Privacy Policy

TopicCanvas is operated from Porto, Portugal. For privacy questions, contact hello@topiccanvas.app.

Account data

When you create an account: email address (used for authentication via magic link).

Usage data

We collect anonymous usage data to improve the Service: pages visited, tutorials generated, interactions with primitives (likes, progress, views). We use PostHog for analytics.

Technical data

IP address, browser type, operating system — collected automatically for security and performance purposes.

• Authentication — sending magic links for login
• Rate limiting — controlling generation limits per plan
• Analytics — improving the Service (via PostHog, self-hosted in the EU)
• Communication — Service notifications (you can opt out)

We use the following services:

• Supabase — authentication and database (EU)
• Vercel — hosting (global edge)
• Google Gemini — AI content generation
• PostHog — analytics (EU)
• Stripe — payment processing (when applicable)

Data processing is based on:

• Contract performance — necessary to provide the Service (authentication, generation)
• Legitimate interest — analytics to improve the Service
• Consent — marketing communications (when applicable)

Under the GDPR, you have the right to:

• Access — request a copy of your data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a structured format
• Objection — object to processing for marketing purposes

To exercise these rights, contact hello@topiccanvas.app. We respond within 30 days.

We retain your data while the account is active. After account deletion, data is removed within 30 days, except when required by law to retain it.

We implement technical and organisational measures to protect your data, including encryption in transit (HTTPS) and at rest, access controls, and security monitoring.

We use strictly necessary cookies for authentication and Service functionality. Analytics cookies (PostHog) are anonymised.

The Service is intended for users of all ages for educational purposes. We do not intentionally collect data from children under 16 without parental consent. If you are under 16, please ask your parents or guardians for permission before creating an account.

Some third-party services may process data outside the EU (Vercel, Google). These transfers are protected by EU Commission standard contractual clauses or adequacy decisions.

We may update this Policy periodically. Significant changes will be communicated via email. The update date is shown at the top of this page.

For privacy questions: hello@topiccanvas.app

You also have the right to file a complaint with the CNPD (Portuguese Data Protection Authority) at www.cnpd.pt.