Canva
Canva · Image and video · AU · www.canva.com
services/canva.yamlVendor data-handling terms
“We may analyze your activity, content, media uploads and related data in your account to provide and customize the Service, including generating and storing that data as Memories, and to train our algorithms, models and AI products and services using machine learning to develop, improve and provide our Service. / You can manage the use of your data for training AI to improve our Service in the privacy controls page under your privacy settings (opens in a new tab or window) .”
“Following termination or deactivation of your user account, Canva will retain your profile information and User Content for a commercially reasonable time, and for as long as we have a valid purpose to do so.”
“Canva transfers information that we collect about you, including personal information, to affiliated entities, and to other third parties across borders and from your country or jurisdiction to other countries or jurisdictions around the world.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| api.canva.com | api | observed |
| canva.cn | app | observed |
| canva.com | app | observed |
| www.canva.com | app | observed |
| unscreen.com | app | observed |
Assessment
Reasoning: Canva is a design platform first and an AI service second; the host serves the whole product. Uploaded media and content may be used for model training unless the privacy control is switched off, storage is worldwide with no region commitment, and content outlives the account. The work exposure is brand assets, presentations, and whatever is pasted into a design. Enterprise plans carry admin controls not verified here.
Flags: Training on uploads unless opted out · GDPR Chapter V (worldwide transfers) · Host serves the whole product (AI is a feature) · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Unscreen (a Canva product served under the Canva privacy policy) merged into this entry; unscreen.com added to domains.
- 2026-09-16Documented. Training, retention, and transfer terms verified against the Canva privacy policy. Merged the separate Canva AI entry (same policy, same product).
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.