Track 1 platform and get the weekly governance digest. No credit card required.
This page describes what the document states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability may vary by jurisdiction. Methodology
Canva's privacy policy establishes the categories of personal data collected during service use, including account information, payment details, uploaded content, usage metrics, and device identifiers. The policy authorizes Canva to share collected data with advertising, analytics, and integration partners, and permits use of user-generated content and uploaded materials to improve platform services and train machine learning features. Users may submit requests to access, delete, or restrict processing of personal data through canva.com/privacy.
This document is Canva's global Privacy Policy governing the collection, use, storage, and disclosure of personal information across Canva's design platform and related services, with legal bases including consent, legitimate interests, and contractual necessity depending on jurisdiction. The policy states that Canva collects name, email address, payment information, usage data, device identifiers, log data, location-related data, and content created or uploaded by users, and the terms authorize sharing this information with service providers, advertising partners, analytics providers, integration partners, and in the context of business transfers. The policy asserts broad authority to use user-generated content and uploaded materials to improve Canva's services and AI features, including training of machine learning models, subject to limitations described in separate AI-specific terms; the scope of consent obtained for AI training purposes may require evaluation under GDPR and applicable consumer protection frameworks depending on how opt-in or opt-out mechanisms are implemented in practice. The policy engages GDPR and UK GDPR for EU and UK users, CCPA and CPRA for California residents, and Australian Privacy Act obligations given Canva's Australian incorporation, and the document describes regional rights including access, correction, deletion, portability, and objection; COPPA implications arise for the education product given its use by minors, and the policy references a separate Children's Privacy Policy for those contexts. Material compliance considerations include cross-border data transfer mechanisms (Standard Contractual Clauses are referenced), data retention practices, the adequacy of consent mechanisms for behavioral advertising, and the sufficiency of disclosures regarding AI training data use.
Institutional analysis available with Compliance
Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Compliance.
Start Compliance free trial11 important changes detected
11 versions captured · Last updated: June 2026
Canva removed three sentences from its privacy policy cookie notice on May 14, 2026. The removed language disclosed that Canva uses cookies for personalizing ads, analyzing website performance, and tailoring …
View change record →Canva's privacy policy page now displays a cookie banner before the main policy content. The update adds three sentences about cookie usage, stating that Canva uses essential cookies to operate …
View change record →Canva's privacy policy footer was updated on May 11, 2026 to remove references to 'Magic Studio' and 'Windows Mac' from the product navigation section, and replaced them with 'Canva AI' …
View change record →Canva removed three sentences from its privacy policy that described cookie usage and consent options. The removed language previously explained that Canva uses non-essential cookies for personalization, advertising, and analytics, …
View change record →Canva added a cookie consent notice to the top of its Privacy Policy on May 5, 2026. The new language discloses that Canva uses essential cookies to operate the service, …
View change record →Canva removed three sentences from its privacy policy that described optional cookie uses and prompted users to accept or manage cookie preferences. The removed text explained that Canva uses non-essential …
View change record →Canva's Privacy Policy was updated on April 21, 2026, with a single sentence modification in the policy header. The previous version dated the policy as last updated April 15, 2026; …
View change record →Canva's Privacy Policy was updated on April 20, 2026. The only detected change in the document is the addition of 'Template library' to the product navigation menu within the policy …
View change record →Canva's Privacy Policy was updated on April 19, 2026 to reflect changes in its product navigation and feature naming. The primary modification appears to be in the site navigation and …
View change record →Monitoring
Canva has updated this document before.
Monitor includes same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
Compliance Governance Intelligence
Need provision-level monitoring and regulatory mapping?
Compliance includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.
Start Compliance free trialCross-platform context
See how other platforms handle AI/ML Training on User Content and similar clauses.
Compare across platforms →Governance Monitoring
Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.