Last updated 10 Nov 2026 · Operated by [Registered business name] (trading as Canvasnet)
1. Who is responsible
[Registered business name], trading as Canvasnet, is responsible for your personal data. Contact: [email protected].
2. What we collect
- Account details: name, email, password (stored only as a secure hash), phone number and city if you add them.
- Orders and payments: what you bought, amounts, receipts; for payments, the method, the mobile number you entered for JazzCash/Easypaisa, the payment reference and the account title our payment provider reports. We never receive your PIN, OTP, card number or banking password.
- Project information: briefs, files and messages you send us to deliver a service.
- Support: messages you send us and our replies.
- Security logs: IP address, browser type, sign-in times and actions on your account, to keep accounts and payments safe.
Photos you edit: we don’t collect them. They are processed in your browser and stay on your device.
Cloud projects (Pro only): the image, editing state and preview you choose to save, with their sizes and dates.
3. Why we use it (and our legal basis)
- To provide what you ordered and support you (performing our contract with you).
- To take payments, prevent fraud and money laundering, and keep records for tax and accounting (legal obligations and legitimate interests).
- To keep the Site secure and working (legitimate interests).
- To send you news or offers — only if you opted in. You can opt out at any time from your profile or any such email.
4. Who we share it with
- Our payment provider and the banks/wallets involved, to process payments and refunds.
- Our hosting and email providers, who store and send data for us under contract.
- Professional advisers (lawyers, accountants, auditors) where needed.
- Authorities, when the law requires it — for example tax authorities or the Financial Monitoring Unit.
We don’t sell your personal data or share it for advertising.
5. How long we keep it
- Account data: while your account is open. When you delete your account we remove or anonymise your profile.
- Order, invoice and payment records: for the period tax and anti-money-laundering laws require (generally up to 10 years), even after you delete your account.
- Security logs: up to 12 months. Support messages: up to 3 years.
6. Your rights
You can access, correct, download (Account → Privacy & data → Download my data) or delete your data, object to marketing, and ask us questions about how we use it. If you’re not satisfied with our answer, you may complain to the relevant authority in Pakistan.
7. Security
We use HTTPS everywhere, hash passwords, encrypt sensitive data (such as payment credentials and identity documents) at rest, offer two-factor sign-in, and limit staff access to what they need. No system is perfectly secure; if we learn of a breach affecting you we will tell you without undue delay.
8. Cookies
We use only essential cookies. See our Cookie Policy.
9. Changes
We’ll post any changes here and update the date at the top. Significant changes will be emailed to account holders.
Image editing happens on your device
When you open a photo in the editor, it is read and edited by your web browser on your own phone or computer. Your image never leaves your device unless you save it to the cloud. We don’t upload, see or keep the photos you edit locally, and the editor uses no analytics or tracking. Closing the tab discards them.
Batch resizing works the same way: the images are resized and zipped in your browser, and the ZIP is saved straight to your device.
Cloud projects (Pro, only when you choose to save)
If you have Pro and press Save to cloud, we store that project: the image, its editing state (adjustments, text, shapes, drawings) and a small preview. They are stored on our hosting provider’s servers, outside the public part of the website, and only your signed-in account can open them. Staff don’t browse your projects; we look at one only to investigate a report under our Content Policy or when the law requires it.
- Limits: 2 GB in total and 25 MB per file.
- You can rename, download or delete any project at any time from Account → Cloud projects. Deleting removes the files from our servers.
- If your Pro plan ends, your projects are kept for 180 days so you can buy Pro again or download them. We email you 14 days before they are deleted.
- If you delete your account, your cloud projects are deleted 30 days later.
Questions about this policy? Email [email protected] or use our contact form.