PageSourceSearch

https://startwithcanvas.com/privacy

html startwithcanvas.com collected 2026-10-02 01:44:41 UTC 34,568 bytes, 3 lines download raw bytes

1<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/brand/canvas-horizontal-reversed.svg" as="image"/><link rel="stylesheet" href="/assets/index-rd0GrdH0.css" data-rsc-css-href="/assets/index-rd0GrdH0.css" data-precedence="vite-rsc/importer-resources"/><link rel="modulepreload" href="/assets/layout-segment-context-DOiEorhm.js" crossorigin=""/><link rel="modulepreload" href="/assets/rolldown-runtime-S-ySWqyJ.js" crossorigin=""/><link rel="modulepreload" href="/assets/index-DnnWPaWx.js" crossorigin=""/><link rel="modulepreload" href="/assets/framework-DC_sNd-Z.js" crossorigin=""/><link rel="modulepreload" href="/assets/link-C6pTgPiA.js" crossorigin=""/><title>Privacy Policy — Canvas</title><meta name="description" content="How Canvas and the Canvas Clipper Chrome extension collect, use, retain, and protect information."/><meta property="og:title" content="Privacy Policy — Canvas"/><meta property="og:description" content="How Canvas and the Canvas Clipper Chrome extension collect, use, retain, and protect information."/><meta property="og:url" content="https://startwithcanvas.com/privacy"/><meta property="og:site_name" content="Canvas"/><meta property="og:type" content="website"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:title" content="Canvas — Start with anything. Build what’s next."/><meta name="twitter:description" content="A living visual workspace for real projects. Free to use during Alpha."/><meta name="twitter:image" content="https://startwithcanvas.com/og.png"/><link rel="shortcut icon" href="https://startwithcanvas.com/favicon.svg"/><link rel="icon" href="https://startwithcanvas.com/favicon.svg"/><link rel="canonical" href="https://startwithcanvas.com/privacy"/><meta name="theme-color" content="#090A0B"/><meta name="color-scheme" content="dark light"/>
1<script>self.__VINEXT_RSC_PARAMS__={}</script>
1<script>self.__VINEXT_RSC_NAV__={"pathname":"/privacy","searchParams":[]}</script>
1<link rel="modulepreload" href="/assets/index-DnnWPaWx.js" />
2</head><body><div class="legal-shell"><a class="skip-link" href="#legal-content">Skip to content</a><header class="legal-header"><a href="/" class="legal-brand" aria-label="Canvas home"><img src="/brand/canvas-horizontal-reversed.svg" alt="" width="189" height="48"/></a><nav class="legal-nav" aria-label="Legal navigation"><a href="/privacy">Privacy</a><a href="/termsofuse">Terms of Use</a><a class="legal-open" href="https://app.startwithcanvas.com/">Open Canvas</a></nav></header><main id="legal-content" class="legal-main"><div class="legal-hero"><p class="legal-eyebrow">Your information</p><h1>Privacy Policy</h1><p class="legal-summary">This policy explains what Canvas processes, why we process it, and the choices available to you across startwithcanvas.com, the Canvas app, and Canvas Clipper.</p><p class="legal-effective">Effective <time dateTime="2026-08-17">August 17, 2026</time></p></div><article class="legal-document"><section><h2>1. Who operates Canvas</h2><p>Canvas is operated by Bruce Stenberg, an individual doing business as Canvas, based in Philadelphia, Pennsylvania, United States (collectively, “Canvas,” “we,” “us,” or “our”). This Privacy Policy applies to startwithcanvas.com, app.startwithcanvas.com, the Canvas Clipper Google Chrome extension, and related support communications (the “Services”).</p><p>Canvas is the controller of personal information processed for its own purposes. If an organization provides your account, that organization may also control workspace information and your access to it.</p></section><section><h2>2. Information we collect</h2><h3>Information you provide</h3><ul><li><strong>Account and profile information:</strong> email address, display name, authentication records, account and workspace identifiers, role, permissions, and business-account details.</li><li><strong>Workspace content:</strong> board titles, notes, shapes, comments, tasks, files, images and other media, links, capture content, revisions, sharing settings, and collaboration activity that you or your collaborators submit.