CanvasLink

Privacy Policy

Last Updated: March 30, 2026

TANGENT TECH LLP ("Company", "we", "us", or "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, https://canvaslink.app/, and use our hosting services and software platform (collectively, the "Service").

This Privacy Policy complies with the Singapore Personal Data Protection Act (PDPA) and outlines your rights regarding your personal data. By accessing or using the Service, you consent to the data practices described in this policy.

1. Information We Collect

We collect several types of information from and about users of our Service:

A. Information You Provide Directly to Us

Account Information: When you register for an account, we collect your email address and password. If you choose to register via a third-party service (e.g., Google Sign-In), we receive your name, email address, and profile picture from that provider.

Profile Information: If you utilize "Creator Profiles," we collect the usernames, bios, links, or other information you choose to display.

User-Generated Content: We collect and store the HTML, CSS, JavaScript code, and assets you upload or paste into the platform to host your web pages.

Billing Information: If you subscribe to our paid services, our third-party payment processors collect your payment details (e.g., credit card information). We do not store your full credit card number on our servers.

Support Data: If you contact us at [email protected], we collect your email address, message contents, and any other information you provide.

B. Information Collected Automatically

When you access the Service or when end-users visit the web pages you host through CanvasLink, our infrastructure automatically collects certain technical data:

Log and Usage Data: IP addresses, browser types, operating systems, referring URLs, device information, and timestamps of visits.

Analytics Data: Information regarding how you interact with the CanvasLink dashboard and audience insights regarding the traffic to your hosted pages.

2. How We Use Your Information

We use the collected information for the following purposes:

  • To Provide and Maintain the Service: Creating your account, authenticating your logins, and hosting your code.
  • To Process Payments: Managing subscriptions, billing, and order fulfillment for CanvasLink Pro.
  • To Improve the Service: Analyzing usage trends to optimize our platform's performance and develop new features.
  • To Communicate With You: Sending you administrative emails, technical notices, security alerts, and responses to your support inquiries.
  • Security and Abuse Prevention: Monitoring for malicious activity, enforcing our zero-tolerance Acceptable Use Policy (e.g., detecting phishing scams or malware), and protecting our infrastructure.
  • Legal Compliance: Complying with applicable laws, regulations, and lawful requests from law enforcement.

3. How We Share Your Information

We do not sell, rent, or trade your personal information. We only share your data under the following circumstances:

A. With Essential Service Providers (Data Intermediaries)

We rely on trusted third-party services to operate CanvasLink. These providers only process your data on our behalf and are strictly governed by their own data processing agreements:

  • Google Firebase & Firestore: We use Firebase Authentication to securely manage user sign-ups and logins. We use Google Firestore to store your account details, metadata, and user-generated content.
  • Cloudflare: We use Cloudflare as our Content Delivery Network (CDN), DNS provider, and security firewall. Traffic to CanvasLink and your hosted pages is routed through Cloudflare to optimize speed and protect against DDoS attacks and malicious bots.
  • Payment Processors: We share necessary billing information with secure payment gateways (e.g., Stripe) to process Pro tier subscriptions.

B. For Legal and Safety Reasons

As stated in our Terms of Service, we have a zero-tolerance policy for abuse. We will disclose your personal data, IP addresses, and uploaded content:

  • To law enforcement agencies (including the Singapore Police Force or international authorities) if we suspect the platform is being used for illegal activities (e.g., hosting scams, phishing, or illicit material).
  • To comply with a valid court order, subpoena, or legal obligation.
  • To protect the rights, property, or safety of TANGENT TECH LLP, our users, or the public.

C. Business Transfers

If TANGENT TECH LLP is involved in a merger, acquisition, or asset sale, your personal data may be transferred as a business asset. We will provide notice before your personal data is transferred and becomes subject to a different Privacy Policy.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information.

  • Essential Cookies: Necessary to authenticate users and prevent fraudulent use of user accounts.
  • Analytical Cookies: Used to track information on how the Service is used so we can make improvements.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept essential cookies, you may not be able to log into or use some parts of our Service.

5. Data Security

We take the security of your data seriously. We utilize industry-standard security measures, including HTTPS encryption, secure cloud infrastructure (Google Cloud/Firebase), and robust web application firewalls (Cloudflare) to protect your personal information from unauthorized access, modification, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. International Data Transfers

TANGENT TECH LLP is based in Singapore. However, the Service is hosted globally using Cloudflare's edge network and Google Cloud (Firebase/Firestore) servers, which may be located in the United States or other international regions. By using the Service, you consent to the transfer, storage, and processing of your information across international borders, in accordance with this Privacy Policy.

7. Data Retention

We will retain your personal data and hosted files only for as long as is necessary for the purposes set out in this Privacy Policy, or as required to comply with our legal obligations, resolve disputes, and enforce our legal agreements. If you delete your account, your code and associated personal data will be purged from our active databases, subject to routine backup deletion cycles.

8. Your Privacy Rights (PDPA & Global Rights)

Depending on your location, and in accordance with the Singapore PDPA, you have the following rights regarding your personal data:

  • Access: You have the right to request a copy of the personal data we hold about you.
  • Correction: You have the right to request that we correct any inaccurate or incomplete data.
  • Withdrawal of Consent / Deletion: You have the right to withdraw your consent for us to process your data and request the deletion of your account and associated personal data.
  • Portability: You may request your data in a structured, commonly used format.

To exercise these rights or delete your account: You can delete your account directly from your CanvasLink dashboard. For other data requests, please contact our Data Protection Officer (DPO) at [email protected].

9. Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personally identifiable information from children under 13. If a parent or guardian becomes aware that their child has provided us with Personal Data without their consent, they should contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we take steps to remove that information from our servers.

10. Links to Other Websites

Pages hosted by CanvasLink users may contain links to other websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services hosted by our users or linked to from our platform.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We may also notify you via email of significant changes. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, or if you wish to make a request regarding your personal data under the PDPA, please contact us at: