Your screen
stays with you.

Who is responsible

PadCanvas is provided by Ibrahim Sowunmi, trading as a sole trader. For privacy questions, access requests, corrections or deletion requests, contact i.sowunmi97+padcanvas@gmail.com.

Your drawings and screen content

The Mac app renders annotations and saves projects and imported images locally. When you enable live preview, the selected Mac screen is sent to an approved controller. Strokes, text, images and control events move between connected devices. These features do not send drawing or screen content to the PadCanvas account or payment service.

Browser drawing uses an HTTPS page to load the interface, then connects directly to the Mac on your local network. Pairing material is carried in the link’s fragment, which is not included in the HTTP request to the website. Treat the full link as private: people who receive it can request a connection.

Controller display names and active channels are visible in the session. People viewing your Mac or its screen share may see annotations and participant names. Meeting and screen-sharing services have their own privacy practices.

Information used by the account service

Payments

Stripe hosts checkout and the billing portal. Stripe processes payment details under its own privacy notice. PadCanvas receives transaction references, subscription status and account information; its backend does not receive your full card number or security code.

Purposes and legal bases

Account access and purchase fulfillment are processed to provide the service you request. Security and trial-abuse prevention serve legitimate interests in operating and protecting the service. Records required by law are retained to meet those obligations. Support handling depends on the nature of the request. The annual plan no longer persists machine identifiers for trial eligibility. Retention and removal of historical identifiers remains part of the release review.

Account information is needed for verified sign-in and restoring access. You can browse this website and try its demo without an account. Access decisions use account and payment status; PadCanvas does not use this data for employment, lending or similar decisions.

Service providers

• Cloudflare hosts the website and current account API.
• Supabase provides authentication and the account database. The configured database project is in Frankfurt.
• Google provides sign-in and the Gmail support mailbox.
• Stripe processes checkout, billing and payment records.

An older Vercel account deployment is retained for rollback with account and payment access disabled. Some older application settings still refer to its hostname as a local Keychain identifier.

Providers may process information outside the UK or the database region. Cloudflare’s data-processing terms and Supabase’s data-processing terms provide for standard contractual clauses and the UK Addendum where applicable. Stripe explains its transfer safeguards, including the UK extension to the EU–US Data Privacy Framework. Google handles sign-in and Gmail information under its own privacy and international-transfer practices. These providers may also process data for their own legal or security purposes. We do not promise UK-only or EU-only processing; provider-specific backup and operational settings remain under verification. You can contact us for more information about the applicable safeguards.

How long information is kept

Saved drawings and projects remain on your Mac until you remove them. Signing out ends the current account session; it does not delete the account, cancel a subscription or remove saved projects.

• Sign-in links expire after ten minutes and backend sessions after thirty days. Expired transient records are cleaned during service activity. Expiry is not a guarantee of immediate deletion from backups.
• Account, device-trial, license and purchase records currently have no automatic general deletion schedule. A finite retention and deletion process is being finalised. Requests can be made by email now.
• The approved support policy is to keep conversations for twelve months after resolution, except for necessary active-dispute or legal holds. The operational cleanup process is not yet active.
• Necessary sole-trader tax records are retained for at least five years after the 31 January Self Assessment submission deadline for the relevant tax year, as HMRC requires. Longer retention may apply to a late return, an open investigation or a specific legal claim. This does not justify retaining unrelated drawings, support attachments or device identifiers. Provider log and backup deletion arrangements are being verified separately.

Your choices and rights

You can ask for access, correction, deletion, restriction or portability where applicable by emailing i.sowunmi97+padcanvas@gmail.com. We may need to verify that you own the account. We will explain any information that must be retained and why.

You can object to processing based on legitimate interests. Contact the same address and describe your objection so it can be assessed.

Account deletion currently requires manual handling. A request does not itself erase records or cancel a renewing Stripe subscription. Use Account → Manage billing on the Mac to cancel, or ask support to help coordinate cancellation and deletion.

System permissions can be changed in device settings. Screen Recording enables live preview; optional Accessibility access supports presentation controls; Bluetooth and Local Network access support connections. The companion stores its display name, connection preference and saved Mac address locally. Mac account credentials are stored in Keychain. Version 0.9.15 and later also stores a recent verified access response and local timing information in this Mac’s Keychain for up to two hours of offline access. That cache is tied to your account session and service address; signing out removes it.

You can raise a concern with the UK Information Commissioner’s Office or your applicable data-protection authority.

Website, cookies and the drawing demo

The sign-in flow uses a short-lived encrypted cookie needed to complete authentication. The public site has no advertising or analytics trackers, and serves its design assets from its own origin.

The homepage demo keeps marks in this tab’s memory. It does not upload or save them. Clear removes them, and reloading the page resets the demo. Requests to load the site can still be processed and logged by the hosting provider.

If you send a support screenshot, first remove private documents, pairing codes, connection links, license keys and payment details.