Studio, the free Batch demo, free Mosaic preview, free Large Format preview and standard browser-based Special Effects are designed to process source images on your device. Those guest workflows do not need to upload the source image to PrivateCanvas merely to demonstrate the product.
Some authenticated workflows use PrivateCanvas server resources because their scale or project structure benefits from persistence, queues, reusable libraries or large rendering. Persistent Mosaic project libraries and serious large-format rendering are examples.
When a server-assisted workflow sends files to PrivateCanvas, transfers use HTTPS/TLS encryption in transit. Server-assisted processing is nevertheless a different privacy model from local-only browser processing, and product pages identify that distinction.
PrivateCanvas is not intended to be general-purpose cloud storage. Guest demos use local/temporary browser processing. Persistent server storage is reserved for workflows that actually need it and is subject to product limits and retention controls.
Operational analytics do not require storing image contents. Events may include product/effect used, processing mode, success/timing, account/site context, device class, referrer, IP address and country code when trustworthy request metadata is available. Raw analytics IP addresses are configured to expire after 30 days.
Optional AI features such as AI Line Refinement and Word World are separate paid features. They require login and credits, disclose that an external provider is involved, and remain disabled until a PrivateCanvas-specific provider/project is configured.