1. What Canvless is
Canvless is a subscription service for verified United States law-enforcement agency personnel, operated by AAK Studio LLC, a New Jersey limited liability company ("we", "us"). It has three parts: this website (verification, billing and account), a free mobile app for iOS and Android (the map and your account; it sells nothing), and a web app that shows the same map. This policy covers all three.
The product is a shared map of surveillance cameras that investigators have documented in the course of their work: where each camera is, which way it faces, who owns it, how long it keeps footage, and who to ask about it.
2. What we collect
About you
- Account details: your name and rank, your sign-in email, your agency and state.
- Verification result: which method you used (GovX ID, an agency email, or a credential we reviewed) and the date it passed. If you verify through GovX, GovX sends us your GovX member ID, name and email, whether you are verified, and your affiliation (for example, current city police). We use them only to complete the check and keep only the method and the date; we don't store your GovX name or email, and we don't request your demographics or documents. If you upload a credential, a person reviews it and it is deleted after the decision; we keep only the decision and the date.
- Billing: our payment processor, Stripe, holds your card or wallet details. We receive a token, the last four digits, the plan you chose, and your payment history. We never see your full card number.
- Device: the one phone you enrolled (a device identifier and the name you gave it) . We keep a history of device changes and lost-phone reports. If you turn notifications on, we also hold a push-notification token for that phone. Face ID and fingerprint checks happen on your phone; we never receive your face, fingerprint or any other biometric information.
- Activity: every time you open the map, which area you looked at, every camera you added, edited, checked or looked at, with the time, and whether a screenshot was taken while the map was open (detected on iPhone and on Android 14 or later). This is an audit log. It exists so a leak can be traced to an account.
- Location: the app asks for location only while you're using it, never in the background. It uses your phone's precise location to show where you are on the map, to place a camera you're adding, and to confirm you're within 150 meters (about 500 feet) of a camera when you log a check. The map provider (Apple on iPhone, Google on Android and the web) receives the area you're viewing, which usually includes your current location, so it can draw the map. We don't record a continuous track of your movements. When you log a check we store the time and how far you were from that camera (not your coordinates), and the audit log records which map areas you viewed.
- Support: anything you send to [email protected].
About cameras
What investigators enter: location, direction and range, owner type, mount, picture quality by day and night, what's in frame, how long footage is kept, how to obtain it, who to ask and when they're available, notes, and the record of who added and checked it.
What we never collect
Case numbers, footage, stills or evidence of any kind, incident details, victim, suspect or witness information, anything from a police database, and covert law-enforcement cameras. The spot you long-press for a canvass and the incident time you set are used to sort results on your phone and are not stored by us.
3. Camera owners are third parties
Investigators may note how to reach a camera's owner: for a business, usually a role and a store number; for a home, a contact only if the resident offered it for this purpose. If your contact details appear in Canvless and you want them removed, email [email protected]. We will remove them and tell the investigator who added them that the owner asked. We do not use owner details for anything except helping a verified officer reach you about footage.
Daniel's Law and similar protections. If you are a covered person under New Jersey's Daniel's Law (for example an active or retired judge, prosecutor or law-enforcement officer, or a family member in the same household) and you ask us in writing not to disclose your home address or unlisted home phone number, send the request to [email protected]. Within 10 business days we will remove that information, and if a pin's location by itself would show your home address, we will remove the pin. We honor the same request from anyone, whatever state they live in.
4. How we use it
- To verify your law-enforcement status when you join and once a year after that, and to keep the map limited to verified officers.
- To show you the map and let you add, check and canvass cameras.
- To bill you, or to apply your department's plan so you're not billed.
- To send you the emails the service needs: sign-in codes, verification results, device and account notices, receipts, a reminder before a yearly plan renews, and notice of any price change.
- To send push notifications about the map, if you turn them on: approvals of cameras you added, and checks on your cameras.
- To keep the map trustworthy: fading pins nobody has checked in six months, retiring cameras two investigators report removed.
- To investigate leaks and misuse using the audit log.
- To answer support requests.
We do not sell your data, use it for advertising, or build profiles for anyone else. We do not use tracking SDKs in the app.
