Notion vs Canva
Side-by-side comparison of the Terms of Service and Privacy Policy of Notion and Canva.
Notion provides a solid set of privacy rights and opt-outs, but its privacy policy is expansive on collection, cross-device tracking, advertising, and sharing with third parties and organizations. The terms excerpt provided does not reveal other user protections or contract limits, so the overall picture is moderate rather than clearly user-friendly.
Notion’s legal posture is fairly standard for a modern SaaS product, with broad data collection for service delivery, analytics, marketing, and advertising. It offers meaningful privacy rights in many regions, including access, deletion, correction, portability, and opt-outs for marketing and some targeted advertising. However, it also discloses sharing with collaborators and organizations, international transfers, data retention tied to business/legal needs, and some ad-related sharing that may count as a sale under privacy laws.
Points of interest
-
negative ●●●●● privacyAd data may be sold
Notion says disclosure of browsing/device data to ad partners may count as a sale or sharing under privacy laws. For some users, that means their data can be used for targeted advertising unless they actively opt out.
-
negative ●●●●○ privacyBroad automatic tracking
The policy describes extensive automatic collection, including IP address, device identifiers, browsing activity, location, cookies, analytics, and cross-device tracking. That means Notion can build a fairly detailed usage profile.
-
negative ●●●●○ privacyShares data with organizations
If you use a workspace tied to an employer or organization, Notion may share profile details and workspace content with that organization. Users in workplace accounts should assume administrators may see a lot.
-
positive ●●●●○ privacyDeletion and access rights
Depending on where you live, you may be able to access, correct, delete, restrict, object to processing, and even transfer your data. That gives users real control, though requests can be denied in some cases.
-
positive ●●●●○ privacyPortability and appeal rights
The policy says some users can receive their electronic information in a transferable form, and residents in some places can appeal a denied privacy request. Those are useful enforcement rights if you run into a problem.
-
negative ●●●○○ privacyLong retention periods
Notion keeps data for as long as you use the service and afterward as needed for disputes, audits, legal obligations, and enforcement. That is common, but it means deletion is not immediate or absolute.
-
negative ●●●○○ privacyWide disclosure to others
Notion may disclose information to service providers, affiliates, business partners, advertising partners, legal authorities, and during mergers or asset transfers. Users should expect substantial third-party access in ordinary operations.
-
positive ●●●○○ privacyOpt-out for targeted ads
Notion lets users opt out of certain targeted advertising and sale/sharing via settings or a footer link. That helps reduce ad profiling, though it does not stop all advertising or all data collection.
-
positive ●●●○○ privacyNo DNT response, GPC honored
Notion says it does not respond to Do Not Track signals, but it does honor legally recognized browser opt-out signals like Global Privacy Control. That is better than ignoring browser-based privacy preferences entirely.
-
negative ●●○○○ privacyPolicy can change unilaterally
Notion says it may revise the Privacy Policy in its sole discretion and continued use counts as acceptance after the change takes effect. That gives the company significant power to update terms without individual consent.
-
neutral ●●○○○ termsTerms excerpt incomplete
The provided Terms of Service summary does not include the actual substantive contract terms, so key issues like arbitration, liability limits, refunds, or termination cannot be assessed from this excerpt. Users should review the full terms before signing up.
Documents
Canva combines useful transparency and some user controls with notable limits on liability, dispute rights, data collection, and billing defaults. The presence of opt-outs, private-by-default designs, and export/deletion options helps, but the arbitration clause, auto-renewal, and broad privacy/usage permissions keep it from feeling strongly user-friendly.
Canva’s legal terms are fairly standard for a productivity platform but include several user-unfriendly defaults: broad content licenses, auto-renewing subscriptions, arbitration/class-action waiver, substantial data collection, targeted advertising, and workplace/team admin control over content. On the positive side, Canva says user content ownership stays with users, offers privacy controls and export options, uses private-by-default designs, and provides deletion/rights request channels. Education accounts get stronger protections, including no student advertising and no student data sales.
Points of interest
-
negative ●●●●● termsMandatory AAA arbitration
Most disputes must go to individual binding arbitration instead of court, and users waive class actions and jury trials. This significantly limits collective legal remedies and makes it harder to bring a public lawsuit.
-
negative ●●●●○ termsSubscriptions auto-renew
Paid plans renew automatically each billing cycle unless canceled, and cancellations only stop future charges at the end of the current cycle. Users should watch renewal dates closely because refunds for paid time are generally unavailable.
-
negative ●●●●○ termsBroad content license
Canva keeps your ownership, but it gets a royalty-free, sublicensable license to host, copy, store, display, and use your content to provide the service. Shared designs can carry an even more durable license so the design stays available.
-
negative ●●●●○ termsWork admins can control content
If you use a managed or team account, an employer or team administrator may access, transfer, delete, or reassign your account content and designs. That means work-created content may not remain private from the organization controlling the account.
-
negative ●●●●○ privacyExtensive tracking and advertising
Canva collects device, cookie, location, and activity data and uses it for personalization, analytics, AI features, and marketing/personalized ads. It also shares certain data with ad partners to measure and target advertising.
-
negative ●●●●○ privacyLong post-termination retention
After an account ends, Canva may keep profile information and user content for a commercially reasonable period for legal, audit, backup, and archival purposes. Users should not expect immediate full deletion of all data.
-
positive ●●●○○ privacyPrivate by default designs
Canva says designs are private by default, which is a helpful baseline for personal or sensitive work. Users still need to be careful with link-sharing and team collaboration, which can expose content to others.
-
positive ●●●○○ termsExport before deletion
Unless an account is terminated for a violation, users can download or export their User Content and designs before the account ends. That gives a practical portability path if you want to leave the service.
-
positive ●●●○○ privacyControls for privacy and AI
Canva lets users manage marketing preferences, some cookie settings, third-party enrichment, and AI training-related preferences. This gives meaningful though not complete control over how data is used.
-
positive ●●○○○ privacyNo student ad targeting
Canva Education states that students are not served advertising and that student data is not sold. That is a notable protection for education users compared with the main service.
Documents
Comparison is based on each service's published Terms of Service and Privacy Policy. Read the source documents linked above before relying on any specific clause.