Legal
Privacy Policy
Last updated: 15 July 2026
Draft — pending legal review. This page is structural scaffolding with placeholder tokens (marked TODO_…) in place of facts we don't have yet. It has not been reviewed by a qualified person and must not be published as-is.
1Who this policy covers
This policy describes how W3 Dev LLC ("we," "us") handles information collected through CanvasGrid (the "Service"), operated by W3 Dev LLC, an LLC registered at 1309 Coffeen Ave, Sheridan, Wyoming.
2Information we collect
We collect information tied to the account and workspace features the Service provides:
- Account information: name, email address, and authentication credentials.
- Project and brand content: templates, styles, generated variants, and the folders you organize them into.
- Team and collaboration data: invitations, member/viewer roles, and comments attached to a project.
- Billing information: handled by our payment processor; we do not store full card numbers ourselves.
- Communications: messages you send us, including anything sent to the contact email on this site.
3How we use information
We use the information above to:
- Provide and operate the Service, including generating and storing your assets.
- Authenticate you and maintain your session.
- Process payments and communicate about your subscription.
- Respond to support requests sent to the contact email on this site.
- Maintain the security and integrity of the Service.
We do not train our own models on your project content. Content you submit for generation is sent to the third-party model provider behind the model you select — for example Replicate, Fal.ai, or OpenAI — and is processed under that provider's own terms and policies, not ours. We don't control, and can't make commitments on behalf of, a given provider's training practices; consult that provider's terms if this matters to you.
4How information is shared
We do not sell personal information. We share information with the following categories of recipients when it's necessary to run the Service:
- Infrastructure and generation providers we use to produce and store assets.
- The payment processor used for billing.
- The email provider used to send account and transactional messages.
- Teammates or clients you've invited into a shared project, limited to what that project exposes.
- Anyone else, only with your consent or as required by law.
Our sub-processors are located in the United States only. We don't currently publish a standing list page for them; email flowaistudio@email.sauth.net and we'll share the current list on request.
5Cookies and similar technologies
The Service sets a session cookie to keep you signed in. As of this page's last edit, we do not use third-party advertising or cross-site tracking cookies. If that changes, this section will be updated to say so specifically rather than describing tracking in the abstract.
6Data security
We use reasonable technical and organizational measures to protect information you give us. No method of transmission or storage is 100% secure, and we do not claim a specific certification or compliance framework (e.g. SOC 2) unless and until we've actually completed it.
7Data retention
We retain account and project information for as long as your account is active. After deletion, content is retained for up to 90 days for audit purposes before it is permanently removed.
8Your rights
Subject to the law that applies to you in Wyoming, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise any of these rights, contact us at the address in Section 10.
9Children's privacy
The Service is not intended for children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided us information, contact us at the address in Section 10 and we will remove it.
10Contact
Questions about this policy can go to:
Email: flowaistudio@email.sauth.net
Address: 1309 Coffeen Ave, Sheridan, Wyoming
11Changes to this policy
We'll update the date below when this policy changes, and for material changes we'll make a reasonable effort to notify active account holders before the change takes effect.