Privacy Notice

The Simple Version

Canvo turns your photos and a prompt into generated images and designs. We collect your account details and the images you upload, use Paddle to process payments, and use fal.ai and Google/Gemini only to run the generation features you ask for. We don't sell your data.

1. Who Controls Your Data

The data controller for personal data collected through Canvo is Shiref Abouzaid, an individual sole proprietor, registered at [REGISTERED ADDRESS], Egypt.

For any privacy question or request, contact our privacy contact at shiref.abouzaid@gmail.com.

2. What We Collect, and Why

• •Account and authentication data (name, email address, password hash or OAuth identifier) — used to create and secure your account. Legal basis: performance of our contract with you.
• •Uploaded images and prompts — used to generate the images, designs, or on-model/product photography you request. Legal basis: performance of our contract with you.
• •Usage and credit-balance data (generation history, credits spent and remaining, device/browser type, IP address, timestamps) — used to run the credits system, keep the Service secure, and improve it. Legal basis: performance of our contract with you; our legitimate interest in securing and improving Canvo.
• •Payment metadata (order ID, billing country, payment status, and similar order details received from Paddle — never your full card number) — used to process your purchase, keep financial records, and provide support. Legal basis: performance of our contract with you; compliance with our legal and tax obligations.

3. How We Use Your Information

We do not sell your data, and we do not share your uploaded or generated images with marketers.

• •To generate and deliver the images and designs you request.
• •To process payments and manage your credit balance.
• •To operate, secure, maintain, and improve Canvo.
• •To respond to support requests.
• •To comply with legal and tax obligations.

4. How Long We Keep Your Data

• •Account data and uploaded/generated images: for as long as your account is active, plus up to 30 days after you delete a design or close your account, to allow for backup rotation.
• •Payment and transaction records: up to 7 years, as required by Egyptian tax and accounting law.
• •Support communications: up to 2 years after the request is resolved.

5. Who We Share It With

We share personal data only with the following recipients, each acting under its own agreement with us, and only to the extent needed for the purpose stated:

• •Paddle.com — processes payments as our Merchant of Record and never shares your full card details with us.
• •fal.ai — runs the AI models that generate images from the photos and prompts you submit.
• •Google / Gemini — provides optional sign-in (OAuth) if you choose to log in with Google, and powers the AI vision analysis used to detect and describe products you upload for AI product photography.
• •Cloudflare — hosts our application, database, and uploaded or generated images.
• •Our professional advisers (accountants, auditors, and lawyers), who are bound by confidentiality.
• •Courts, regulators, tax, or law-enforcement authorities, where we are legally required to disclose data to them.

6. Cookies

We use essential cookies to keep you signed in and to remember preferences like language and theme. We do not use third-party advertising cookies.

7. Your Rights

You can access, correct, export, or delete your personal data by contacting us at shiref.abouzaid@gmail.com, or directly from your account settings where available.

8. If You Are in the UK or the EEA

Canvo is operated from Egypt, and your data may be transferred to and processed in Egypt and by the subprocessors listed in Section 5, some of which are located outside the UK and the European Economic Area. Where that is the case, we rely on recognized safeguards — such as the European Commission's Standard Contractual Clauses, the UK's International Data Transfer Agreement, or an applicable adequacy decision — to protect that transfer.

In addition to the rights in Section 7, if you are located in the UK or the EEA you have the right to: access your data; rectify inaccurate data; erase your data; restrict its processing; receive it in a portable format; object to processing based on our legitimate interest; and withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with your local data protection supervisory authority.

We aim to respond to any request under this section within one month of receiving it.

9. Security

We apply administrative, technical, and physical safeguards appropriate to the data we hold, including encrypted storage and restricted access to production systems. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

10. Children's Privacy

Canvo is not directed at children. You must be at least 18 years old to create an account.

11. Where Your Data Is Processed

Canvo is operated from Egypt. If you access Canvo from outside Egypt, your information will be processed in Egypt and by the subprocessors listed in Section 5, which may be located in other countries — see Section 8 for the safeguards that apply if you are in the UK or EEA.

12. Changes to This Notice

We may update this Privacy Notice from time to time. We will post the updated version here with a new "last updated" date, and will notify you of material changes.

13. Contact Information

Questions about this Notice, or a request about your data? Reach our privacy contact at shiref.abouzaid@gmail.com.