Privacy Policy

Summary

Slate for Canva is a Canva marketplace app that converts Canva presentations into interactive eLearning courses. The app runs as a sidebar inside Canva's design editor and extracts text content only—no images or media are collected. Use of the app requires explicit OAuth authorization, and you can disconnect at any time.

Authentication and Authorization

Slate for Canva uses OAuth 2.1 with PKCE (Proof Key for Code Exchange) for secure authentication. When you connect your Slate account, you explicitly authorize the app with two permission scopes:

• course:create — create new courses in your Slate account
• credits:read — check your available AI credit balance

Canva manages access tokens (1-hour expiry) and refresh tokens (30-day expiry) on your behalf. You can disconnect the app at any time from your Slate account settings, which immediately revokes access.

Data We Collect

Content from Your Designs

When you convert a presentation, we extract text content only via the Canva Content API. No images, media, or visual assets are collected. If the Content API returns no text, the app falls back to PPTX export processing—this is done in memory and the file is not stored.

Conversion Parameters

You provide optional parameters to guide course generation, including target audience, estimated duration, learning objectives, tone, and assessment preferences. These are used solely for AI course generation and are not stored separately.

Platform Connection

We store a platform connection record linking your Slate user ID to a platform identifier for credit bonus tracking. We do not store your Canva user ID, design IDs, or any references to your Canva content.

How We Process Your Data

Extracted text and your conversion parameters are sent to Google's Gemini API for AI-powered course generation. The generated course is saved to your Slate account using the same row-level security as all Slate courses—only you can access it.

Extracted text is not retained separately after course generation. The text exists only in transit during processing and in the resulting course content.

Google processes this data under their own privacy policy: policies.google.com/privacy.

Data We Do NOT Collect

• Images, media, or visual assets from your designs
• Canva account information (name, email, profile)
• Persistent design IDs or references to your Canva content
• Usage analytics or telemetry within the Canva environment

Credit Bonus

Connecting Slate for Canva provides AI credits for course generation:

• Free tier: One-time bonus of 1,000 AI credits (never expire)
• Paid tiers: Additional 1,000 credits per billing cycle while connected

Credit tracking uses your platform connection record only—no additional personal data is collected for this purpose.

Security

We implement multiple security measures to protect your data:

• PKCE: OAuth flow uses Proof Key for Code Exchange to prevent authorization code interception
• HTTPS: All communication is encrypted in transit
• CORS: API access is restricted to the Canva iframe origin
• SSRF prevention: PPTX download URLs are validated to prevent server-side request forgery
• Brand kit sanitization: Brand kit data is sanitized before processing
• JWT type claims: Token types are validated to prevent token misuse

Third-Party Services

Data Retention

• Generated courses follow Slate's standard 30-day deletion policy when you delete your account
• Platform connections are deleted when you disconnect the app or delete your Slate account
• Extracted text is not stored after course generation

Your Rights

You can:

• Disconnect the Canva app at any time from your Slate account settings
• Delete any generated courses from your Slate account
• Request deletion of your platform connection record
• Exercise all rights described in our main privacy policy

Relationship to Main Privacy Policy

This policy covers data practices specific to the Slate for Canva app. For general information about how Slate handles your data, including account information, content storage, and your broader privacy rights, please see our main privacy policy.

Changes to This Policy

We may update this privacy policy as the app evolves. Changes will be noted by updating the "Last updated" date at the top of this page.

Contact

Slate for Canva is built by Slate eLearning.

• Website: slatebuilder.io
• Support: [email protected]