Canva Figma
On what the policies say, there's nothing between them. Both are graded D.
Canva
Canva trains its AI models on your activity, content and uploads by default, with an opt-out in privacy settings. Canva Education content is excluded from AI training.
Verdict
D
- Trains on you by default
- A self-serve opt-out exists
- On by default. An opt-out exists, but you have to go looking for it.
- 5 Oct 2026
Figma
On Starter and Professional, Figma's Content Training setting ships ON. The privacy policy never says so — only Figma's AI pages do.
Verdict
D
- Trains on you by default
- A self-serve opt-out exists
- On by default. An opt-out exists, but you have to go looking for it.
- 5 Oct 2026
Canva: every plan
Canva · what each plan can refuse · checked 5 Oct 2026
Free & Pro (consumer accounts)
YES
Self-serve toggle
Not stated
Not stated
Unknown
32 / 50
On by default, with a way out
15 / 33
One switch, but the policy never says which way it ships
0 / 4
No paywall on the control
1 / 4
2 kinds of data are in scope
2 / 4
The policy does not say whether people read it
2 / 2
Nothing is said about de-identification
Canva Education (students)
NO
Nothing to switch off
Not stated
Not stated
Unknown
14 / 50
Off by default
0 / 33
Nothing is on, so nothing needs refusing
0 / 4
No paywall on the control
0 / 4
One kind of data is in scope
2 / 4
The policy does not say whether people read it
2 / 2
Nothing is said about de-identification
Free & Pro (consumer accounts)TRAINS: YES
- Self-serve toggle
- Not stated
- 52 / 100
- Not stated
- Unknown
Canva Education (students)TRAINS: NO
- Nothing to switch off
- Not stated
- 18 / 100
- Not stated
- Unknown
Figma: every plan
Figma · what each plan can refuse · checked 5 Oct 2026
Starter and Professional
YES
Self-serve toggle
Not stated
Yes, stated
Unknown
32 / 50
On by default, with a way out
15 / 33
One switch, but the policy never says which way it ships
0 / 4
No paywall on the control
0 / 4
One kind of data is in scope
2 / 4
The policy does not say whether people read it
-2 / 2
The policy says data is de-identified first
Organization and Enterprise
NO
Nothing to switch off
Not stated
Not stated
Unknown
14 / 50
Off by default
0 / 33
Nothing is on, so nothing needs refusing
0 / 4
No paywall on the control
0 / 4
One kind of data is in scope
2 / 4
The policy does not say whether people read it
2 / 2
Nothing is said about de-identification
Children's accounts (K12 education)
NO
Nothing to switch off
Not stated
Yes, stated
Unknown
14 / 50
Off by default
0 / 33
Nothing is on, so nothing needs refusing
0 / 4
No paywall on the control
0 / 4
One kind of data is in scope
2 / 4
The policy does not say whether people read it
-2 / 2
The policy says data is de-identified first
Starter and ProfessionalTRAINS: YES
- Self-serve toggle
- Not stated
- 47 / 100
- Yes, stated
- Unknown
Organization and EnterpriseTRAINS: NO
- Nothing to switch off
- Not stated
- 18 / 100
- Not stated
- Unknown
Children's accounts (K12 education)TRAINS: NO
- Nothing to switch off
- Not stated
- 14 / 100
- Yes, stated
- Unknown