable law, you may have the right to request access, correction, deletion, or a copy of your data, and to object to or restrict certain processing.

• You can stop using the Service at any time.
• You can ask us to delete your content or other personal data associated with your use of the Service.
• You may have the right to request portability of your data, withdraw consent where processing is based on consent, and lodge a complaint with an applicable supervisory authority.
• You can control cookies and similar technologies through your browser settings.
• You can clear local browser storage, including stored language preferences.
• You can opt out of marketing emails by using the unsubscribe link in those emails.

To submit a privacy request, contact [email protected]

7. Submitted Content and Service Features

When you use features that accept text, files, messages, instructions, or other content, we process that information to provide the requested functionality and related Service outputs.

This means the Service may process both content you submit and content generated, organized, or returned through the Service. We use that data only to operate, maintain, secure, and improve the Service as described in this Policy.

If you access the Service through third-party platforms or intermediaries, those parties may separately process information under their own terms and privacy policies. We do not control those third-party practices.

8. Third-Party Services and External Links

The Service may contain links to external websites, payment pages, embedded forms, or third-party integrations. If you choose to use those features, your information may be processed by the relevant third party in accordance with its own terms and privacy policy.

This Privacy Policy does not apply to third-party services that we do not own or control.

9. Cookies and Similar Technologies

We and our service providers may use cookies, pixels, tags, browser storage, and similar tools to remember preferences, measure traffic, understand feature usage, and improve performance. For example, our website stores language preferences in browser storage on some pages and uses analytics and event-tracking tools on certain forms and interactions.

10. Data Security

We use reasonable technical and organizational measures designed to protect information against unauthorized access, loss, misuse, or alteration. However, no system can be guaranteed to be completely secure.

11. Children's Privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from children under 13.

12. International Transfers

Your information may be processed in countries other than your own, including where our providers or service providers operate. By using the Service, you understand that data may be transferred to and processed in those locations.

Where required by applicable law, we will use appropriate safeguards for cross-border transfers of personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the date above.

14. Contact Us

If you have any questions about this Privacy Policy or want to exercise your privacy rights, please contact us at [email protected]