Privacy Policy

Isometry AI Private Limited, operating as “Canvas Labs” (“Canvas Labs”, “we”, “us”, “our”), is an artificial intelligence research and product company based in Bengaluru, India. We operate the canvasx.ai website and build AI products and engagements, including Sketch, Canvas Connectors, and the Context Graph platform. This Privacy Policy describes how we collect, use, and protect your information when you visit our website, engage with us, or use our products and services (together, the “Services”).

1. Information We Collect

Account & Contact Information

When you contact us, book a call, request a demo, or sign up for a product, we may collect:

• Name and email address
• Company or organization name
• Your role and any details you choose to share about your needs
• Account identifiers required to set up a product or integration

Usage Data

We collect anonymized usage data to understand and improve the Services, including:

• Pages visited, feature usage patterns, and frequency
• Error logs and performance data
• Device type, browser type, and general location (country level)

Content You Share

When you use our products or work with us on an engagement, you may share documents, messages, and data so we can perform tasks or deliver work. We process this content to provide the Services. For products that operate on messages in real time (such as Sketch), message content is processed to perform the task and is not retained after processing, except as described in that product’s own policy.

Payment Information

Payments for paid products and engagements are handled by third-party processors (Stripe and Razorpay). We do not store credit card numbers or bank account details; we receive only transaction confirmations and billing metadata.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Services
• Respond to enquiries, schedule calls, and deliver engagements
• Process transactions and manage accounts
• Send service-related communications (billing receipts, product and project updates)
• Monitor for misuse, fraud, and security threats
• Analyze usage patterns to improve the product experience

3. Third-Party Services

We rely on a small set of trusted providers to operate the Services:

• Anthropic (Claude): AI processing, governed by their privacy policy
• Pipedream: integration infrastructure for connecting third-party tools
• Stripe & Razorpay: payment processing, under their respective privacy policies
• PostHog: product and website analytics on anonymized usage data

We do not sell, rent, or trade your personal information to any third party.

4. Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies: authentication and core functionality
• Analytics cookies: PostHog-based anonymized usage measurement

You can control cookie preferences through your browser settings. Disabling essential cookies may affect how the website and products work.

5. Data Retention

We retain account and contact information while your account or relationship with us is active. On account deletion or request, we remove personal data within 30 days, except where we are legally required to keep it. Content processed in real time by products such as Sketch is not stored and is discarded after processing; engagement materials are retained only as agreed for the project and then deleted or returned.

6. Data Security

We use industry-standard security measures, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No method of electronic transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Your Rights

For all users

You may:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Request an export of your account data

For EU/EEA users (GDPR)

You additionally have the right to:

• Object to or restrict processing
• Data portability
• Withdraw consent
• Lodge a complaint with your local data protection authority

Our legal bases for processing are: (a) performance of a contract, (b) legitimate interests (improving the Services, preventing fraud), and (c) consent.

For California residents (CCPA)

You have the right to:

• Know what personal information we collect and how we use it
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Not be discriminated against for exercising your privacy rights

8. Children’s Privacy

The Services are intended for users aged 18 and older. We do not knowingly collect information from anyone under 18, and we will promptly delete any such data we discover.

9. International Data Transfers

Canvas Labs operates from Bengaluru, India. Your data may be processed in India and in other countries where our service providers operate, with appropriate safeguards in place to comply with applicable data protection laws.

10. Changes to This Policy

We may update this Policy from time to time. We will post material changes here with an updated date. Continued use of the Services after changes take effect constitutes acceptance of the revised Policy.

11. Contact Us

For privacy questions or to exercise your data rights: