Privacy policy

Controller and contact

Drawvera project owner is the controller for information processed through the hosted Drawvera service.
Available through the invitation contact channel during private testing
Privacy requests: Available through the invitation contact channel

Organizations using a separately deployed self-hosted version may be controllers for their own deployment; their notice applies to that processing.

Information Drawvera handles

• Google account information: Google identifier, verified email, display name, and profile picture.
• Agreement records: accepted Terms and Privacy versions, acceptance time, and age confirmation.
• Your workspace: drawings, pages, titles, previews, collections, memberships, invitations, activity, and record dates.
• Inquiries and feedback: contact details, company information, team size, message, and source page.
• Security and service information: session identifiers, request metadata, IP address, request identifiers, and error information where needed for security and reliability.
• Device-local information: preferences and local drafts stored by your browser unless saved to your workspace.

Sources and purposes

Account data comes from Google after your authorization. Workspace content and inquiries come from you or authorized workspace members. Security information comes from your browser, device, and infrastructure providers.

• Contract and requested service: authenticate you, save and export work, administer workspaces, and provide support.
• Legitimate interests: secure the service, enforce limits, prevent abuse and fraud, diagnose failures, and improve reliability, balanced against your rights.
• Consent: where specifically requested for an optional feature or communication; consent may be withdrawn prospectively.
• Legal obligations: comply with valid legal process, recordkeeping duties, and protect legal rights.

Recipients and international transfers

Google provides authentication. OpenAI Sites and Cloudflare provide application delivery, security, compute, and database infrastructure. Linear receives enterprise inquiries and feedback. Authorized workspace members receive information you intentionally share with their organization. Information may also be disclosed to professional advisers, authorities responding to valid legal process, or a successor in a business transaction subject to appropriate protections.

Providers may process information in countries outside yours. Where applicable law requires it, transfers rely on adequacy decisions, contractual safeguards offered by the provider, or another lawful mechanism. Contact Available through the invitation contact channel to request available information about applicable safeguards.

Cookies and local storage

Drawvera uses cookies necessary for Google OAuth and authenticated sessions. The signed-in session lasts up to 24 hours unless ended sooner. Browser storage may remember editor preferences and local drafts. Drawvera does not currently use advertising cookies or behavioral advertising analytics.

Retention and deletion

Workspace information is kept while your account is active. Account deletion removes your profile, drawings including trash, collections, activity, and active sessions from the live Drawvera database. Export anything you want to keep first. Provider-managed backups and security records may remain for the provider’s bounded recovery or security cycle and are isolated from ordinary use.

Inquiry and feedback records are retained only as long as reasonably needed to respond, evaluate the request, maintain the resulting business relationship, and meet legal obligations. Because inquiries can be submitted without signing in, account deletion does not automatically identify and remove them; contact Available through the invitation contact channel. Information may be retained longer when required for a legal obligation, dispute, fraud prevention, or security investigation.

Your choices and rights

Depending on where you live, you may request access, correction, deletion, restriction, objection, or portability; withdraw consent; and complain to your local data-protection authority. Account deletion is available from Profile. Send other requests to Available through the invitation contact channel. Identity verification may be required, and authorized agents must demonstrate authority. Drawvera does not sell personal information or share it for cross-context behavioral advertising.

Security

Drawvera uses access controls, encrypted transport, server-enforced authorization, limited sessions, rate controls, and provider security features intended to protect information. No system is perfectly secure. Drawvera is not end-to-end encrypted, so authorized infrastructure can process content to provide the service.

Children

The hosted service is not directed to children and requires users to be at least 18. If you believe a child supplied personal information, contact Available through the invitation contact channel so it can be investigated and deleted where required.

Automated decisions

Drawvera does not currently use personal information to make decisions producing legal or similarly significant effects through solely automated processing.

Changes

Material changes will receive a new version and effective date. Drawvera will provide notice or request renewed acknowledgement where required.