Privacy policy
This policy explains what information Kanvo collects, why, and what you can do about it. Kanvo is a tool for freelancers, studios and small teams to manage quotes, projects, monthly packages, content plans and invoices. If anything here is unclear, email hello@getkanvo.com.
The short version
- We collect what you give us to run your account, plus a little technical information to keep the service working.
- We don't sell your data, and we don't use advertising cookies or trackers.
- The business information you add, like your clients, quotes and invoices, belongs to you. We store it so you can use Kanvo.
- You can download a full backup of your data at any time, and ask us to delete your account.
Information we collect
Your account
When you sign up we collect your name, email address, password (stored only as a secure hash by our sign-in provider), your studio or company name, and, if you choose, your phone number and your role. If you upload a logo or profile picture, we store the image.
The work you add
Kanvo stores what you enter so you can use it: clients and their contact details, quotes, projects, monthly packages, invoices, payments, expenses, time entries, content plans, captions, post images and ad plans. Some of this is information about your own clients. You decide what to add, and you are responsible for having the right to share it with us (see "Your clients' information" below).
Client links
When you send a client a quote link or a dashboard link, the client can read what you chose to share, accept or decline, approve posts or ask for changes. We store their answers and the name and note they type, and count how often the link is opened.
Teams
If you set up a team, we store the email addresses and roles of the people you invite, and the messages posted in your team chat.
Feedback
If you send feedback from the app, we store your message, which screen you were on, and basic device details (screen size and browser), so we can understand and fix the problem.
Technical information
Like most websites, our hosting provider processes your IP address and browser details to deliver pages and protect against abuse. We record when you last signed in. On our public website we use Cloudflare Web Analytics, which counts visits without cookies and without building a profile of you.
How we use it
- To provide Kanvo: show your data, sync it across your devices, create PDFs and client links, and run team features.
- To review and approve new accounts, and to manage plans and access.
- To answer your messages and feedback.
- To keep Kanvo secure, prevent misuse, and fix problems.
- To send you important service emails, such as account confirmation and password resets.
We don't use your data for advertising, and we don't sell it.
Who can see your information
- You, and people in your team if you set one up. Everyone in a team sees the same clients and work.
- Your clients see only what you put on a quote link or dashboard link you send them. Anyone who has the link can open it, so share links only with the right people. You can turn links off at any time.
- Images you add to posts and your logo are stored with random file names and can be opened by anyone who has their exact address, so they can appear on client pages and PDFs.
- Kanvo administrators can see account details (name, email, phone, studio, plan and status) and simple counts, such as how many clients and invoices an account has. We only look at the content of your work if you ask us to help, or if we must to keep the service secure or obey the law.
Service providers
We use a small number of trusted providers to run Kanvo. They process data only on our behalf:
- Supabase: database, sign-in and file storage. Your data is stored in Supabase's Mumbai, India region (AWS ap-south-1).
- Cloudflare: website hosting, security, email forwarding for our addresses, and cookie-free visit counts.
- Google Fonts, jsDelivr and cdnjs: fonts and code libraries that your browser loads when you open Kanvo. These providers receive your IP address as part of that request.
When you use buttons that open WhatsApp or your email app, the message is sent by that app, under its own terms.
Cookies and local storage
Kanvo uses your browser's local storage to keep you signed in and to remember small preferences, such as which help guide you opened. We don't use advertising or tracking cookies, so we don't show a cookie banner.
Your clients' information
For the client information you add to Kanvo, you decide what is collected and why, and Kanvo processes it on your behalf to provide the service. Please make sure you have a good reason and, where needed, permission to store your clients' details, and tell them how you use their information.
How long we keep it
We keep your data while your account is open. If you delete something in Kanvo it is removed from your account straight away. If you ask us to delete your account, we delete your data within 30 days, except where we must keep something by law. Copies in short-term backups are removed as those backups expire.
Your choices and rights
- See and download your data at any time from Settings, under "Your data".
- Correct your details in Settings, or ask us to.
- Delete your account by emailing hello@getkanvo.com from your account's email address.
- Ask questions or object to how we use your data by emailing us.
Depending on where you live, you may have further rights under local data protection law. We'll respond to requests within 30 days.
Security
Data is sent over encrypted connections. Each account can only reach its own data, enforced by the database itself, and team access is checked on every request. Client links use long random codes. No system is perfectly secure, so use a strong password and don't share your sign-in.
Children
Kanvo is for businesses and isn't meant for anyone under 16.
Changes
If we change this policy, we'll update the date at the top. For important changes we'll tell you in the app or by email before they take effect.
Contact
Email hello@getkanvo.com.