Last updated: 20/10/2026
This policy explains what RATA collects when you use the RATA app inside Canva, why, and what you can do about it. RATA is made by Fox40 Agency (operated by Mr. Phan Bảo as an individual, 101 Xo Viet Nghe Tinh, Ninh Kieu Ward, Can Tho City, Vietnam). RATA works with Canva and is not a Canva product.
What we collect
- Your Canva user ID and team (brand) ID, provided by Canva in a signed token: to identify your account, settings, trial and plan. We never receive your Canva password.
- Your Vbee App ID and Token (if you connect them): to create voices with your own Vbee account. The Token is encrypted (AES-256-GCM), never shown again and never sent back to the app.
- Settings: favourite voices, reading defaults, pronunciation dictionary.
- Per-design data: the elements you chose (position, label), your script, voices, timings and build history, linked to the design ID so you can reopen it and continue.
- Audio files RATA created for you: to insert them into your design and reuse them without spending Vbee points again.
- Usage counts (characters, estimated Vbee points, free trial points used) and anonymous events (for example “app opened”, “audio created”): to run the trial and improve the app. Events never contain your script or design content.
- Orders and payments (plan, amount, payment reference, date): to activate your plan and keep payment records. The payment itself is handled by PayOS or Freemius; we never receive card or bank details.
- Email (only if you pay by card / PayPal): you enter it in RATA so Freemius can send the receipt and license key, and so RATA can recognise your payment.
RATA reads a design only while you have RATA open in it, and only what it needs (the elements of the open slide). It does not read designs in the background.
Who we share it with
- Vbee: the text you ask RATA to read and your voice choice, to generate audio. With your own Vbee account if you connected one; during the trial without one, with Fox40’s Vbee account.
- Canva: the audio files you choose to insert, uploaded to your Canva account.
- PayOS and Freemius: what is needed to process a payment you start (for Freemius: your email).
- The hosting provider that stores RATA’s data.
- We do not sell your data and do not use it to train AI models.
How long we keep it
- Vbee Token, settings and scripts: until you delete them (see below) or ask us to.
- Audio: RATA keeps the current audio of each slide (and the read pieces it is built from) until you delete your data. Audio that no design uses any more, such as older versions after you create again or versions you listened to in History, is deleted from RATA’s server automatically after 3 days. History keeps the script of older versions; listening to or restoring a version whose audio was deleted creates it again and uses Vbee points.
- Designs you haven’t opened in RATA for 90 days: RATA deletes their combined audio files and keeps the script and the Vbee read pieces. Open the design and click Create to get the audio back without spending Vbee points.
- Audio you inserted into Canva is in your Canva account (Uploads) and managed by Canva; RATA can’t delete or read those files.
- Payment records: as long as Vietnamese law requires.
Your choices
- Disconnect (Settings › Vbee) deletes the stored App ID and Token immediately.
- Delete my data (Settings › Plan) deletes your Vbee Token, settings, scripts, audio, usage counts and events. Your plan and payment records are kept.
- To see, correct or get a copy of your data, or to withdraw consent, contact support@fox40agency.com. We handle requests under Vietnam’s Decree 13/2023/ND-CP on personal data protection.
Security
Traffic between the app, RATA’s server and Vbee is encrypted (HTTPS). Every request is checked with Canva’s signed user token. Tokens are never written to logs.
Children
RATA is not intended for people under 16.
Changes
When this policy changes we update this page and the “Last updated” date.
Contact: support@fox40agency.com · Fox40 Agency, 101 Xo Viet Nghe Tinh, Ninh Kieu Ward, Can Tho City, Vietnam