This policy explains how Across Canvas (“we”, “us”) handles personal data when you use acrosscanvas.com and app.acrosscanvas.com. For the purposes of data protection law, we are the controller of your personal data. Contact details are at the end.
What we collect
Account details. Your email address and name. If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password.
Your content. Photos, logos, clips, and text you upload; the prompts you write; the designs, images, video, and audio you make; and your brand kit.
Billing information. Your plan, payment history, billing country, and tax details. Card details are collected by Stripe; we see only the card brand, the last four digits, and the expiry date.
Usage and device information. Pages and features you use, generations and credit transactions, your IP address, browser and device type, and bot-protection signals from Cloudflare Turnstile.
Messages. What you send us when you contact support, and transactional emails we send you (such as receipts and sign-in links).
Assistant conversations. If you use the Ask Canvas assistant, the messages you exchange with it and the designs it works on.
We do not collect sensitive categories of data on purpose. Please don’t upload documents containing them.
How we use it
| Purpose | Data | Legal basis (EU and UK) |
|---|---|---|
| Provide the Service: accounts, projects, generating and exporting designs | Account, content, usage | Performing our contract with you |
| Bill you and keep tax records | Account, billing | Contract; legal obligation |
| Send transactional email: sign-in links, receipts, account notices | Account | Contract |
| Prevent fraud and abuse, including multiple free accounts and prohibited content | Account, usage, content | Legitimate interests in keeping the Service safe |
| Fix problems and improve the Service | Usage | Legitimate interests |
| Comply with the law and respond to lawful requests | Any, as required | Legal obligation |
We do not sell your personal data, use it for targeted advertising, or use your content to train AI models.
AI processing
When you generate something, we send your prompt, and any images or clips it needs, to the AI provider that performs that task. The provider returns the result, and we store it in your account. We use providers’ business API services, under terms that do not allow them to use your content to train their models. Providers may keep inputs for a limited time to detect abuse, as their terms describe.
We check prompts and results automatically to enforce our acceptable use rules. We do not use AI to make decisions about you that have legal or similarly significant effects.
Who we share it with
We share personal data only with service providers that process it for us under contract, and when the law requires it.
| Provider | What they do | Where |
|---|---|---|
| Cloudflare | Hosting, content delivery, security and bot protection, file storage, transactional email | Global network; storage in the US |
| PlanetScale | Database | United States (AWS us-east-1) |
| OpenAI | Image generation and editing; transcribing speech for captions | United States |
| MiniMax | Video generation, voiceover, and caption timing | Singapore |
| BytePlus (ByteDance) | Cinematic video generation | Singapore |
| Anthropic | The Ask Canvas assistant | United States |
| Stripe | Payments, subscriptions, and tax calculation | United States and Ireland |
| Sign in with Google | United States |
If we are involved in a merger or sale of the business, personal data may transfer to the new owner under this policy.
International transfers
Your data is stored in the United States and processed by the providers above, some of which are in other countries. Where the law requires, we protect transfers from the EU, UK, and Switzerland with the European Commission’s Standard Contractual Clauses (and the UK addendum) or an adequacy decision such as the EU–US Data Privacy Framework.
How long we keep it
- Account and content: while your account is open. When you delete your account, it is deactivated for 30 days so you can restore it by signing in, then your name, email address, sign-in details, projects, uploads, and generated media are permanently deleted.
- Billing records: invoices, payments, and the customer record held by Stripe are kept after account deletion for as long as tax and accounting law requires, which can be up to 10 years.
- Security and request logs: up to 30 days, longer only when needed to investigate abuse.
- Support messages: up to 2 years after the conversation ends.
- Backups: deleted data can remain in encrypted backups for up to 30 more days before it is overwritten.
Your rights
Depending on where you live, you can ask us to:
- give you a copy of your personal data, or send it to another service;
- correct data that is wrong;
- delete your data;
- restrict or object to how we use it, including use based on legitimate interests;
- withdraw consent, where we rely on consent.
You can download your designs and delete your account yourself in Settings. For anything else, email us at the address in Contact. We reply within one month and may need to confirm your identity first. You can also complain to your local data protection authority.
California residents. We do not sell or share personal information for cross-context behavioral advertising. You have the right to know, correct, and delete your personal information and to not be discriminated against for exercising these rights.
Cookies
We use only cookies that are needed for the Service to work, such as keeping you signed in. See our Cookie Policy.
Security
Data is encrypted in transit and at rest. Access to production systems is limited to staff who need it. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.
Children
The Service is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
Changes
We will post any changes here and update the date at the top. For material changes we will also email you before they take effect.
Contact
Across Canvas is operated by the company named here once these terms take effect. Questions about privacy: privacy@acrosscanvas.com. Everything else: support@acrosscanvas.com.
See also: Terms of Service · Cookie Policy