This analysis describes what Canva's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
If you are an EU or UK user, your data leaves the region and the legal protections that apply to it may be weaker once it reaches Australia or the US, even with contractual safeguards in place.
The updated privacy policy no longer includes explicit language describing Canva's use of non-essential cookies for personalization, advertising tailoring, and website analytics. Previously, the poli…
The updated privacy policy no longer explicitly discloses optional cookie uses or provides cookie preference controls on the privacy policy page itself. Previously, Canva stated it would use non-esse…
The policy states that Canva collects a broad range of personal data including uploaded content, designs, device identifiers, and usage activity, and authorizes sharing this data with advertising, analytics, and integration partners. The terms also indicate that user content and data may be used to improve Canva's services and AI features, which consumers using free or paid accounts should be aware of when uploading sensitive or proprietary materials. You can review your privacy choices, submit data access or deletion requests, and manage communication preferences through Canva's privacy settings at canva.com/privacy.
How other platforms handle this
You will provide personal information directly to our website in the United States. We may also transfer personal information to our partners and service providers in the United States and other jurisdictions. Please note that such jurisdictions may not provide the same protections as the data prote...
Notion is based in the United States and the information we collect is governed by U.S. law. If you are accessing our Services from outside of the United States, please be aware that information collected through the Services may be transferred to, processed, stored, and used in the United States an...
Your personal information may be transferred to and processed in countries other than your country of residence, including Canada and the United States, where our servers are located and our central database is operated. These countries may have data protection laws that are different from those in ...
Monitoring
Canva has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"Canva is headquartered in Australia, and the Service is operated from Australia. If you are located in the European Economic Area, the United Kingdom, or other regions with laws governing data collection and use, please note that your information may be transferred to and processed in countries that do not have the same data protection laws as your country of residence, including Australia and the United States. Where we transfer personal data from the EEA or the UK, we rely on appropriate transfer mechanisms, such as Standard Contractual Clauses, to protect your information.— Excerpt from Canva's Canva Privacy Policy
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
If you are an EU or UK user, your data leaves the region and the legal protections that apply to it may be weaker once it reaches Australia or the US, even with contractual safeguards in place.
ConductAtlas has identified this type of provision across 79 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Canva.