Privacy Policy
My3DCover inside Canva
Last updated: 13 October 2026
The My3DCover Canva app is operated by Grafidraw. It does not require a separate My3DCover account or external payment. The website account, sign-in, purchase, and five-day browser-draft features described elsewhere in this policy do not apply to the Canva app.
When you choose artwork, the app uses Canva's asset APIs to access the selected image or upload the file you choose to Canva. Generated PNGs are also uploaded to Canva. Canva design elements store image references and mockup settings so you can select and edit a saved mockup later. Canva processes and retains those assets and designs under its own policies and your Canva account controls.
Preview images and the recent-image list are held in browser memory during the app session. Reloading or ending the session discards that memory. Clear image removes an image reference from the active cover surface; it does not delete the image from your Canva library. Removing the app does not automatically delete your Canva uploads or designs. Manage those items through Canva's own controls.
We do not receive or keep a server-side copy of your cover artwork or generated PNG through the Canva app. The app requests static templates and images from my3dcover.com. Our hosting provider, Hostinger, may process IP addresses and technical request/security information to deliver and protect those files. Hosting-log retention and deletion depend on the applicable Hostinger service and legal requirements; the exact period for this hosting account has not been verified. Hostinger's privacy policy is available at Hostinger privacy policy.
For privacy requests concerning information handled by Grafidraw, contact support@grafidraw.com. We will coordinate requests relating to our hosting service with the provider. Requests concerning Canva-held artwork, assets, or designs should use Canva's controls or support channels.
My3DCover website privacy policy
Last updated: 28 September 2026
My3DCover is a book mockup maker operated by Grafidraw (“we”, “us”). This policy explains how we handle personal information when you use my3dcover.com. For privacy questions or requests, email support@grafidraw.com.
Information we collect
- Account and sign-in information: your email address and account identifier. If you request an email sign-in code, we use your email address to send the code and temporarily store a protected version of the code and limited request information to prevent abuse. Codes expire after 10 minutes.
- Google sign-in information: if you choose Google sign-in, Google and our social-login provider may give us your Google account identifier, email address, name and profile photo. The social-login plugin may store information needed to maintain the connection, such as a provider identifier or authentication token. We use this information to create or connect your My3DCover account and sign you in. We do not request access to your Gmail messages, Google Drive files or contacts.
- Orders and payments: when you buy template access, WooCommerce records your account, purchased product or template, order date, amount, status and billing details supplied at checkout. Stripe processes the payment and may receive payment, device and transaction information. We do not need to store your full card number in My3DCover.
- Technical information: our site, hosting provider and security tools may process IP address, browser and device information, request times and error or security logs to deliver and protect the service.
- Cover artwork: cover images you choose in the mockup editor are processed in your browser to create a preview and downloaded PNG. The editor does not upload those cover files to our server as part of normal editing. A working draft is stored on your device for up to five days after its latest save, unless you log out, switch accounts or clear browser data. Keep your original files and downloaded images.
How we use information
We use account and sign-in information to provide access, authenticate you and answer support requests. We use order information to deliver the five-day single-template or ten-day all-template access you purchase, keep transaction records, handle refunds and comply with legal obligations. We use technical information to keep the site working and prevent misuse. These activities are based, as applicable, on providing the service you request, legal obligations and our legitimate interests in operating and securing it.
Google sign-in information is used for account creation, account linking and authentication. We do not sell it or use it for targeted advertising, credit decisions or training general-purpose AI models. If you stop using Google sign-in, you may ask us to disconnect it from your account, subject to information we must retain for an active order or legal reason.
Cookies, local storage and external services
WordPress and WooCommerce use cookies needed for sign-in, account security and checkout. If you select “Keep me signed in”, WordPress normally keeps your sign-in for up to 14 days unless you log out earlier. Nextend Social Login may set a temporary cookie for the Google sign-in flow. The editor uses browser storage to restore a working draft for up to five days and to remember an unfinished checkout choice in the same tab. Stripe may set cookies or use similar technology for payment and fraud prevention.
The site loads some fonts from Google Fonts and some template font files from grafidraw.com. When your browser requests those files, the font provider may receive technical information such as your IP address. If we add optional analytics or advertising tools later, we will update this policy and provide any choices required by law.
Who receives information
We use service providers where needed to run My3DCover, including Hostinger for hosting and email infrastructure, Stripe for payment processing, and Google when you choose Google sign-in or your browser loads Google-hosted fonts. WordPress, WooCommerce and Nextend Social Login process relevant information within the site. These providers may process data in other countries under their own policies and applicable transfer safeguards. We may disclose information when required by law or to protect the service and its users.
How long we keep information
Sign-in codes expire after 10 minutes; short-term request limits also expire. Account information remains while your account is active and for a reasonable period afterward if needed for support, security or legal obligations. Order records are kept for the periods required by tax, accounting and consumer-protection law, even after an access pass ends. Security and server logs are kept only as long as needed for those purposes, according to the relevant hosting settings. Browser-processed cover images are not retained by the mockup editor on our server.
Your choices and rights
You may ask to access, correct, export or delete personal information associated with your account by emailing support@grafidraw.com. You may also object to or request limits on certain processing where applicable. We may need to verify your identity and retain information required for transactions or by law. If you are in the EEA, UK or another region with privacy rights, you may also complain to your local data-protection authority.
You can sign out from the My3DCover menu. You can also manage or revoke My3DCover’s Google connection through your Google Account settings; revoking it may affect Google sign-in until you reconnect or use another sign-in method.
Changes
We may update this policy when the service or legal requirements change. The date above shows the latest update. Material changes will be communicated through the site or by email where appropriate.
Contact: Grafidraw — support@grafidraw.com.