</li><li><strong>Communications:</strong> messages and information you send to support, sales, or privacy contacts, including feedback and troubleshooting material you choose to provide.</li></ul><h3>Information collected when you use the Services</h3><ul><li><strong>Technical and usage information:</strong> IP address, approximate region derived from IP, browser and device type, operating system, page and feature interactions, timestamps, request and performance data, and diagnostic events.</li><li><strong>Session replay and diagnostics:</strong> in the Canvas web app we use Datadog to understand reliability and usability. This may reproduce interactions and visible interface state. We configure sensitive fields, including password, one-time-code, token, payment, and file-input fields, to be masked or excluded, and we scrub known account and content fields from diagnostic events. Please do not place sensitive personal information in board content or fields where it is not needed.</li><li><strong>Browser storage:</strong> cookies, local storage, session storage, and IndexedDB records used for sign-in, preferences, guest continuity, pending operations, media previews, and offline or resilient app behavior.</li></ul></section><section id="canvas-clipper"><h2>3. Canvas Clipper Chrome extension</h2><p>Canvas Clipper has one purpose: it lets you deliberately preview and save content from the public page you are viewing into an authorized Canvas Capture Inbox. It does not continuously monitor your browsing.</p><h3>What the extension accesses</h3><p>Only after you open the extension or choose a Canvas context-menu command, Canvas Clipper may read the current tab’s page title, canonical or current URL and domain, metadata description, selected text, one visible image candidate and its alternative text, or the focused link’s URL and text. Depending on what you choose, this information may be considered website content or web-history information. The extension also uses your Canvas account and workspace identifiers and a time-limited authorization token to 
2save the confirmed capture.</p><h3>How permissions are used</h3><ul><li><strong>activeTab and scripting:</strong> temporarily inspect only the tab on which you invoked Canvas Clipper and build a local preview.</li><li><strong>contextMenus:</strong> provide Save page, Save selection, Save image, and Save link commands that you choose to invoke.</li><li><strong>storage:</strong> hold a pending preview, connection request, and time-limited Canvas connection in Chrome session storage.</li><li><strong>Canvas host access:</strong> connect only to authorized Canvas app origins to establish the connection and submit a capture you confirmed.</li></ul><p>The extension displays a preview before saving, does not inject broad background content scripts, does not run remote code, and does not contact arbitrary websites. A pending draft is removed after a successful save or when its browser session ends. The resulting capture remains in Canvas as described under Retention below.</p><h3>Chrome Web Store User Data Policy</h3><p>Canvas Clipper’s use and transfer of user data complies with the<!-- --> <a href="https://developer.chrome.com/docs/webstore/program-policies/user-data/">Chrome Web Store User Data Policy</a>, including the Limited Use requirements. Extension data is used only to provide or improve the user-facing clipping feature, maintain security, prevent abuse, and comply with law. We do not use it for advertising, creditworthiness, lending, or an unrelated purpose.</p></section><section><h2>4. How we use information</h2><p>We use information to:</p><ul><li>provide, secure, maintain, and improve the Services;</li><li>authenticate users and preserve authorized account access;</li><li>store, synchronize, render, and share workspace content as directed;</li><li>complete user-confirmed Canvas Clipper captures;</li><li>send transactional messages and respond to requests;</li><li>diagnose failures, measure performance, and prevent fraud or abuse; and</li><li>comply with legal obligations and enforce our Terms of Use.</li></ul><p>Where applicable, we rely on performance of a contract, our legitimate interests in operating and securing Canvas, consent where required, and compliance with legal obligations.