Last updated: March 16, 2026

Privacy Policy

This Privacy Policy describes how Canvas Innovations, LLC (“Contor,” “we,” “us,” or “our”) collects, uses, and shares information when you use the Contor platform and services (“Service”).

1. Information We Collect

Information You Provide

• Account information: Name, email address, and organization name when you create an account or request access
• Customer Data: Documents, content, and data you upload to the Service for processing
• Communications: Messages you send to us (e.g., support requests, feedback)

Information Collected Automatically

• Usage data: Pages visited, features used, queries submitted, and timestamps
• Device information: Browser type, operating system, and screen resolution
• Log data: IP address, access times, and referring URLs

We do not use third-party tracking cookies or advertising pixels. We use minimal analytics to understand how the Service is used and to improve it.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process your documents and generate analyses, knowledge graphs, and structured outputs
• Respond to your requests and provide customer support
• Monitor and improve the Service’s performance and reliability
• Detect and prevent fraud, abuse, or security incidents
• Comply with legal obligations

3. How We Process Your Data Through AI

To deliver the Service, we process your data through third-party AI model providers for real-time inference. This means your documents and queries are sent to these providers to generate responses.

Current AI model providers:

• Anthropic (Claude) — for document analysis, knowledge extraction, and conversational responses
• OpenAI — for text embeddings used in semantic search

Under our agreements with these providers, they do not use data submitted through the Service to train or improve their models. We may add providers in the future; all will be held to the same no-training standard.

We do not fine-tune, train, or develop any AI models using your data. Your data is processed solely to deliver the Service to you. See Section 4 of our Terms of Service for details.

4. How We Share Your Information

We do not sell your personal information or Customer Data. We share information only in these circumstances:

• Service providers and sub-processors: We use third-party services to help operate the Service (hosting, AI inference, email delivery). These providers access data only as needed to perform their functions and are bound by confidentiality obligations.
• Legal requirements: We may disclose information if required by law, regulation, or legal process. Where permitted, we will notify you before disclosure.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

Sub-Processors

5. Data Retention

We retain your Customer Data for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time (see Section 7 below). Upon deletion request, we remove your Input Data, Output Data, and all derived representations (knowledge graph entries, embeddings, claims) within 30 days.

We retain account information and usage logs for up to 12 months after account closure for legal compliance and fraud prevention purposes.

6. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information and Customer Data
• Portability: Request export of your data in a machine-readable format
• Objection: Object to processing of your personal information in certain circumstances

To exercise any of these rights, contact us at hello@contor.ai. We will respond within 30 days (or sooner as required by applicable law).

California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it is used, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information.

European Residents (GDPR)

If you are located in the European Economic Area, our legal basis for processing personal information is typically: (a) performance of a contract (providing the Service), (b) legitimate interests (improving and securing the Service), or (c) your consent. You may withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority.

8. International Data Transfers

Your data may be transferred to and processed in the United States. We use standard contractual clauses and other appropriate safeguards for international data transfers where required by applicable law.

9. Children’s Privacy

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes at least 30 days before they take effect by posting the updated policy and updating the “Last updated” date. Your continued use of the Service after the effective date constitutes acceptance.

11. Contact

Questions about this Privacy Policy? Contact us at hello@contor.ai.

Canvas Innovations, LLC
San Francisco, California