Security and your data
How Kanvo keeps your client work private, and how you can take it with you.
Your data stays yours
We never sell your data or show ads. Your clients, quotes, projects and invoices are used only to run Kanvo for you.
Each account sees only its own data
Kanvo runs on Supabase (managed PostgreSQL). Row-level security rules mean every request can only read and change the data of the account it belongs to, or the team it was invited to.
Encrypted on the way and at rest
Every page and request uses HTTPS. The database and file storage are encrypted at rest by our infrastructure provider.
Passwords are never stored in plain text
Sign-in is handled by Supabase Auth, which stores passwords as salted hashes.
Private client links you control
Quote and dashboard links use long random codes that cannot be guessed. Turn a client's dashboard link off at any time.
Back up and leave any time
Download a full backup of your data from Settings on every plan. Ask us to delete your account and everything in it by emailing hello@getkanvo.com.
No tracking cookies
We use Cloudflare Web Analytics, which counts visits without cookies and without following you across sites.
No card details
Kanvo does not take or store card numbers. During early access, paid plans are switched on by hand.
Questions about security or privacy? Email hello@getkanvo.com. Read the full privacy policy.