Privacy Policy
Last updated: 18 June 2026
Introduction
Canopy AI ("Canopy", "we", "us", or "our") respects your privacy and is committed to protecting the personal data you share with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, website, API, and related services (collectively, the "Service"). By accessing or using the Service, you agree to the terms of this Privacy Policy.
Information We Collect
We collect information you provide directly, including: account registration details (name, email, organisation); content you upload or create (images, videos, text, brand references, prompts, and workflow configurations); payment and billing information processed through our third-party payment provider; communications you send to us (support requests, feedback, survey responses). We also collect information automatically, including: device and browser information, IP address, and general location; usage data such as pages visited, features used, and session duration; cookies and similar tracking technologies as described in our Cookie Policy.
How We Use Your Information
We use your information to: provide, operate, and maintain the Service; process transactions and manage your account; personalise your experience and improve the Service; build and maintain your brand world model exclusively for your use; communicate with you about updates, features, and support; comply with legal obligations and enforce our terms; detect and prevent fraud, abuse, and security incidents.
Your Brand World and Content
Your brand world — including references, rules, voice settings, characters, and past work — is private to your account. We do not use your brand worlds, prompts, workflows, or outputs as training data for shared AI models. Your model learns only from what you provide and what you create within Canopy, and it serves your team alone. No other customer generates from your brand world. To process generation requests, content may be transmitted to third-party model providers under their respective terms. You may request deletion of your brand world and associated data at any time.
Third-Party Model Providers
Canopy integrates with third-party AI model providers to deliver generation capabilities. When you use the Service, your prompts and inputs may be processed by these providers to fulfil your requests. Each provider operates under its own privacy policy and terms. We select providers that meet our standards for data handling, but we encourage you to review the terms of the specific model providers used in your workflows.
Data Sharing and Disclosure
We do not sell your personal data. We may share information with: service providers who assist in operating the Service (hosting, analytics, payment processing); third-party AI model providers as necessary to process your requests; law enforcement or regulatory bodies when required by applicable law; parties involved in a merger, acquisition, or asset sale involving Canopy. All service providers are bound by contractual obligations to protect your data.
Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. When you delete your account, we will remove your personal data and brand world content within 30 days, except where retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing agreements).
Data Security
We implement industry-standard technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.
Your Rights
Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate or incomplete data; request deletion of your data; object to or restrict certain processing; receive your data in a portable format; withdraw consent where processing is based on consent. To exercise these rights, contact us at privacy@trycanopy.space.
International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers in accordance with applicable data protection laws.
Children's Privacy
The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last Updated" date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at privacy@trycanopy.space.