Last updated: February 2026
When you sign in with Canva, we receive your display name and an OAuth access token (plus a refresh token) that lets us view your designs. If you subscribe to a paid plan, Stripe collects your email address and we store it so we can send you download links. You can also add your email manually from your account page.
We also collect basic usage data like how many exports you've run and when your account was created. We do not track you across other websites.
We use your Canva connection to browse your folders and export designs you select. We can only view your designs. We cannot edit, delete, or share them with anyone.
Your Canva access and refresh tokens are stored securely on our servers (never exposed to your browser) and are only used to process exports you request. When you log out, we revoke the token with Canva and delete it from our database. You can also revoke access at any time from your Canva account settings.
When you run an export, we temporarily download your designs from Canva, package them into a ZIP file, and upload the ZIP to secure cloud storage. We then email you a download link.
Download links expire after 7 days (Free), 14 days (Starter), or 90 days (Pro). After that, the ZIP file is automatically deleted from our servers. We do not keep copies of your designs.
Pro users can optionally connect their Dropbox account to automatically sync Canva designs to Dropbox. When you connect Dropbox, we receive an access token that lets us upload files to a dedicated app folder (Apps/DesignExporter) in your Dropbox. We cannot access any other files in your Dropbox.
Your Dropbox access token and refresh token are stored securely and are only used to upload your synced designs. We store your Dropbox email and display name so we can show your connection status in the app.
You can disconnect Dropbox at any time from your account settings. When you disconnect, we stop syncing and deactivate the stored tokens. Files already synced to your Dropbox remain there. We do not delete them.
Payments are processed by Stripe. We never see or store your credit card number. Stripe handles all payment information according to their own privacy policy. We only receive confirmation of whether your payment succeeded and which plan you're on.
We use essential cookies to keep you logged in. We do not use advertising cookies or third-party tracking. No cookie banner nonsense. We only use what's necessary to make the app work.
We send you emails when your exports are ready to download. We may occasionally send product updates or important account notices. We will never sell your email address or send you spam. You can unsubscribe from non-essential emails at any time.
You can delete your account at any time from your Account Settings page. When you delete your account, we remove all your data including your email, Canva tokens, export history, and any stored files. This is permanent and cannot be undone.
We use these services to run DesignExporter:
If we make significant changes to this policy, we'll notify you by email. Minor wording changes won't trigger a notification, but the “last updated” date at the top will always reflect the most recent version.
Questions about your privacy? Email us at hello@designexporter.com.