</p></section><section><h2>5. How information is disclosed</h2><p>We may disclose information in these limited circumstances:</p><ul><li><strong>At your direction:</strong> to collaborators, guests, workspace owners, or the public when you choose sharing or publishing features.</li><li><strong>Service providers:</strong> Cloudflare for app hosting, delivery, storage, security, and selected AI infrastructure; PlanetScale for hosted database infrastructure; Mailgun for transactional email; and Datadog for performance, diagnostics, and session replay. They process information for us under contractual or technical restrictions.</li><li><strong>Legal and safety:</strong> when reasonably necessary to comply with law, legal process, or a valid government request; protect users, the public, or the Services; or investigate fraud, abuse, or security incidents.</li><li><strong>Business transition:</strong> in connection with a financing, reorganization, acquisition, or sale, subject to appropriate safeguards and notice when required.</li></ul><p>We do not sell personal information. We do not transfer personal information for cross-context behavioral advertising, determine creditworthiness, or provide lending services. Human access to private user content is limited to what is necessary for support you request, security or abuse investigation, legal compliance, or internal operations where access is strictly necessary.</p></section><section><h2>6. Retention</h2><p>We retain information only for as long as needed for the purposes described here, subject to technical, legal, security, backup, and dispute-resolution needs. Current product windows include:</p><ul><li>authentication challenges generally expire after 10 minutes;</li><li>web sign-in sessions generally expire after 14 days;</li><li>new guest continuity records may remain for up to 90 days;</li><li>Canvas Clipper connection credentials generally expire after 15 minutes;</li><li>Datadog diagnostic logs are configured for a 15-day retention period; and</li><li>active Canvas Clipper captures remain until you remove or archive them; archived captures are scheduled for purge after 30 days.</li></ul><p>Workspace content otherwise remains while the account or workspace is active or until it is deleted through an available product control. Browser-local data may remain until it expires, you clear it, or the browser evicts it. Canvas does not currently provide a fully automated account-erasure workflow; deletion requests are reviewed and completed using available technical controls. Limited copies may remain temporarily in backups or where retention is required by law, security, fraud prevention, or an unresolved dispute.</p></section><section><h2>7. Security</h2><p>We use administrative, technical, and organizational safeguards designed to protect information, including encrypted network transport, restricted authorization, secure session cookies, short-lived extension credentials, provider access controls, and diagnostic-data scrubbing. No system is completely secure, and we cannot guarantee absolute security.</p></section><section><h2>8. Your choices and privacy rights</h2><p>Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to withdraw consent. You may also have the right to appeal a de
2nied request or complain to a privacy regulator. We do not discriminate for exercising a privacy right.</p><p>To make a request, email<!-- --> <a href="mailto:[email protected]">[email protected]</a>. We may need to verify your identity and authority. Workspace owners may need to handle requests concerning an organization-controlled account.</p></section><section><h2>9. International use</h2><p>Canvas is based in the United States. If you use the Services elsewhere, information may be processed in the United States and other countries where our providers operate. Where required, we use legally recognized safeguards for international transfers.</p></section><section><h2>10. Age requirement</h2><p>The Services are for people who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. Contact us if you believe a person under 18 has provided information to Canvas.