Privacy Policy

Canvass ("we", "our", or "us") is operated by 1990 Research Labs. This Privacy Policy explains how we collect, use, store, and share your information — including data obtained through Google APIs — when you use our application and website at canvass.club.

By using Canvass, you agree to the practices described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

Account Information

When you sign in with Google, we receive your name, email address, and profile picture from your Google account.

Google User Data

With your explicit consent via the Google OAuth consent screen, Canvass may access the following Google services:

• Google Sheets — to read and write spreadsheet data for research data collection and analysis.
• Google Drive — to store, retrieve, and manage files related to your research projects.

We only request the minimum permissions (scopes) needed to provide the features you use. You can review and revoke access at any time through your Google Account permissions.

Usage Data

We collect anonymized analytics data (page views, browser type, general location) through our self-hosted analytics platform to improve the service. This data cannot be used to identify you personally.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain Canvass features you request.
• Read and write data to your Google Sheets for research data management.
• Store and organise research files in your Google Drive.
• Authenticate your identity and manage your account.
• Improve and develop our service based on aggregated, anonymized usage patterns.
• Communicate with you about service updates when necessary.

3. Google API Services — Limited Use Disclosure

Canvass's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Google user data to provide and improve the user-facing features of Canvass that are visible to you.
• We do not transfer Google user data to third parties unless necessary to provide the service, required by law, or as part of a merger or acquisition — and only with your consent where applicable.
• We do not use Google user data for advertising, marketing to third parties, or to serve ads.
• We do not sell Google user data to data brokers, advertising platforms, or information resellers.
• We do not use Google user data for creditworthiness assessments or lending decisions.
• No human reads your Google user data unless you give explicit affirmative consent for specific messages, it is needed for security purposes, or it is required by law.

4. Data Sharing and Transfers

We do not sell, rent, or trade your personal information. We may share data only in the following limited circumstances:

• Service providers — trusted third-party services that help us operate Canvass (e.g., hosting, error tracking), bound by confidentiality obligations.
• Legal requirements — when required to comply with applicable law, regulation, or valid legal process.
• Safety — to protect the rights, property, or safety of Canvass, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with advance notice to you.

5. Data Storage and Security

We take the security of your data seriously. We implement industry-standard measures including:

• Encryption of data in transit (TLS/HTTPS) and at rest.
• Secure storage of OAuth tokens with encryption.
• Access controls limiting data access to authorized personnel only.
• Regular security reviews of our infrastructure.

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

6. Data Retention and Deletion

We retain your data only for as long as necessary to provide our services or as required by law. When you delete your account:

• Your account data is permanently deleted within 30 days.
• Google OAuth tokens are immediately revoked and deleted.
• Any cached Google user data is purged from our systems within 30 days.

You may also request deletion of your data at any time by contacting us at dharmesh@1990labs.com.

7. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Revoke Canvass's access to your Google data at any time through your Google Account permissions.
• Export your data in a portable format.

To exercise any of these rights, contact us at dharmesh@1990labs.com.

8. Children's Privacy

Canvass is not intended for use by anyone under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of Canvass after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy, contact us at:

1990 Research Labs
Email: dharmesh@1990labs.com
Web: canvass.club