Canva Magic Studio — privacy & data policy

Provider: Canva. PromptPrivacy score: 52/100. Last verified November 01, 2026.

What happens to your data?

Canva processes your prompts, uploaded files, and designs to deliver Magic Studio features and by default analyzes this data to train machine learning models. Your information is stored globally and shared with third-party service providers, including AI sub-processors like OpenAI. Canva also shares user data with advertising networks for marketing and personalization unless opted out.

Does it train on your data?

Trains on your content by default, with an opt-out. Canva analyzes account activity, content, and uploaded media to train machine learning models and improve its AI products. Users can manage or disable AI training via their account privacy settings. For Canva Education accounts, user content is not used for AI training.

Can you opt out?

Yes. Users can opt out of having their data and content analyzed for AI model training via the privacy controls page under account privacy settings.

Data retention

Following account termination or deactivation, Canva retains user profile information and content for a 'commercially reasonable time' and for as long as there is a valid purpose, such as legal compliance, audits, and backups. The policy does not define specific retention periods for standard accounts.

Encryption & security

Not specified. Canva references using 'appropriate safeguards' and password authentication to secure data, but the policy does not explicitly mention encryption in transit (TLS), encryption at rest, or named security compliance certifications.

Is it safe for work?

Conditionally safe for business use. Because Canva uses uploads and designs for AI model training by default, organizations working with confidential or proprietary information should ensure that the AI training toggle is switched off in privacy settings, or use managed enterprise accounts covered by a Data Processing Addendum.

Source policy: https://www.canva.com/policies/privacy-policy/