5. Who we share it with
| Who | What | Why |
|---|---|---|
| Other verified subscribers | The cameras you add and check, under your name and agency | The map is shared. That is the product. |
| Stripe | Payment details | Billing |
| GovX | Nothing from us. You sign in to GovX on its site, and GovX sends us the verification result described in section 2 | Verification, under GovX's own privacy policy |
| Map provider (Apple on iPhone, Google on Android, OpenFreeMap in the web app) | The map area you request (tile requests, which usually include your current location) and your IP address, to draw the map | Rendering the map, under the provider's own privacy policy |
| Service providers: Supabase (database and sign-in), Resend (email delivery), Cloudflare (website hosting, domain and email forwarding), Google (the support mailbox our addresses forward to), Stripe (payments), Apple and Google (push notifications) | Only the data each one needs to run its part of the service | Infrastructure, under contract. They may not use your data for their own purposes |
| Law enforcement or courts | What a valid legal process requires | We tell you unless prohibited |
We store your data in the United States. If AAK Studio LLC is ever sold or merged, this data moves with the service under the same rules, and we'll notify you.
6. How we protect it
- No passwords. Sign-in is an emailed code, then your enrolled phone, unlocked with Face ID or a fingerprint where the phone has one.
- One phone per account. A lost phone can be revoked from your account page and stops working that minute.
- Every map view is watermarked with your name and logged. The map only loads the area in front of you, with a cap on pins. There is no bulk export. A canvass list you copy is limited to the radius you set and carries your name.
- Camera notes are encrypted in transit and at rest. Sign-in codes are hashed and expire in ten minutes.
- Access ends when you can no longer verify, and we may ask you to re-verify at any time.
No system is perfect. If we learn of a breach affecting your personal information, we will tell you without unreasonable delay and notify the authorities the law requires (in New Jersey, the State Police, before we notify affected users).
7. How long we keep it
| Data | Kept |
|---|---|
| Camera pins and notes | While the camera is on the map. Retired cameras are purged after one year. |
| Your account | While your subscription or department plan is active, plus 90 days after it ends, lapses or is canceled. A lock for non-payment counts as lapsed: pay within those 90 days and everything is still there. If you ask us to delete it, within 30 days of the request. |
| Audit log | Three years, then deleted. |
| Uploaded credentials | Deleted after review. Only the decision and date are kept. |
| Emails we sent | Subject and delivery status for three years; the body for 90 days. |
| Billing records | As long as tax and accounting law require. |
8. Your choices and rights
- See and correct your data: your account page shows your enrolled phone, subscription and device history. Email us for a copy of everything we hold about you.
- Delete your account: in the app, Settings → Delete account, or email [email protected]. We delete your account and personal details within 30 days. Cameras you added stay on the map under the label "former subscriber", because other officers rely on them; the audit log keeps your entries for the retention period above, because it exists to trace leaks.
- Cancel: from your account page, any time. Access continues to the end of the paid period.
- Location and camera permissions: turn them off in your phone's settings. Adding cameras and logging checks need them; viewing the map does not.
- Email: we only send emails the service needs. There is no marketing list.
Several states, including California, New Jersey, Virginia, Colorado and Connecticut, give residents the right to know, access, correct, delete and get a copy of their personal information. Those laws may not apply to a company our size, but we honor these requests from every user wherever they live. Email [email protected] and we will answer within 45 days. If we turn a request down, we'll say why, and you can reply to appeal. We do not sell personal information, share it for targeted advertising, or use it to profile you, and we do not treat anyone differently for exercising a right.
Cookies and Do Not Track
The website uses only the cookies and browser storage needed to keep you signed in and, on the checkout page, the cookies Stripe sets to prevent fraud. We use no analytics or advertising cookies and do not track you across other websites or apps. Because of that, we treat every visitor the same whether or not the browser sends a Do Not Track or Global Privacy Control signal.
9. Children
Canvless is for adult law-enforcement agency personnel. We do not knowingly collect information from anyone under 18.
10. Changes
If we change this policy in a way that matters, we'll email you at least 30 days before it takes effect and show the new effective date at the top of this page. We will not use data we already hold in a materially different way without asking you first.
11. Contact
AAK Studio LLC · [email protected] · [email protected]
Mailing address: on request, and on every invoice.