</p></section><section><h2>11. Changes to this policy</h2><p>We may update this Privacy Policy as Canvas changes. We will post the revised policy here, update the effective date, and provide additional notice when a change materially affects your rights and applicable law requires it.</p></section><section><h2>12. Contact</h2><p>Privacy questions and requests:<!-- --> <a href="mailto:[email protected]">[email protected]</a><br/>General support:<!-- --> <a href="mailto:[email protected]">[email protected]</a><br/>Bruce Stenberg, doing business as Canvas<br/>Philadelphia, Pennsylvania, United States</p><p>Your use of Canvas is also governed by the<!-- --> <a href="/termsofuse">Terms of Use</a>.</p></section></article></main><footer class="legal-footer"><a href="/" aria-label="Canvas home"><img src="/brand/canvas-horizontal-reversed.svg" alt="" width="189" height="48"/></a><p>© <!-- -->2026<!-- --> Canvas</p><nav aria-label="Legal footer navigation"><a href="/privacy">Privacy</a><a href="/termsofuse">Terms of Use</a><a href="mailto:[email protected]">Contact</a></nav></footer></div>
2<script id="_R_">import("/assets/index-DnnWPaWx.js")</script>
2<script type="module" src="https://static.cloudflareinsights.com/beacon.min.js/v31edd6df95cf4e85bb4c19e7a9bdbcba1788362987495" integrity="sha512-iIg7k2xntmwu6/uSb5tpc/hySgZc4eoL31yB29W6tJFo2akwjPWcEqnCEdJvGexCL0KEQwVYv5BlowfhVz26hg==" data-cf-beacon='{"version":"2024.11.0","token":"133fc661d3b04fbba82dc1233d45d7a5","r":1,"spa":2}' crossorigin="anonymous"></script>
2
3</body></html>
3<script>self.__VINEXT_RSC_CHUNKS__=self.__VINEXT_RSC_CHUNKS__||[];self.__VINEXT_RSC_CHUNKS__.push("2:I[\"01fff0d9a15b\",[],\"Children\",1]\n3:I[\"2e349c549b36\",[],\"LayoutSegmentProvider\",1]\n4:I[\"01fff0d9a15b\",[],\"Slot\",1]\n5:I[\"e4a569c9a749\",[],\"RedirectBoundary\",1]\n:HL[\"/assets/index-rd0GrdH0.css\",\"style\"]\n")</script>
3<script>self.__VINEXT_RSC_CHUNKS__=self.__VINEXT_RSC_CHUNKS__||[];self.__VINEXT_RSC_CHUNKS__.push("0:{\"__route\":\"route:/privacy\",\"__interceptionContext\":null,\"__layoutIds\":[\"layout:/\"],\"__rootLayout\":\"/\",\"page:/privacy\":\"$L1\",\"layout:/\":[[[[\"$\",\"link\",\"css:/assets/index-rd0GrdH0.css\",{\"rel\":\"stylesheet\",\"precedence\":\"vite-rsc/importer-resources\",\"href\":\"/assets/index-rd0GrdH0.css\",\"data-rsc-css-href\":\"/assets/index-rd0GrdH0.css\"}],\"$undefined\"],[\"$\",\"html\",null,{\"lang\":\"en\",\"children\":[\"$\",\"body\",null,{\"children\":[\"$\",\"$L2\",null,{}]}]}]],null],\"route:/privacy\":[[[\"$\",\"meta\",null,{\"charSet\":\"utf-8\"}],[[\"$\",\"title\",\"0\",{\"children\":\"Privacy Policy — Canvas\"}],[\"$\",\"meta\",\"1\",{\"name\":\"description\",\"content\":\"How Canvas and the Canvas Clipper Chrome extension collect, use, retain, and protect information.\"}],[\"$\",\"meta\",\"2\",{\"property\":\"og:title\",\"content\":\"Privacy Policy — Canvas\"}],[\"$\",\"meta\",\"3\",{\"property\":\"og:description\",\"content\":\"How Canvas and the Canvas Clipper Chrome extension collect, use, retain, and protect information.\"}],[\"$\",\"meta\",\"4\",{\"property\":\"og:url\",\"content\":\"https://startwithcanvas.com/privacy\"}],[\"$\",\"meta\",\"5\",{\"property\":\"og:site_name\",\"content\":\"Canvas\"}],[\"$\",\"meta\",\"6\",{\"property\":\"og:type\",\"content\":\"website\"}],[\"$\",\"meta\",\"7\",{\"name\":\"twitter:card\",\"content\":\"summary_large_image\"}],[\"$\",\"meta\",\"8\",{\"name\":\"twitter:title\",\"content\":\"Canvas — Start with anything. Build what’s next.\"}],[\"$\",\"meta\",\"9\",{\"name\":\"twitter:description\",\"content\":\"A living visual workspace for real projects. Free to use during Alpha.