Privacy Notice

Marcus Hall, trading as CanvasLens is the data controller for the personal data described here. Questions or requests: canvaslens.io@gmail.com.

What we collect

• Account data — name and email address you sign up with, plus login credentials managed by our authentication provider.
• Content you capture — screenshots or screen frames you share for analysis. Frames are read to generate an explanation and then discarded; your saved questions and answers stay in your history until you delete them.
• Usage data — read counts, plan status, subject tags, and basic diagnostics needed to run the service and prevent abuse.
• Billing data — handled by our Merchant of Record (Paddle); we receive your subscription status, not your card details.

Why we use it

• To create your account and provide the service (contract performance).
• To meter reads, prevent abuse, and keep the service secure (legitimate interests).
• To process payments and comply with tax and accounting rules (legal obligation).
• To improve the product based on aggregated, non-identifying patterns (legitimate interests).

Who we share it with

• Service providers: hosting, authentication, email delivery, and AI analysis providers.
• Paddle.com, our Merchant of Record, for the sale of the product, subscription management, payments, tax compliance, and invoicing.
• Professional advisers (legal, accounting) and authorities where required by law.

Retention and security

Your saved reads stay until you delete them (individually, by clearing history, or by deleting your account, which removes them immediately). Diagnostic logs are kept for a limited period and then deleted or anonymized. We use encryption in transit, access controls, and row-level security so your data is only readable by you.

Your rights

Depending on where you live, you can access, correct, export, or delete your personal data, restrict or object to processing, and withdraw consent. Email us and we'll respond within one month. If you're in the UK or EEA and believe we've mishandled your data, you can complain to your local supervisory authority. Data may be processed outside your country; where it is, we rely on safeguards such as standard contractual clauses.

Cookies

We use only essential cookies and local storage needed to keep you signed in and remember your preferences. We don't run advertising or third-party marketing trackers.