Skip to content

Privacy Policy

Original document

LAST VERIFIED 2026-10-01

Attention points

7 TO CHECK

Pointers to disclosures this policy may not clearly make, checked against major privacy laws. This is a heuristic — not legal advice, and not a finding that anything is missing or unlawful.

GDPR / UK-GDPR

10/13 ADDRESSED
  • Data Protection Officer contactGDPR Art. 13(1)(b)
  • Automated decision-making or profilingGDPR Arts. 13(2)(f), 22
  • Where your data was obtained, if not collected from you (source)GDPR Art. 14(2)(f)

CCPA / CPRA

6/10 ADDRESSED
  • The categories of sources the data comes fromCCPA §1798.110(c)
  • A 'Limit the Use of My Sensitive Personal Information' option (CPRA)CPRA §1798.135(a)
  • Your CCPA rights (know, delete, correct, opt-out, limit, non-discrimination)CCPA §§1798.100–125
  • A non-discrimination promise for exercising your rightsCCPA §1798.125

Current text

3. Privacy Policy This Privacy Policy was last updated on August 25, 2026. See previous versions of the Privacy Policy in our Policy Archives.(opens in a new tab or window) The highlighted text is aimed to give a plain English summary of our Privacy Policy. Please ensure you read the main text, as the plain English summary is just a summary and doesn't capture all of the terms. What does this policy cover Welcome to Canva. Our Privacy Policy explains how the Canva…

Show full text