Canva · Canva Privacy Policy · View original document ↗

Collection of data from public and third-party sources

Medium severity High confidence Explicitdocumentlanguage Common · 300 of 352 platforms
Share 𝕏 Share in Share 🔒 PDF
Monitor governance changes for Canva Create a free account to receive the weekly governance digest and monitor one platform for governance changes.
Create free account No credit card required.

This analysis describes what Canva's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology

ConductAtlas Analysis

Why it matters (compliance & governance perspective)

Users may have information collected about them from sources they never directly provided to Canva, expanding the scope of data Canva holds.

Recent Activity

This document changed recently

High May 14, 2026

The updated privacy policy no longer explicitly discloses that Canva uses cookies to personalize ads, analyze website performance, or tailor content on partner sites. Previously, the policy stated these purposes and directed users to the cookie policy for more information and choice. The revised policy now mentions only that essential cookies are used to make Canva work. This change removes transparency about non-essential cookie uses and eliminates the cookie consent interface (Accept all cookies / Manage cookies buttons) that was previously presented in the privacy policy document itself.

View change record →
Medium May 5, 2026

The updated privacy policy no longer includes explicit language describing Canva's use of non-essential cookies for personalization, advertising tailoring, and website analytics. Previously, the policy stated that Canva would use these cookies only if users accepted. The removal of this disclosure means the policy no longer clearly explains these cookie categories or presents a consent interaction for non-essential cookies at the point where this information was previously disclosed. Depending on applicable cookie law and Canva's implementation, users may need to consult additional documentation such as a separate cookie policy to understand how non-essential cookies are managed.

View change record →
High May 1, 2026

The updated privacy policy no longer explicitly discloses optional cookie uses or provides cookie preference controls on the privacy policy page itself. Previously, Canva stated it would use non-essential cookies for personalization, ad targeting, and analytics only if users accepted, and offered 'Accept all cookies' and 'Manage cookies' options. The removal of this disclosure and consent mechanism may affect how users understand cookie practices and when consent is obtained. Users who previously accessed cookie preferences through the privacy policy will need to locate these controls elsewhere on the Canva platform if they remain available.

View change record →

Consumer impact (what this means for users)

Canva is permitted to build a profile on you using information gathered from sources entirely outside your direct interactions with Canva.

How other platforms handle this

Glassdoor Medium

Some of our ad partners may also enable us to collect similar data directly from their website or app by integrating our or our affiliates' advertising technology.

ZipRecruiter Medium

As you interact with our Website, we may automatically collect Technical Data and Usage Data about your equipment, browsing actions and patterns...by using cookies, server logs and other similar technologies.

NVIDIA NIM Medium

NIM container releases that collect data, collect it for the following purposes: (a) to properly configure and optimize products for use with Software; and (b) to improve NVIDIA products and services.

See all platforms with this clause type →

Monitoring

Canva has changed this document before.

Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.

Get Monitor Or create a free account →
▸ View Original Clause Language DOCUMENT RECORD
"
We may obtain information about you from third-party sources, such as public sources, social media platforms (like Facebook, Instagram, LinkedIn, Twitter and other platforms) and third-party data providers and information services.

— Excerpt from Canva's Canva Privacy Policy

Applicable regulations

EU AI Act
European Union
BIPA
Illinois, USA
CCPA/CPRA
California, USA
Connecticut Data Privacy Act Amendments
US-CT
CAN-SPAM
United States Federal
ePrivacy Directive
European Union
FTC Act Section 5
United States Federal
GDPR
European Union
Indiana Consumer Data Protection Act
US-IN
Kentucky Consumer Data Protection Act
US-KY
UK GDPR
United Kingdom
Universal Opt-Out Mechanism Expansion 2026
US

Provision details

Document information
Document
Canva Privacy Policy
Entity
Canva
Document last updated
May 5, 2026
Tracking information
First tracked
May 11, 2026
Last verified
May 11, 2026
Record ID
CA-P-068576
Document ID
CA-D-00204
Evidence Provenance
Source URL
Wayback Machine
Content hash (SHA-256)
4608d013413fe0c49d9bac06799391e6496715c70027aec74677d661cbd6c89b
Analysis generated
May 11, 2026 23:11 UTC
Methodology
Evidence
✓ Snapshot stored   ✓ Hash verified
Citation Record
Entity: Canva
Document: Canva Privacy Policy
Record ID: CA-P-068576
Captured: 2026-05-11 23:11:39 UTC
SHA-256: 4608d013413fe0c4…
URL: https://conductatlas.com/platform/canva/canva-privacy-policy/provision/CA-P-068576/collection-of-data-from-public-and-third-party-sources/
Accessed: July 13, 2026
Permanent archival reference. Stable identifier suitable for legal filings, compliance documentation, and research citation.
Classification
Severity
Medium
Categories

Other risks in this policy

Related Analysis

Compliance Governance Intelligence

Need to monitor specific governance provisions?

Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.

Arbitration clauses AI governance Data rights Indemnification Retention policies
Get Compliance

Or start with Monitor →

Built from archived source documents, structured governance mappings, and historical version tracking.

Frequently Asked Questions

What does Canva's Collection of data from public and third-party sources clause do?

Users may have information collected about them from sources they never directly provided to Canva, expanding the scope of data Canva holds.

How does this clause affect you?

Canva is permitted to build a profile on you using information gathered from sources entirely outside your direct interactions with Canva.

How many platforms have this type of clause?

ConductAtlas has identified this type of provision across 300 platforms. See the full comparison.

Is ConductAtlas affiliated with Canva?

No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Canva.