Your data in drawarc.io.

Information we process

We process account details such as your name, email, workspace information, and authentication records. Social sign-in provides account identifiers and the profile information needed to sign you in or link a provider.

Your workspace can contain diagrams, source, layouts, embedded assets, comments, team assignments, and AI conversations. Operational records may include request identifiers, timestamps, usage, provider cost information, and security or billing events.

Why information is used

We use this information to authenticate accounts, save and recover files, enforce access and usage limits, generate requested AI output, provide support, and operate and protect the service. If you use a paid offering, payment records are used to reconcile subscriptions and support billing requests.

AI and external services

AI requests send your prompt and relevant project context to the configured provider, such as Google Gemini or OpenAI. Avoid submitting secrets or content you are not authorized to share. Provider terms and data practices also apply to their processing.

Hosting infrastructure processes service data. Google, GitHub, and LinkedIn participate when you choose their sign-in option. Hosted payment providers process payment information when checkout is available; do not send card details to support.

Website analytics and browser storage

We use Google Analytics to measure public page views and the steps from opening a template to editing a diagram, creating an account and starting a verified paid subscription. Our event payloads exclude account names, email addresses, diagram titles, source, prompts, assets, private file identifiers and sharing or recovery tokens. Workspace page locations are replaced with a generic workspace path; query strings are not sent. Automatic form and outbound-link measurement is disabled. Google Analytics may still process browser/device information, approximate location and cookie identifiers under its own terms.

The app uses browser storage for the sign-in session, preferences, local draft recovery and analytics deduplication markers. Short-lived cookies bind provider sign-in requests to your browser. Browser settings can restrict cookies and site storage; doing so may affect sign-in and recovery. Clearing local storage can remove unsynced drafts and reset analytics markers.

Who can see shared content

Team access follows the role assigned to a file. Anyone with an active public sharing link may view its shared content. Revoking a link stops future access through that link, but does not remove screenshots, downloads, or other copies already made.

Exports may contain more than a rendered image. Check editable project backups and documentation before sending them to another person.

Storage, retention and requests

Workspace data is retained to provide the service, recovery, and account history. A file in Trash is recoverable and has not been permanently erased. Backups, security records, and billing records may persist separately from active files.

Email support@drawarc.io to request access, correction, export, or deletion, or to ask about retention. We may need to verify account ownership. Requests are handled subject to applicable requirements and any information that must be retained for security or billing. We do not publish a guaranteed automatic deletion period.

Contact and changes

Contact support@drawarc.io with privacy questions. We may update this policy as the product and processing change; the date at the top identifies the current published version.