Privacy Policy

When you use Canvas Buddy we collect:

• Account info — email address and authentication state, handled by our auth provider Clerk.
• Source artwork — images you upload or generate with AI to render into a Canvas video.
• Rendered output — the MP4 we render for you, plus a thumbnail.
• Usage state — counters for your monthly video and AI-generation quotas.
• Billing info — handled entirely by Stripe; we store only the customer/subscription identifier and your plan. We never see your card number.
• Server logs — IP address, user agent, request paths, retained for ~30 days to debug abuse and outages.

We use your data only to operate Canvas Buddy: render your videos, enforce quotas, bill your plan, send transactional emails (Pro upgrade confirmation, watermark-removal receipts), and prevent abuse.

We do not sell your data. We do not show ads. We do not train AI models on your content.

Source images, rendered MP4s, and thumbnails live in Supabase Storage (US-East). Account metadata and usage counters live in Supabase Postgres. Payment data lives at Stripe. Authentication state lives at Clerk.

All requests are TLS-encrypted in transit. Storage objects are private — your videos are only accessible via short-lived signed URLs tied to your account.

• Clerk — authentication
• Supabase — database + file storage
• Stripe — payments + subscription billing
• Fly.io — server hosting
• Cloudflare Turnstile — bot prevention
• fal.ai — AI image generation (Flux Pro 1.1)
• Resend — transactional email

Access — your library at canvasbuddy.io/app is the current view of everything we hold about you that's user-facing.

Deletion — click the trash icon on any canvas in your library to remove the row and underlying files immediately. To delete your entire account and all associated data, email hi@canvasbuddy.io — we act within 24 hours.

Portability — download your MP4s anytime from the library; that's all the user-generated content we hold.

We use only first-party cookies needed for authentication and session management (set by Clerk). No tracking cookies, no third-party advertising cookies.

Canvas Buddy is not intended for users under 13. We don't knowingly collect data from children. If you believe a child has created an account, email us and we'll remove it.

When we update this policy, we'll bump the date at the top and email anyone with an active subscription if the change is material.

Privacy questions: hi@canvasbuddy.io