1. Scope
This Privacy Policy applies to the Bulk Design Generator: Canva Automate Maker browser extension, this website, and related account and subscription services (collectively, the “Service”). “We,” “us,” and “our” refer to EchoWebBot Studio, the independent developer of the Service.
Canva Automate Maker is not affiliated with, endorsed by, or sponsored by Canva. “Canva” is used only to identify the compatible third-party platform.
2. Information We Process
Account and authentication information
If you sign in with Google, we may receive and process your Google account email address and Google account identifier. We use this information to create or locate your extension account and maintain your session. Google handles the sign-in process under its own privacy terms.
Subscription and transaction information
If you purchase Pro, we process information needed to manage access, such as your account identifier, email address, plan, subscription status, billing period, renewal or cancellation status, and transaction references. We do not receive or store your complete payment card number.
CSV data, Canva content, and generated files
The extension reads variable markers from the Canva design page you have open and processes the CSV file you select. CSV row values are used to update the design during the requested task. Generated file URLs are passed to Chrome's download system so files can be saved under your chosen folder and filename.
The Service is not designed to upload your complete CSV file or generated design files to our servers. You should nevertheless avoid placing sensitive personal information in templates or CSV files unless you have a lawful reason and appropriate safeguards.
Extension settings and local storage
The extension may store settings and temporary task state in your browser, including export format, download folder, transparent-background or PDF options, skip-row value, free-trial usage, account session information, and progress for an active task.
Usage and diagnostic information
Our backend may receive limited task metadata such as extension version, account or installation identifier, Pro status, task identifier, number of CSV rows, number of completed designs, variable marker names, and whether a task completed. When diagnostic logging is enabled, we may also receive operational events, error messages, and troubleshooting logs. These records help enforce trial limits, maintain compatibility, investigate failures, and prevent abuse.
Website information
When you visit the website, the hosting provider may automatically process standard request information such as IP address, browser type, requested URL, referring page, and request time for security and delivery purposes. Embedded YouTube content may connect to YouTube after the player loads or you interact with it.
3. How We Use Information
- Provide extension authentication, configuration, automation, and download features.
- Apply free-trial allowances and confirm Pro entitlements.
- Process payments, renewals, cancellations, and account support requests.
- Store preferences and preserve task continuity in the browser.
- Diagnose errors, maintain Canva compatibility, secure the Service, and prevent misuse.
- Comply with legal obligations and enforce our Terms of Service.
We do not sell personal information and do not use CSV row values or Canva design content for advertising.
4. Chrome Extension Permissions
The extension requests only the permissions required by its current features:
- storage: keeps account state, preferences, usage counters, and task settings in the browser.
- identity: supports Google sign-in for extension accounts.
- downloads: saves generated files and can open Chrome's default download folder.
- canva.com access: detects variables and performs the automation on Canva design pages you open.
- echobot.dev access: communicates with account, authentication, configuration, subscription, usage, and support services.
5. Service Providers and Disclosure
We may share the minimum information necessary with vendors that provide hosting, authentication, payment processing, email, security, or technical support. These providers process information under their own terms and our instructions where applicable.
We may also disclose information when required by law, to protect users or the Service, to investigate fraud or abuse, or as part of a business reorganization where legally permitted. We do not provide CSV data or generated files to data brokers.
6. Retention and Security
We retain account and subscription records while your account is active and as reasonably required for billing, tax, dispute, fraud-prevention, and legal purposes. Usage and diagnostic records are kept only as long as reasonably needed for limits, reliability, security, and support. Locally stored data remains in your browser until the extension clears it, you remove it, or you uninstall the extension.
We use reasonable administrative and technical safeguards, but no internet or storage system can be guaranteed completely secure.
7. International Processing
The Service and its providers may process information in countries other than your own. Where required, we use appropriate safeguards for international data transfers.
8. Children's Privacy
The Service is not directed to children under 13, or the higher minimum age required in a user's jurisdiction. We do not knowingly collect personal information from children through the Service.
9. Your Choices and Rights
- You can avoid account processing by not signing in, although account or Pro features may be unavailable.
- You can remove locally stored extension information by uninstalling the extension or clearing its site and extension data.
- You can cancel a Pro subscription through the extension's Pro section.
- Depending on your location, you may request access, correction, deletion, restriction, objection, or portability for eligible personal information.
To submit a privacy request, contact us using the address below. We may need to verify your identity before completing a request.
10. Changes to This Policy
We may update this policy as the Service, legal requirements, or providers change. The revised version will be posted on this page with a new “Last updated” date.
11. Contact
Questions or privacy requests can be sent to [email protected].