✦CanvasFlow
Privacy PolicyTerms of ServiceCookie PolicyAcceptable Use PolicySub-processorsData Processing AgreementSecurity

Legal

Acceptable Use Policy

Last updated 28 July 2026

A board is private, and we do not go looking through them. That freedom depends on this policy being kept. It forms part of the Terms of Service, and breaking it is grounds for Northem suspending or closing an account on CanvasFlow.

On this page

  1. Nothing illegal
  2. Nothing that targets people
  3. Nothing that attacks the service
  4. How this is enforced
  5. Reporting abuse

Nothing illegal

Do not use the service to store, share or plan anything unlawful under Norwegian law or the law where you are. That includes, and is not limited to:

  • Material that sexually exploits or endangers children. This is reported to the authorities and the account is closed without notice or appeal.
  • Content that incites violence or terrorism, or that promotes it.
  • Material that infringes copyright, trademarks or other intellectual property you do not have the right to use.
  • Personal data collected or shared in breach of data protection law.
  • Fraud, phishing kits, stolen credentials, or the proceeds of any of them.

Nothing that targets people

Do not use shared boards or invitations to harass, threaten, stalk or defame anyone, to publish someone’s private information without their consent, or to impersonate another person or organisation.

Do not use the service to distribute malware, spyware, or anything designed to compromise a device or account.

Board invitations are not a mailing list. Do not use them to send unsolicited bulk messages.

Nothing that attacks the service

  • Do not probe, scan or test the security of the service except as the Security page invites you to. Responsible disclosure is welcome; unannounced penetration testing is not.
  • Do not attempt to access another user’s account, board or files.
  • Do not circumvent rate limits, storage quotas or plan restrictions, or create accounts in bulk to get around them.
  • Do not place a load on the infrastructure that degrades it for other people — automated scraping, unbounded request loops, or using board storage as a general-purpose file host or content delivery network.
  • Do not resell access, or run the service on behalf of third parties as if it were your own.

How this is enforced

We do not scan the contents of private boards. We act on reports, on abuse signals from our providers, and on legal demands.

Where we can, the first step is an email explaining the problem and giving you a chance to fix it. Where the breach is severe — child sexual abuse material, an active attack, a credible threat to someone — we suspend first and explain afterwards.

Suspension makes an account read-only so you can still export. Closure removes the content on the schedule set out in the Privacy Policy.

If you think we have made a mistake, reply to the notice. A human reads it.

Reporting abuse

Write to admin@northem.no with the board or share link, what you believe is wrong with it, and how to reach you. Reports about children’s safety and credible threats are handled first.

If you are a rights holder reporting infringement, include enough detail to identify both the work and the material, and a statement that you are authorised to act.

Northem, Norway · admin@northem.no

Home · All documents · Your data