Privacy Notice

Hanva, LLC operates Canvas Curator. For personal data processed through the Service, Hanva, LLC acts as the data controller and decides how and why that data is used.

• Painting images you upload or capture — processed to generate your identification result. Legal basis: performance of our contract with you.
• Search text you type — processed to generate your identification result. Legal basis: performance of our contract with you.
• Technical data (IP address, device and browser information, approximate country) — used to show prices and taxes for your country, to keep the Service secure, and to prevent fraud and abuse. Legal basis: legitimate interests.
• Usage and error telemetry — used to diagnose faults and improve the product. Legal basis: legitimate interests.
• Support messages — used to answer your questions. Legal basis: legitimate interests.

We do not require an account, and we do not collect or store your payment card details — those are handled by Stripe.

• Service providers — hosting, infrastructure and error monitoring providers that operate the Service on our behalf.
• AI processing — the image or text you submit is sent to our AI model provider to produce the identification result.
• Stripe — our payment processor, for payments, tax compliance and invoicing.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where we are required to disclose by law.

Images and search text are processed to produce your result and are not retained for longer than needed to deliver and support that result. Technical logs are kept for a short period for security and debugging. When data is no longer needed we delete or anonymise it.

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. Where the UK GDPR or EU GDPR applies you may also complain to your supervisory authority. Contact Hanva, LLC to exercise these rights; we aim to respond within one month.

We use appropriate technical and organisational measures, including encryption in transit and access controls, to protect personal data.

We use essential cookies and similar storage needed to run the Service and to complete checkout through Stripe. We do not use advertising cookies. You can manage or block cookies in your browser settings, though the checkout may not work without essential cookies.