Cutter Canvas
Privacy Policy
Last updated: 13 August 2026
This policy explains what Cutter Canvas (“we”, “us”) collects when you use cuttercanvas.com, why, and what you can do about it. Cutter Canvas is operated by LEGAL ENTITY NAME, BUSINESS MAILING ADDRESS, Illinois, United States.
What we collect
- Google account details. If you sign in, we receive your Google account identifier, name, email address, and profile picture from Google. We do not receive your password, and we only accept accounts whose email address Google has verified. Signing in is optional — building shapes and exporting STL files works without an account.
- Designs you save. Cutter outlines, geometry settings, generated images, prompts, and tags you choose to save, stored against your account.
- Prompts and images you submit to AI features. Text prompts, uploaded photos, and reference images are sent to Google's Gemini API to generate a result.
- Order details. For printed cutters: the model file, your shipping name and address, and your email. Card details go directly to Stripe — we never see or store them.
- Analytics. Only if you accept the analytics prompt. Google Analytics 4 is set to denied by default and loads in a cookieless state until you choose otherwise; declining leaves it off and the app works identically either way.
- Server logs. Standard request logs, including IP address, retained for security and debugging for 30 days.
Why we use it
- To provide the app: generating designs, saving your work, fulfilling print orders.
- To take payment and prevent fraud and abuse, including limiting free credit grants.
- To understand which features are used, if you have consented to analytics.
- To respond when you contact support.
Where the UK or EU GDPR applies, our lawful bases are performance of a contract (providing the app and fulfilling orders), legitimate interests (security and abuse prevention), and consent (analytics only, which you may withdraw at any time).
Who we share it with
We do not sell your personal information. We share it only with providers that run the service:
- Google Cloud — hosting and database storage.
- Google Gemini API — processes prompts and images you submit to AI features.
- Google Identity — sign-in.
- Google Analytics — usage analytics, only with your consent.
- Stripe — payment processing; Stripe is an independent controller for your payment data.
How long we keep it
Saved designs stay until you delete them or ask us to close your account. Order records are kept for 7 years to meet tax and accounting obligations. Server logs are kept for 30 days. Checkouts that are started but never paid for are deleted automatically within 24 hours, including the model file attached to them.
Your choices
- Delete any saved design from the app at any time.
- Change or withdraw your analytics choice by clearing this site's data in your browser; you will be asked again on your next visit.
- Request access to, correction of, or deletion of your information, request a copy in a portable format, or object to processing, by emailing support@cuttercanvas.com. We respond within 2 business days and complete requests within 30 days.
- If you are in the UK or EU and are unhappy with our response, you may complain to your local supervisory authority.
Where your data is stored
We operate from the United States, and all data is stored in Google Cloud's us-west1 region (Oregon, USA). Print orders ship to US addresses only, but AI credits can be purchased from anywhere — so if you are in the UK or EU, using this service means your information is processed in the United States. Our providers (Google Cloud, Stripe) rely on the UK/EU Standard Contractual Clauses and the EU–US Data Privacy Framework for their own processing.
DECIDE: an Article 27 EU/UK representative may be required — non-EU businesses offering paid services to EU or UK residents generally must appoint and name one here. Confirm whether this applies to your volume, and add the representative's details if so.
Children
Cutter Canvas is not directed at children under 13, and we do not knowingly collect their information. If you believe a child has given us personal data, email us and we will delete it.
Changes
We will update the date at the top when this policy changes, and give notice in the app for material changes.