\"}],[\"$\",\"meta\",\"10\",{\"name\":\"twitter:image\",\"content\":\"https://startwithcanvas.com/og.png\"}],[\"$\",\"link\",\"11\",{\"rel\":\"shortcut icon\",\"href\":\"https://startwithcanvas.com/favicon.svg\"}],[\"$\",\"link\",\"12\",{\"rel\":\"icon\",\"href\":\"https://startwithcanvas.com/favicon.svg\"}],[\"$\",\"link\",\"13\",{\"rel\":\"canonical\",\"href\":\"https://startwithcanvas.com/privacy\"}]],[[\"$\",\"meta\",\"0\",{\"name\":\"viewport\",\"content\":\"width=device-width, initial-scale=1\"}],[\"$\",\"meta\",\"1\",{\"name\":\"theme-color\",\"content\":\"#090A0B\"}],[\"$\",\"meta\",\"2\",{\"name\":\"color-scheme\",\"content\":\"dark light\"}]]],[\"$\",\"$L3\",null,{\"segmentMap\":{\"children\":[\"privacy\"]},\"children\":[\"$\",\"$L4\",null,{\"id\":\"layout:/\",\"parallelSlots\":\"$undefined\",\"children\":[\"$\",\"$L5\",null,{\"children\":[\"$\",\"$L3\",null,{\"segmentMap\":{\"children\":[]},\"children\":[\"$\",\"$L4\",null,{\"id\":\"page:/privacy\"}]}]}]}]}]],\"__layoutFlags\":{\"layout:/\":\"s\"},\"__artifactCompatibility\":{\"schemaVersion\":1,\"graphVersion\":\"app-route-graph:1kblxa015i4zyw\",\"deploymentVersion\":\"d4890b31-6c12-4b59-806e-83ca66529088\",\"appElementsSchemaVersion\":1,\"rscPayloadSchemaVersion\":1,\"rootBoundaryId\":\"/\",\"renderEpoch\":null}}\n6:I[\"c2747888630f\",[],\"default\",1]\n:HL[\"/brand/canvas-horizontal-reversed.svg\",\"image\"]\n")</script>
3<script>self.__VINEXT_RSC_CHUNKS__=self.__VINEXT_RSC_CHUNKS__||[];self.__VINEXT_RSC_CHUNKS__.push("1:[\"$\",\"div\",null,{\"className\":\"legal-shell\",\"children\":[[\"$\",\"a\",null,{\"className\":\"skip-link\",\"href\":\"#legal-content\",\"children\":\"Skip to content\"}],[\"$\",\"header\",null,{\"className\":\"legal-header\",\"children\":[[\"$\",\"$L6\",null,{\"className\":\"legal-brand\",\"href\":\"/\",\"aria-label\":\"Canvas home\",\"children\":[\"$\",\"img\",null,{\"src\":\"/brand/canvas-horizontal-reversed.svg\",\"alt\":\"\",\"width\":\"189\",\"height\":\"48\"}]}],[\"$\",\"nav\",null,{\"className\":\"legal-nav\",\"aria-label\":\"Legal navigation\",\"children\":[[\"$\",\"$L6\",null,{\"href\":\"/privacy\",\"children\":\"Privacy\"}],[\"$\",\"$L6\",null,{\"href\":\"/termsofuse\",\"children\":\"Terms of Use\"}],[\"$\",\"a\",null,{\"className\":\"legal-open\",\"href\":\"https://app.startwithcanvas.com/\",\"children\":\"Open Canvas\"}]]}]]}],[\"$\",\"main\",null,{\"id\":\"legal-content\",\"className\":\"legal-main\",\"children\":[[\"$\",\"div\",null,{\"className\":\"legal-hero\",\"children\":[[\"$\",\"p\",null,{\"className\":\"legal-eyebrow\",\"children\":\"Your information\"}],[\"$\",\"h1\",null,{\"children\":\"Privacy Policy\"}],[\"$\",\"p\",null,{\"className\":\"legal-summary\",\"children\":\"This policy explains what Canvas processes, why we process it, and the choices available to you across startwithcanvas.com, the Canvas app, and Canvas Clipper.\"}],[\"$\",\"p\",null,{\"className\":\"legal-effective\",\"children\":[\"Effective \",[\"$\",\"time\",null,{\"dateTime\":\"2026-08-17\",\"children\":\"August 17, 2026\"}]]}]]}],[\"$\",\"article\",null,{\"className\":\"legal-document\",\"children\":[[\"$\",\"section\",null,{\"children\":[[\"$\",\"h2\",null,{\"children\":\"1. Who operates Canvas\"}],[\"$\",\"p\",null,{\"children\":\"Canvas is operated by Bruce Stenberg, an individual doing business as Canvas, based in Philadelphia, Pennsylvania, United States (collectively, “Canvas,” “we,” “us,” or “our”). This Privacy Policy applies to startwithcanvas.com, app.startwithcanvas.com, the Canvas Clipper Google Chrome extension, and related support communications (the “Services”).\"}],[\"$\",\"p\",null,{\"children\":\"Canvas is the controller of personal information processed for its own purposes. If an organization provides your account, that organization may also control workspace information and your access to it.\"}]]}],[\"$\",\"section\",null,{\"children\":[[\"$\",\"h2\",null,{\"children\":\"2. Information we collect\"}],[\"$\",\"h3\",null,{\"children\":\"Information you provide\"}],[\"$\",\"ul\",null,{\"children\":[[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"Account and profile information:\"}],\" email address, display name, authentication records, account and workspace identifiers, role, permissions, and business-account details.\"]}],[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"Workspace content:\"}],\" board titles, notes, shapes, comments, tasks, files, images and other media, links, capture content, revisions, sharing settings, and collaboration activity that you or your collaborators submit.\"]}],[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"Communications:\"}],\" messages and information you send to support, sales, or privacy contacts, including feedback and troubleshooting material you choose to provide.