Privacy, in plain language.

Scope and who we are

This Privacy Policy explains how VisuaKit ("we", "us", or "our") handles information when you use Brand Deck, our Canva application, visit visuakit.com, purchase a subscription, submit feedback, or contact us.

Canva and the other services listed below handle information under their own privacy policies. This policy covers VisuaKit's handling of information, not the independent practices of those services.

Information we handle

Account and credit information

When you open Brand Deck, Canva provides a persistent user identifier. We store that identifier with your credit balance, credit allotment, subscription identifier and status, renewal date, and related timestamps. We do not receive or store your Canva password or login credentials.

Content used for carousel generation

When you use the AI workflow, the text and settings you provide—including ideas, source notes, audience, language, brand voice, CTA preference, outline choices, drafts, and slide edits—are sent through our backend to Wiro AI so the requested content can be generated. The resulting outline, draft, or slide is returned to the app.

We do not intentionally save this input or generated copy in our application database, and it is not included in our AI usage analytics. Wiro AI and any model provider it uses may process the request under their own terms and privacy policy. Do not submit confidential, regulated, or sensitive personal information that is not necessary for your carousel.

Profile and style information stored on your device

Your name, social handle, headshot, audience preference, output language, brand voice, CTA preference, last platform, and saved theme choices are stored in the browser's local storage. They are not stored in our account database. You can remove them inside Brand Deck or by clearing the relevant browser data.

When you create pages, the selected content, profile details, and visual settings are added to your Canva design. Canva then stores and handles that design under its own policies.

Usage and technical information

We record credit reservations and consumption needed to run the service. For AI operations, we also store anonymous operational metadata such as operation type, model name, token counts, provider cost, retry number, and response time. Those AI usage records do not contain your Canva user identifier, prompt, or generated text.

Our hosting providers may process standard network and request information, such as IP address, timestamps, browser or device information, and error data, to deliver and secure the service.

Payments, feedback, and support

• Payments: Lemon Squeezy processes purchases and payment details. We receive information needed to connect the subscription to your account, such as subscription events, subscription ID, status, and renewal information. We do not store complete payment-card details.
• Feedback: If you submit the in-app feedback form, we receive your Canva user identifier, star rating, optional written feedback, generation time, slide count, theme name, and submission time. This form is delivered through Make.
• Support: We receive the email address, message, attachments, and other information you choose to send when you contact us.
• Checkout handoff: When you begin an upgrade inside Canva, the pricing page keeps an opaque, short-lived checkout handoff only in the current page's memory and removes it from the address bar. The page does not decode or store your Canva user identifier.

Website tracking

We currently do not use advertising cookies, behavioral advertising pixels, or third-party marketing analytics on visuakit.com. If this changes, we will update this policy and provide any choices required by applicable law.

How and why we use information

• Authenticate requests from the Canva app and connect activity to the correct credit balance.
• Generate outlines, drafts, slide improvements, and Canva pages you request.
• Process subscriptions, renewals, cancellations, refunds, and customer support.
• Prevent abuse, enforce limits, diagnose failures, and keep the service secure and reliable.
• Understand aggregate product performance and AI cost without storing prompts in analytics.
• Comply with legal obligations and protect our users, service, and rights.

Where data-protection law requires a legal basis, we rely as applicable on performing our contract with you, our legitimate interests in operating and improving the service, compliance with legal obligations, and consent where we specifically request it.

We do not sell your personal information or use it for third-party targeted advertising.

Service providers and disclosures

We share information only as needed to operate the service, comply with law, or protect rights and safety. The main services involved are:

• Canva, which hosts the editor, authenticates app users, and stores the designs you create.
• Wiro AI, which processes AI generation requests and routes them to the configured model provider.
• Lemon Squeezy, which processes checkout, payments, subscriptions, and related buyer information.
• Railway, which hosts our backend services and database.
• Cloudflare, which delivers and protects our public website.
• Make, which delivers feedback-form submissions to us.

We may also disclose information if required by law, to investigate fraud or security issues, to enforce our terms, or as part of a merger, acquisition, financing, or sale of the service, subject to appropriate protections.

These providers may process information in countries other than your own. Their policies describe the safeguards they use for international transfers.

Retention and security

We keep account, credit, and subscription records while needed to provide the service and for legitimate legal, accounting, dispute-resolution, and fraud-prevention purposes. If you stop using Brand Deck and request deletion, we will delete or de-identify data we control within 30 days unless we must retain specific records for a legal obligation.

Support and feedback records are kept only as long as reasonably needed to respond, improve the product, document decisions, or meet legal obligations. Anonymous AI usage records may be retained for operational and cost analysis because they do not contain user identifiers or content.

We use measures appropriate to the data and service, including HTTPS, Canva token verification for protected app requests, access controls, short-lived signed checkout handoffs, and signature verification for payment webhooks. No transmission or storage system can be guaranteed completely secure.

Your choices and privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or obtain a portable copy of personal information we control, and to withdraw consent where processing is based on consent. You may also have the right to complain to your local data-protection authority.

To make a request, email support@visuakit.com. We may ask for enough information to verify that the request relates to your account. We aim to respond within 30 days, subject to applicable law.

You can directly remove locally stored profile and style information from Brand Deck or your browser. Deleting a Canva design or Canva account is managed through Canva.

Children's privacy

Brand Deck is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided information to us inappropriately, contact us so we can review and delete it where required.

Changes to this policy

We may update this policy when the product, providers, or legal requirements change. We will post the revised version here and update the date above. If a change materially affects how we handle personal information, we will provide additional notice where appropriate.

Contact

For privacy questions or requests, email support@visuakit.com. For general questions, email hello@visuakit.com.