1. Introduction
Shared Canvas ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered writing platform at sharedcanvas.ai (the "Service").
We respect your privacy and work to keep your data private and anonymous. We do not collect your document content or chats for analytics, advertising, sale, or model training.
2. Information We Collect
2.1 Information You Provide
- Account information (email address, name) when you sign up
- Communications with our support team
- Feedback and survey responses
2.2 Documents and Chats
Your documents and chats are your private workspace. Shared Canvas does not collect document content or chat content for analytics, advertising, sale, or model training, and we do not review them as part of normal operations.
If a chat fails, produces an error, or triggers a technical fault, that error may be flagged for review so we can diagnose and fix the issue. We keep that review limited to what is needed to understand the failure. This ordinary product-error review does not include raw or derived Google Workspace data. The narrower human-access rules in section 2.3 always control that data.
2.3 Information from Google
When you authenticate using Google Sign-In, we receive your basic profile information including your name, email address, and profile picture. We use this information solely for account creation and authentication purposes.
Gmail, Google Calendar, and Google Drive are optional connectors when they are available to your account. Each service is connected separately and receives its own encrypted authorization credential. Shared Canvas reads Google data only after you connect the relevant service and ask the assistant to use it, or when an automation you configured runs.
Shared Canvas's use and transfer of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Gmail access is read-only. Shared Canvas searches matching messages and currently returns message metadata—including sender, recipient, subject, and date—and Google's short message snippets. Google Calendar access is read-only and limited to events on calendars you own; Shared Canvas searches your primary calendar and returns at most 25 matching events per search. Google Drive access is read-only; Shared Canvas searches file metadata and exports Google Docs only when you ask it to read them. Shared Canvas does not send email, create or modify Calendar events, or create, modify, or delete Drive files.
We request and process Google Workspace data only when you use the connected feature. Relevant excerpts may be sent only to an eligible directly contracted AI provider solely to produce the response you requested. If the model you selected is not eligible for Google data, Shared Canvas stops before reading Google and asks you to choose an eligible model. Raw or derived Google Workspace data is never sent through OpenRouter. Neither Shared Canvas nor its eligible AI providers use Google Workspace data to develop, improve, or train generalized or other non-personalized AI or machine-learning models. We do not send raw or derived Google Workspace data to analytics services or use it for ordinary product-error review.
Google-derived results are private unless you direct Shared Canvas to save them in a Canvas or chat that already has collaborators, or you later choose to share that Canvas. In those cases, only the collaborators you choose can see the saved results. Shared Canvas does not otherwise disclose one user's Google Workspace data to another user.
We do not permit people to read your Google Workspace data except when you ask us to inspect specific data for support, when access is necessary to investigate abuse or a security incident, when required by law, or when the data has been aggregated and anonymized for internal operations. Access is limited to the data and time necessary for that purpose.
We store each encrypted authorization credential only while its connection remains active. Disconnecting Gmail, Google Calendar, or Google Drive in Shared Canvas deletes the stored credential for that service and stops its future access. You can also revoke Shared Canvas from your Google Account's third-party connections page; Google may revoke the project-wide grant for all connected Google services together.
Disconnecting a Google service does not erase Google-derived content you chose to save in a Canvas or chat. That saved content remains under your control until you delete the Canvas or chat, or delete your Shared Canvas account. Account deletion removes stored Google connections and saved Google-derived content under the account deletion terms in section 6.
This section 2.3 controls any conflicting or more general statement anywhere else in this policy. No general clause about service operation, improvement, providers, analytics, error review, legal rights, business transfers, or policy changes creates broader permission to access, use, retain, or transfer Google Workspace data. A merger, acquisition, or asset transfer may include that data only after your explicit prior consent. If we propose a new purpose for Google Workspace data, we will notify you and obtain renewed affirmative consent before using it for that purpose.
2.4 Automatically Collected Information
- Device information (browser type, operating system)
- Limited observability data needed to monitor reliability and performance
- Log data such as access times and pages viewed
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the Service
- Process and complete transactions
- Send you technical notices and support messages
- Provide the Gmail, Google Calendar, and Google Drive integrations that you explicitly connect and use
- Respond to your comments and questions
- Understand product reliability without collecting document or chat content
- Detect, prevent, and address technical issues
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: With trusted third-party services that help us operate our platform (e.g., cloud hosting, analytics). Google Workspace data is shared only as described in section 2.3 to deliver the connected feature you requested
- AI Processing: Content you choose to send to AI features may be processed by AI providers only to deliver the requested response
- Connected Services: Google Workspace data is used only to provide the connected integration you enabled and is not used for advertising, sale, or model training
- Error Review: Failed chats or technical errors may be flagged for limited review so we can diagnose and fix issues, excluding raw or derived Google Workspace data except under the narrower human-access conditions in section 2.3
- Legal Requirements: When required by applicable law or valid legal process, or when necessary to investigate abuse or a security incident
- Business Transfers: In connection with a merger, acquisition, or sale of assets. Google Workspace data is included only after your explicit prior consent
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- Encryption of data in transit (TLS/SSL)
- Encryption of data at rest
- Regular security assessments
- Access controls and authentication
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with our services. You can delete your account and associated data from Settings > Security inside Shared Canvas, or contact us for help. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law. Limited observability data is stored temporarily and deleted after seven days.
For Google Workspace connectors specifically, each encrypted connection credential is retained only while that service is connected and is deleted when you disconnect the service or delete your account. Google-derived content you choose to save in a Canvas or chat follows that saved content's normal retention and remains until you delete the Canvas or chat, or delete your account.
7. Your Rights
You have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Export your documents and data
- Withdraw consent for data processing
8. Cookies and Tracking
We use essential cookies to maintain your session and remember your preferences. We may use analytics tools to understand how users interact with our Service, but we do not send document, chat, or raw or derived Google Workspace content to those tools. You can control cookie settings through your browser preferences.
9. Children's Privacy
Shared Canvas is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. If a change would introduce a new purpose for Google Workspace data, we will notify affected users and obtain renewed affirmative consent before that use begins. For other changes, your continued use of the Service after notice constitutes acceptance of the new policy.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at: