CanvasKeepCanvasKeepSign in

Privacy Policy

Last updated: August 29, 2026

CanvasKeep ("we", "us", "our") operates the website at canvaskeep.com. This policy describes what personal data we collect, why, how we store it, and your rights regarding that data.

1. Data we collect

Account data. When you sign up we collect your email address via Supabase Auth. We use this to authenticate you, send transactional emails (confirmation, password reset), and associate your diagrams with your account.

User content. Diagrams you create, workspace and folder names, and version history snapshots are stored in our database (Supabase/PostgreSQL) and object storage (Cloudflare R2).

Payment data. When you subscribe to Pro, payment is processed by Dodo Payments. We do not store credit card numbers. Dodo may collect billing name, address, and payment method details under their own privacy policy.

Usage data. We collect basic analytics (page views, referrer) via Cloudflare Web Analytics, which does not use cookies or track individuals.

2. How we use your data

  • Provide, maintain, and improve the service
  • Process payments and manage subscriptions
  • Send transactional emails (no marketing emails without consent)
  • Respond to support requests

3. Data storage and security

Account and diagram data is stored in Supabase (hosted on AWS). File assets are stored in Cloudflare R2. All data is transmitted over HTTPS. We apply row-level security policies so users can only access their own data.

4. Third-party services

  • Supabase - authentication and database hosting
  • Cloudflare - CDN, DNS, R2 object storage, web analytics
  • Dodo Payments - payment processing

Each third party processes data under their own privacy policy. We do not sell or share your data with advertisers.

5. Cookies

We use essential cookies only (authentication session tokens). We do not use tracking cookies or third-party advertising cookies.

6. Data retention

We retain your data for as long as your account is active. If you delete your account, we remove your personal data and diagrams within 30 days.

7. Your rights

You may:

  • Access or export your diagrams at any time from the app
  • Request deletion of your account and all associated data
  • Withdraw consent for non-essential data processing

To exercise any of these rights, email us at canvaskeep@gmail.com.

8. Children

CanvasKeep is not directed at children under 13. We do not knowingly collect data from children under 13.

9. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance.

10. Contact

Questions about this policy? Email canvaskeep@gmail.com.