expanvas
Privacy

Privacy policy

Last updated: July 2026

Expanvas is run by a sole trader based in the United Kingdom. This policy explains what data the service handles and why. The short version: we collect the minimum needed to run the product, we never sell your data, and your canvas content exists so the product can work, not so we can mine it.

What we collect

  • Account details. If you create an account, your email address and authentication data are stored with Supabase, our database and authentication provider. Guest mode requires no account and no email.
  • Canvas content. Your nodes, edges, sections and chat history are stored so we can sync and restore your work. That is the product. We do not read it, train on it, or share it.
  • Usage analytics. We use PostHog to understand how the product is used: which features are opened, where people get stuck. This helps us improve Expanvas and is not used for advertising.
  • AI prompts. When you send a message, your prompt and any nodes you selected as context are forwarded to the model provider you chose (Anthropic, OpenAI or Google) so they can generate a response. Their handling of that data is governed by their own policies.

What we never do

  • We do not sell your data to anyone.
  • We do not show ads or share data with advertisers.
  • We do not use your canvas content to train models.

Where your data lives

Account data and canvas content are stored with Supabase. Data is encrypted in transit. Guest canvases are held in your own browser until you create an account.

Your rights

Under UK data protection law (UK GDPR and the Data Protection Act 2018) you can ask for a copy of your data, ask us to correct it, or ask us to delete it. Deleting your account removes your canvases from our systems. To exercise any of these rights, email hello@expanvas.com.

Retention

We keep your data for as long as you have an account. If you delete your account, your canvases and personal data are removed from our production systems, with backups expiring on their normal schedule shortly after.

Changes to this policy

If this policy changes in a way that matters, we will say so in the changelog and, for account holders, by email.

Contact

Questions about privacy: hello@expanvas.com.