Privacy Policy for Canvas:OS

Last updated: 9.7.2025

Canvas:OS is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how your data is collected, used, disclosed, and safeguarded when you use the Service. By using Canvas:OS or the Canvas:OS Partner Service, you agree to the practices described in this policy.

1. Information Collected

1.1 Personal Information

Canvas:OS may collect personal information that you provide directly when you:

  • Create an account
  • Use the partner services
  • Access the digital assets
  • Communicate with Canvas:OS

This may include:

  • Name
  • Email address
  • Company information
  • Any other information you choose to provide

1.2 3rd Party Workspace Data

When you grant access to your Notion, Google, or Microsoft workspace, the data you choose to share will only be used to provide services through Canvas:OS tools. You can choose the data you share and revoke access at any time through your provider. Elevated permissions may be requested for sharing sensitive data such as organisation directories, used in Canvas:OS For Teams to generate interactive org charts.

1.3 Google Drive Access

When you share Google Drive access, you give Canvas:OS the ability to:

  • Access your Google Drive folders and files for sharing selected files in Canvas:OS
  • Enable public sharing links for displaying previews of selected files

The files you choose to upload on Canvas:OS are only used to share content. No AI or machine learning models are trained on your data. Learn more in the Google Workspace API user data and developer policy.

1.4 Usage Data

We automatically collect information about how you interact with the Service, including:

  • Browser type
  • Pages visited
  • Time and date of your visit
  • Time spent on pages
  • Other diagnostic data

Vercel and Posthog are used for functional analytics across the site.

2. How Your Information is Used

The information collected is used for various purposes:

  • To provide and maintain the Service
  • To notify you about changes to the Service
  • To provide customer support
  • To gather analysis or valuable information to improve the Service
  • To monitor the usage of the Service
  • To detect, prevent and address technical issues
  • To fulfil any other purpose for which you provide it

3. Data Storage and Security

3.1 Personal information

Any personally identifiable or sensitive information is stored in a secure Cloud database service through Vercel. Strict access controls are used to ensure that only authorized personnel can access this information. Vercel adheres to strict international security standards, including GDPR, SOC 2, ISO 27001, PCI DSS, DPF, and HIPAA.

3.2 AI Tools

If using the AI autocomplete tool in the content editor, only the content you share with the tool is shared with the service. No personally identifiable information is shared between Canvas:OS and the provider, Mistral AI. You can learn about Mistral AI and their data privacy practices here.

3.3 Security Measures

Industry-standard security measures are used to protect your personal information from unauthorized access, alteration, disclosure, or destruction. All data is backed up daily using Amazon's Simple Storage Service (S3).

However, please note that no method of transmission over the Internet or electronic storage is 100% secure, and absolute security can never be guaranteed.

4. Data Sharing and Disclosure

Canvas:OS does not sell, trade, or rent your personal information to third parties, though your information may be shared in the following situations:

  • With your consent
  • To comply with legal obligations
  • To protect and defend our rights or property
  • To prevent or investigate possible wrongdoing in connection with the Service
  • To protect the personal safety of users of the Service or the public

5. Your Data Protection Rights

Depending on your location, you may have certain rights regarding your personal information:

  • The right to access, update or delete your information
  • The right to rectification
  • The right to object
  • The right of restriction
  • The right to data portability
  • The right to withdraw consent

If you wish to exercise any of these rights, please contact hello@canvas-os.com

6. Retention of Data

Your personal information is retained only for as long as necessary for the purposes set out in this Privacy Policy. Your information is retained only to the extent necessary to comply with legal obligations, resolve disputes, and enforce policies.

7. Changes to This Privacy Policy

Canvas:OS may update the Privacy Policy from time to time. You will be notified of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

8. About

CANVAS:OS LIMITED is a registered New Zealand company, NZBN: 9429052843365

Registered Address:
63 Western road
Ngongotaha
Rotorua
New Zealand
3010

9. Contact

If you have any questions about this Privacy Policy or the data practices described, please contact hello@canvas-os.com

By using Canvas:OS, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.