Terms governing the integration of Canva with Learning Management Systems (LMS)
Overall Score
Risk by Category
This policy outlines the terms and conditions for integrating Canva's services with Learning Management Systems (LMS) such as Canvas, Moodle, and others. It covers license grants, user responsibilities, data handling, intellectual property rights, termination, and compliance with applicable laws. The terms emphasize secure integration, limited data sharing, and protection of user content while allowing educational use.
Canva may access certain LMS data necessary for integration functionality.
Users retain ownership of content, but grant Canva broad licenses for integration.
Tailored for non-commercial educational use with permissive licenses.
Easy opt-out and data deletion upon termination.
Spotify collects the following categories of personal data. High Risk categories are used for advertising profiling or involve sensitive personal information.
Collection of user IDs, course data for authentication and embedding.
Design usage within LMS contexts.
Your data serves the following purposes. Mandatory purposes cannot be disabled without canceling the service. Opt-out available purposes allow some user control.
Data shared between Canva and LMS for embedding designs and assignments.
Aggregated data for improving integration performance.
Spotify shares data with several categories of third parties. Sharing with advertising partners is extensive and represents the primary commercial use of your behavioral data.
Data shared with selected LMS for integration purposes.
Limited sharing with Canva's subprocessors for hosting.
The following rights may be available to you depending on your region. EU/EEA users have the broadest protections under GDPR. Non-EU users have more limited guarantees.
Right to access, export, and delete integrated content.
Ability to disable integration at any time.
Data is retained for different periods depending on category, and security disclosures vary in depth. The policy highlights the following retention and transparency points.
Retention Periods
Retained as long as integration is active.
Data deleted within 30 days of termination, except for compliance records.
Security & Transparency
Secure API-based authentication for integrations.
All transmitted data encrypted in transit.
Source Text
Users grant Canva a worldwide, non-exclusive license to host and display content within LMS.
Interpretation
Broad but necessary for functionality; revocable upon termination.
Source Text
Canva acts as processor for LMS data; complies with GDPR/CCPA.
Interpretation
Strong privacy commitments with DPA available.
Source Text
Immediate suspension; data purge required.
Interpretation
Strict but protective of user data.
Integrations with Canvas, Moodle, Schoology, Google Classroom, and others.