\"]}]]}],[\"$\",\"h3\",null,{\"children\":\"Information collected when you use the Services\"}],[\"$\",\"ul\",null,{\"children\":[[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"Technical and usage information:\"}],\" IP address, approximate region derived from IP, browser and device type, operating system, page and feature interactions, timestamps, request and performance data, and diagnostic events.\"]}],[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"Session replay and diagnostics:\"}],\" in the Canvas web app we use Datadog to understand reliability and usability. This may reproduce interactions and visible interface state. We configure sensitive fields, including password, one-time-code, token, payment, and file-input fields, to be masked or excluded, and we scrub known account and content fields from diagnostic events. Please do not place sensitive personal information in board content or fields where it is not needed.\"]}],\"$L7\"]}]]}],\"$L8\",\"$L9\",\"$La\",\"$Lb\",\"$Lc\",\"$Ld\",\"$Le\",\"$Lf\",\"$L10\",\"$L11\"]}]]}],\"$L12\"]}]\n7:[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"Browser storage:\"}],\" cookies, local storage, session storage, and IndexedDB records used for sign-in, preferences, guest continuity, pending operations, media previews, and offline or resilient app behavior.\"]}
3]\n")</script>
3<script>self.__VINEXT_RSC_CHUNKS__=self.__VINEXT_RSC_CHUNKS__||[];self.__VINEXT_RSC_CHUNKS__.push("8:[\"$\",\"section\",null,{\"id\":\"canvas-clipper\",\"children\":[[\"$\",\"h2\",null,{\"children\":\"3. Canvas Clipper Chrome extension\"}],[\"$\",\"p\",null,{\"children\":\"Canvas Clipper has one purpose: it lets you deliberately preview and save content from the public page you are viewing into an authorized Canvas Capture Inbox. It does not continuously monitor your browsing.\"}],[\"$\",\"h3\",null,{\"children\":\"What the extension accesses\"}],[\"$\",\"p\",null,{\"children\":\"Only after you open the extension or choose a Canvas context-menu command, Canvas Clipper may read the current tab’s page title, canonical or current URL and domain, metadata description, selected text, one visible image candidate and its alternative text, or the focused link’s URL and text. Depending on what you choose, this information may be considered website content or web-history information. The extension also uses your Canvas account and workspace identifiers and a time-limited authorization token to save the confirmed capture.\"}],[\"$\",\"h3\",null,{\"children\":\"How permissions are used\"}],[\"$\",\"ul\",null,{\"children\":[[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"activeTab and scripting:\"}],\" temporarily inspect only the tab on which you invoked Canvas Clipper and build a local preview.\"]}],[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"contextMenus:\"}],\" provide Save page, Save selection, Save image, and Save link commands that you choose to invoke.\"]}],[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"storage:\"}],\" hold a pending preview, connection request, and time-limited Canvas connection in Chrome session storage.\"]}],[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"Canvas host access:\"}],\" connect only to authorized Canvas app origins to establish the connection and submit a capture you confirmed.\"]}]]}],[\"$\",\"p\",null,{\"children\":\"The extension displays a preview before saving, does not inject broad background content scripts, does not run remote code, and does not contact arbitrary websites. A pending draft is removed after a successful save or when its browser session ends. The resulting capture remains in Canvas as described under Retention below.\"}],[\"$\",\"h3\",null,{\"children\":\"Chrome Web Store User Data Policy\"}],[\"$\",\"p\",null,{\"children\":[\"Canvas Clipper’s use and transfer of user data complies with the\",\" \",[\"$\",\"a\",null,{\"href\":\"https://developer.chrome.com/docs/webstore/program-policies/user-data/\",\"children\":\"Chrome Web Store User Data Policy\"}],\", including the Limited Use requirements. Extension data is used only to provide or improve the user-facing clipping feature, maintain security, prevent abuse, and comply with law. We do not use it for advertising, creditworthiness, lending, or an unrelated purpose.