Canva

You are agreeing to allow Canva and its partners to track your usage via cookies and devices to show you personalized ads.

“we (and our third-party partners) will create online identifiers and collect information using cookies and similar technologies ... allow us or our business partners to track your usage of the Service over time. They also allow us to measure traffic and usage trends for the Service, deliver personalized advertisements ... and find potential new users of the Service.”

What that means: Your browsing habits and device information are tracked to build a profile for targeted advertising.

The document confirms the use of cookies, device identifiers, and clear gifs by Canva and third-party partners to track user behavior across the service and for advertising purposes.

You are agreeing to indefinite retention of your data and content for backup and legal reasons even after account deletion.

“Following termination or deactivation of your user account, Canva will retain your profile information and User Content for a commercially reasonable time, and for as long as we have a valid purpose to do so. In particular, Canva will retain your information for the purpose of complying with its legal and audit obligations, and for backup and archival purposes.”

What that means: Even after deleting your account, copies of your data and content may remain on Canva's servers for an unspecified duration.

Data is kept indefinitely based on vague criteria like 'valid purpose' or 'commercially reasonable time', including backups.

You are agreeing to let Canva collect and process your data from external sources like social media accounts.

“We may receive information about you from third parties or Canva affiliates. For example, if you access the Service through a third-party connection or log-in, such as Facebook Connect”

What that means: Third parties pass your data to Canva, expanding the number of entities holding your information.

Canva receives data from various third-party sources like social media platforms and data providers without your direct input for every instance.

You are agreeing that your data may be sold or transferred in the event of a company merger or acquisition.

“Canva may also share, sell or transfer your information to third parties in connection with or contemplation of ... any merger, acquisition, reorganization, financing, sale of assets, bankruptcy or insolvency event involving Canva”

What that means: Your data could change hands if Canva is bought or sells part of its business.

The policy states that user data may be sold or transferred during business transactions like mergers or acquisitions.

You are agreeing that deleted public content may persist in caches or remain if others have copied it.

“If you or Canva remove information that you posted to the Service, copies remain viewable in cached and archived pages of the Service, or if other users have copied or saved that information.”

What that means: Once shared publicly, your data cannot be fully erased from the internet or user copies.

Deletion requests may not result in complete removal due to caches, archives, or copies held by other users.

You are agreeing to the collection of data from children if they are participating in Canva Education under school supervision.

“In this policy, a child is considered a person under the age of 13 years old... Other than as part of Canva Education... Canva does not knowingly collect or solicit personal information from children.”

What that means: Children can use the platform via schools, meaning student data is collected and stored.

While general use is restricted, Canva Education allows children under supervision to use the service, collecting their data with school consent.

You are agreeing to let Canva use your uploaded content to train AI and machine learning models.

“We may analyze your activity, content, media uploads and related data in your account to provide and customize the Service, including generating and storing that data as Memories, and to train our algorithms, models and AI products and services using machine learning”

What that means: Your creative works are used to train AI systems, which may influence future product outputs.

Canva retains the right to use uploaded content (images, designs) for training AI models and creating features like Memories.

You are agreeing to accept cookies because refusing them may disable features of the Service.

“However, some features of the Service may not function properly if the ability to accept cookies is disabled.”

What that means: Refusing cookies might break parts of the website or app functionality.

Declining cookies may restrict access to core features, pressuring users to accept tracking technologies.

You are agreeing that Canva does not guarantee the security of your transmitted information.

“However, Canva cannot ensure or warrant the security of any information you transmit to Canva or guarantee that information on the Service may not be accessed, disclosed, altered, or destroyed.”

What that means: You hold the risk for data breaches as Canva does not warrant security.

Canva disclaims guarantees regarding the security of your data, shifting the risk of breaches to you.

You are agreeing to review the policy archives yourself for changes to this document.

“This Privacy Policy was last updated on November 02, 2026. See previous versions of the Privacy Policy in our Policy Archives.”

What that means: You must check the archive yourself to see what changed, rather than receiving active notice of material changes.

The document notes updates but does not explicitly state that continued use constitutes acceptance of future changes in this specific text, though it is implied by standard practice. The summary section says 'Please ensure you read the main text'.

You are agreeing to interact with third-party platforms like LinkedIn, Facebook, and Twitter when sharing designs.

“You may share your Canva designs to your social media accounts, including LinkedIn, Facebook, Twitter, Pinterest and Tumblr.”

What that means: Sharing links takes you to external sites governed by their own policies.

The policy mentions integration with specific third-party platforms but does not bind the user to those platforms' terms within this doc.