Legal
Privacy Policy
What Canvas collects, why it is collected, how long it is kept and the choices you have about all of it.
What we collect
Account details you give us, the payments you make, and technical information your device sends when it connects: an approximate location, an app version and a device identifier.
We collect identity documents where the law requires us to verify who you are before you can hold a balance.
Why we collect it
To run your account, to move your money, to detect fraud, and to meet the obligations every regulated payment service has. We also use aggregated, non-identifying figures to work out which parts of the app need attention.
Who we share it with
Card networks and banks that settle your payments, identity-verification providers, and regulators when they compel us. We do not sell your data and we do not share it for advertising.
How long we keep it
Payment records are kept for as long as financial regulation requires, which is normally several years after an account closes. Everything not covered by that obligation is deleted when it is no longer needed.
Your choices
You can see and export your data from the app, correct anything that is wrong, and ask us to delete whatever we are not required to keep. Marketing messages can be switched off without affecting your account.