\"]}]]}]\n9:[\"$\",\"section\",null,{\"children\":[[\"$\",\"h2\",null,{\"children\":\"4. How we use information\"}],[\"$\",\"p\",null,{\"children\":\"We use information to:\"}],[\"$\",\"ul\",null,{\"children\":[[\"$\",\"li\",null,{\"children\":\"provide, secure, maintain, and improve the Services;\"}],[\"$\",\"li\",null,{\"children\":\"authenticate users and preserve authorized account access;\"}],[\"$\",\"li\",null,{\"children\":\"store, synchronize, render, and share workspace content as directed;\"}],[\"$\",\"li\",null,{\"children\":\"complete user-confirmed Canvas Clipper captures;\"}],[\"$\",\"li\",null,{\"children\":\"send transactional messages and respond to requests;\"}],[\"$\",\"li\",null,{\"children\":\"diagnose failures, measure performance, and prevent fraud or abuse; and\"}],[\"$\",\"li\",null,{\"children\":\"comply with legal obligations and enforce our Terms of Use.\"}]]}],[\"$\",\"p\",null,{\"children\":\"Where applicable, we rely on performance of a contract, our legitimate interests in operating and securing Canvas, consent where required, and compliance with legal obligations.\"}]]}]\n")</script>
3<script>self.__VINEXT_RSC_CHUNKS__=self.__VINEXT_RSC_CHUNKS__||[];self.__VINEXT_RSC_CHUNKS__.push("a:[\"$\",\"section\",null,{\"children\":[[\"$\",\"h2\",null,{\"children\":\"5. How information is disclosed\"}],[\"$\",\"p\",null,{\"children\":\"We may disclose information in these limited circumstances:\"}],[\"$\",\"ul\",null,{\"children\":[[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"At your direction:\"}],\" to collaborators, guests, workspace owners, or the public when you choose sharing or publishing features.\"]}],[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"Service providers:\"}],\" Cloudflare for app hosting, delivery, storage, security, and selected AI infrastructure; PlanetScale for hosted database infrastructure; Mailgun for transactional email; and Datadog for performance, diagnostics, and session replay. They process information for us under contractual or technical restrictions.\"]}],[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"Legal and safety:\"}],\" when reasonably necessary to comply with law, legal process, or a valid government request; protect users, the public, or the Services; or investigate fraud, abuse, or security incidents.\"]}],[\"$\",\"li\",null,{\"children\":[[\"$\",\"strong\",null,{\"children\":\"Business transition:\"}],\" in connection with a financing, reorganization, acquisition, or sale, subject to appropriate safeguards and notice when required.\"]}]]}],[\"$\",\"p\",null,{\"children\":\"We do not sell personal information. We do not transfer personal information for cross-context behavioral advertising, determine creditworthiness, or provide lending services. Human access to private user content is limited to what is necessary for support you request, security or abuse investigation, legal compliance, or internal operations where access is strictly necessary.\"}]]}]\nb:[\"$\",\"section\",null,{\"children\":[[\"$\",\"h2\",null,{\"children\":\"6. Retention\"}],[\"$\",\"p\",null,{\"children\":\"We retain information only for as long as needed for the purposes described here, subject to technical, legal, security, backup, and dispute-resolution needs. Current product windows include:\"}],[\"$\",\"ul\",null,{\"children\":[[\"$\",\"li\",null,{\"children\":\"authentication challenges generally expire after 10 minutes;\"}],[\"$\",\"li\",null,{\"children\":\"web sign-in sessions generally expire after 14 days;\"}],[\"$\",\"li\",null,{\"children\":\"new guest continuity records may remain for up to 90 days;\"}],[\"$\",\"li\",null,{\"children\":\"Canvas Clipper connection credentials generally expire after 15 minutes;\"}],[\"$\",\"li\",null,{\"children\":\"Datadog diagnostic logs are configured for a 15-day retention period; and\"}],[\"$\",\"li\",null,{\"children\":\"active Canvas Clipper captures remain until you remove or archive them; archived captures are scheduled for purge after 30 days.