Privacy

Canva stores your data in the United States.

Canva is a global company with staff all around the world. Data is processed by Canva group members in Australia, New Zealand, the Philippines, the United Kingdom, Singapore, Europe and the United States pursuant to our intra-group Data Transfer Agreement.

We have a range of globally respected service providers around the world that help us deliver Canva to you. We require them to enter into Data Processing Agreements with Canva.

These agreements have been designed to comply with privacy laws protecting the data of our users around the world. For our users in Europe and the United Kingdom, they include the EU Standard Contractual Clauses⁠(opens in a new tab or window) and the UK International Data Transfer Addendum⁠(opens in a new tab or window). We also carry out transfer impact assessments on vendors that receive personal data from Europe and the United Kingdom to assess technical and organizational measures, in addition to security due diligence.

Yes. We have a team of specialists across Australia, the United States, United Kingdom, China and the Philippines and a network of advisors across the globe dedicated to ensuring we’re building a safe and trusted platform.

Your designs are set to our highest privacy setting by default. This means only people added to a design can access it, anyone that hasn’t been added will need to request access.

You can update the privacy of your designs so that anyone with the link can access, or use a view-only link, which will allow anyone on the internet with the link or URL to access your design. Because links can be on-forwarded or placed on the internet by recipients, be careful not to include any confidential information in designs with these settings enabled.

For more information on design privacy settings, see our help center article here⁠(opens in a new tab or window).

Canva is committed to ensuring the safety of students and educators when using Canva for Education. We are a trusted partner to schools and districts, and strive to meet or exceed student data compliance obligations under applicable law. Canva for Education and our privacy policies are designed to meet our responsibilities under the Family Educational Rights and Privacy Act (FERPA) and the Children’s Online Privacy Protection Act (COPPA) and our compliance has been certified by iKeepSafe⁠(opens in a new tab or window).

Canva is a signatory to the United States National Data Privacy Agreement (drafted by the Student Data Privacy Consortium) and has signed this model agreement with a number of States in the United States. For States or districts who have not signed onto the National Data Privacy Agreement, Canva offers a Data Processing Addendum⁠(opens in a new tab or window) (DPA) that is automatically incorporated into your agreement with us. Canva will also review data privacy and data sharing agreements at the State or district level. To find out how to enter into a National Data Privacy Agreement with Canva or provide an agreement for review, email edu-experts@canva.com. If you are ready to start using Canva, go to: https://www.canva.com/education/⁠(opens in a new tab or window)

If you are a Canva Business customer, we offer a Data Processing Addendum⁠(opens in a new tab or window) (DPA) to Canva Business that is automatically incorporated into your agreement with us.

For our customers in Europe and the United Kingdom, we act on your behalf as your Data Processor in relation to any personal data within your Team. So that you can meet your legal obligations, we have ensured the DPA contains the:

• EU Standard Contractual Clauses⁠(opens in a new tab or window)
• UK International Data Transfer Addendum⁠(opens in a new tab or window)
• Statement of our Technical and Organizational Measures⁠(opens in a new tab or window)
• Canva's sub-processors⁠(opens in a new tab or window).
  

You can contact Canva at any time at privacy@canva.com⁠(opens in a new tab or window).

If you are in the United Kingdom, our local representative is:

European Data Protection Office UK (EDPO UK)

8 Northumberland Avenue,

London WC2N 5BY, United Kingdom

info@edpo.com⁠(opens in a new tab or window).

If you are in the European Economic Area, our local representative is

European Data Protection Office (EDPO)

Regus Block 1, Blanchardstown Corporate Park,

Ballycoolen Road, Blanchardstown,

Dublin, D15 AKK1, Ireland.

info@edpo.com⁠(opens in a new tab or window).

You’re always in control of your content and privacy settings. Canva won’t use your user content to improve AI-powered features unless this is consistent with your Privacy Settings⁠(opens in a new tab or window). You can review and update these settings at any time

We’re improve AI-powered features using a combination of:

• Content from creators that are part of the Canva Creators program who have not opted out of their content improving our AI-powered features. Creators who haven’t opted out receive payment⁠(opens in a new tab or window) from Canva for allowing us to use their content to improve our AI-powered features.
• Licensed content from stock media agencies and other partners. Contributors, creatives, and agencies receive royalty compensation for this licensing.
• Openly licensed content.
• User content where this is consistent with their Privacy Settings⁠(opens in a new tab or window) for improving Canva’s AI-powered features.
• General usage and activity where this is consistent with their Privacy Settings⁠(opens in a new tab or window) for improving Canva’s AI-powered features. This includes things like design metadata, such as what color and font combinations are popular with our community and other information detailed below.

General usage and activity data covers information about how people use Canva, but never your user content. General usage and activity data includes things like design metadata (such as how people use layouts, colors and fonts) and analytic events (such as what features you use, and which buttons you click).

We use this information to help build better AI-powered features. For example, by knowing which fonts are most popular, we can provide better font combinations and suggestions. Canva only uses this to improve our AI-powered features if this is consistent with your Privacy Settings⁠(opens in a new tab or window). You can review and update your settings at any time.

Your content includes things like the text in your designs and media you upload (we also refer to this as your 'user content'). Canva only uses this to improve our AI-powered features if this is consistent with your Privacy Settings⁠(opens in a new tab or window). You can review and update your settings at any time.

We know this data is private, so we have strict controls and policies in place designed to protect your security and privacy, including Canva Shield⁠(opens in a new tab or window).

You can manage how we use your data to improve our AI-powered features by visiting your Privacy Settings⁠(opens in a new tab or window) page and updating your preferences. You can change these preferences at any time.

Canva Creators are in control of how their content is used for improving AI-powered features. Creators can opt-out by updating their preferences here⁠(opens in a new tab or window) at any time.

One of our core values at Canva is to ‘be a good human’, and this applies to the way we handle your data. Your privacy is incredibly important to us, and you can learn more about how we protect your privacy⁠(opens in a new tab or window) and the security⁠(opens in a new tab or window) of your data in our Trust Center.

Canva only allows trusted partners (including Canva Group entities and service providers) to improve AI-powered features with your user content if this is consistent with your Privacy Settings⁠(opens in a new tab or window). We have strict measures and policies in place to ensure your data is handled securely with your privacy in mind.

The privacy settings for Canva Education users are disabled. This means Canva Education users can’t opt-in or opt-out of these privacy settings. Canva doesn’t use user content of students using Canva Education to improve AI-powered features and we don’t allow these users to opt in to this privacy setting.

For users who have a Canva Business or Enterprise account, you’ll see that this control in the Privacy Settings page is disabled. The ability for Team and Enterprise Admins to opt-in is coming soon, and we’ll let you know when it’s ready. This means that we don't use your team or enterprise content to improve AI-powered features, and we don’t allow third parties to do so either.

No. If you choose to use a third party app available at canva.com/apps, the terms and conditions and privacy policies of the third party will apply. We recommend familiarizing yourself with how the third party uses your data and user content before using the third party app.