\"}]]}],[\"$\",\"p\",null,{\"children\":\"Workspace content otherwise remains while the account or workspace is active or until it is deleted through an available product control. Browser-local data may remain until it expires, you clear it, or the browser evicts it. Canvas does not currently provide a fully automated account-erasure workflow; deletion requests are reviewed and completed using available technical controls. Limited copies may remain temporarily in backups or where retention is required by law, security, fraud prevention, or an unresolved dispute.\"}]]}]\nc:[\"$\",\"section\",null,{\"children\":[[\"$\",\"h2\",null,{\"children\":\"7. Security\"}],[\"$\",\"p\",null,{\"children\":\"We use administrative, technical, and organizational safeguards designed to protect information, including encrypted network transport, restricted authorization, secure session cookies, short-lived extension credentials, provider access controls, and diagnostic-data scrubbing. No system is completely secure, and we cannot guarantee absolute security.\"}]]}]\nd:[\"$\",\"section\",null,{\"children\":[[\"$\",\"h2\",null,{\"children\":\"8. Your choices and privacy rights\"}],[\"$\",\"p\",null,{\"children\":\"Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of personal information, and to withdraw consent. You may also have the right to appeal a de
3nied request or complain to a privacy regulator. We do not discriminate for exercising a privacy right.\"}],[\"$\",\"p\",null,{\"children\":[\"To make a request, email\",\" \",[\"$\",\"a\",null,{\"href\":\"mailto:[email protected]\",\"children\":\"[email protected]\"}],\". We may need to verify your identity and authority. Workspace owners may need to handle requests concerning an organization-controlled account.\"]}]]}]\ne:[\"$\",\"section\",null,{\"children\":[[\"$\",\"h2\",null,{\"children\":\"9. International use\"}],[\"$\",\"p\",null,{\"children\":\"Canvas is based in the United States. If you use the Services elsewhere, information may be processed in the United States and other countries where our providers operate. Where required, we use legally recognized safeguards for international transfers.\"}]]}]\nf:[\"$\",\"section\",null,{\"children\":[[\"$\",\"h2\",null,{\"children\":\"10. Age requirement\"}],[\"$\",\"p\",null,{\"children\":\"The Services are for people who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. Contact us if you believe a person under 18 has provided information to Canvas.\"}]]}]\n10:[\"$\",\"section\",null,{\"children\":[[\"$\",\"h2\",null,{\"children\":\"11. Changes to this policy\"}],[\"$\",\"p\",null,{\"children\":\"We may update this Privacy Policy as Canvas changes. We will post the revised policy here, update the effective date, and provide additional notice when a change materially affects your rights and applicable law requires it.\"}]]}]\n")</script>
3<script>self.__VINEXT_RSC_CHUNKS__=self.__VINEXT_RSC_CHUNKS__||[];self.__VINEXT_RSC_CHUNKS__.push("11:[\"$\",\"section\",null,{\"children\":[[\"$\",\"h2\",null,{\"children\":\"12. Contact\"}],[\"$\",\"p\",null,{\"children\":[\"Privacy questions and requests:\",\" \",[\"$\",\"a\",null,{\"href\":\"mailto:[email protected]\",\"children\":\"[email protected]\"}],[\"$\",\"br\",null,{}],\"General support:\",\" \",[\"$\",\"a\",null,{\"href\":\"mailto:[email protected]\",\"children\":\"[email protected]\"}],[\"$\",\"br\",null,{}],\"Bruce Stenberg, doing business as Canvas\",[\"$\",\"br\",null,{}],\"Philadelphia, Pennsylvania, United States\"]}],[\"$\",\"p\",null,{\"children\":[\"Your use of Canvas is also governed by the\",\" \",[\"$\",\"$L6\",null,{\"href\":\"/termsofuse\",\"children\":\"Terms of Use\"}],\".\"]}]]}]\n12:[\"$\",\"footer\",null,{\"className\":\"legal-footer\",\"children\":[[\"$\",\"$L6\",null,{\"href\":\"/\",\"aria-label\":\"Canvas home\",\"children\":[\"$\",\"img\",null,{\"src\":\"/brand/canvas-horizontal-reversed.svg\",\"alt\":\"\",\"width\":\"189\",\"height\":\"48\"}]}],[\"$\",\"p\",null,{\"children\":[\"© \",2026,\" Canvas\"]}],[\"$\",\"nav\",null,{\"aria-label\":\"Legal footer navigation\",\"children\":[[\"$\",\"$L6\",null,{\"href\":\"/privacy\",\"children\":\"Privacy\"}],[\"$\",\"$L6\",null,{\"href\":\"/termsofuse\",\"children\":\"Terms of Use\"}],[\"$\",\"a\",null,{\"href\":\"mailto:[email protected]\",\"children\":\"Contact\"}]]}]]}]\n")</script>
3<script>self.__VINEXT_RSC_DONE__=true</script>

Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.