Privacy Notice

Who we are

Drawra Inc, trading as Drawra, is the data controller for the personal data described here. Contact us at support@drawra.com.

What we collect and why

• Account data — name, email address and login credentials (or your Google account identifier if you sign in with Google). Used to create and secure your account. Legal basis: performance of our contract with you.
• Company profile — company name, address, phone, licence number, signer name and logo. Used to populate the documents you generate. Legal basis: performance of our contract.
• Project content — contracts you upload, schedules of values, pay applications, waivers and recipient names and email addresses you enter. Used to read billing requirements and generate your billing packages. Legal basis: performance of our contract.
• Usage and technical data — log data, device identifiers, IP address and error reports. Used for security, fraud prevention, troubleshooting and improving the product. Legal basis: our legitimate interest in running a secure, reliable service.
• Support messages — what you send us. Used to answer you. Legal basis: legitimate interest.
• Marketing emails — only if you opt in. Legal basis: consent, withdrawable at any time.

We do not collect or store your card details. Payment data is collected directly by Paddle at checkout.

Who we share it with

• Service providers and subprocessors — cloud hosting and database providers, our AI provider for reading uploaded contracts, and error-monitoring tooling.
• Paddle.com Market Ltd, our Merchant of Record, for sale of the product, subscription management, payments, tax compliance and invoicing.
• Professional advisers — legal and accounting, where necessary.
• Authorities — where we are required to by law.

We do not sell your personal data.

Retention

We keep account and project data for as long as your account is active, and for up to 12 months after you close it so you can recover it, unless you ask us to delete it sooner. Records we must keep for tax or legal reasons are retained for the period the law requires. After that, data is deleted or anonymised.

Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict or port your personal data, to object to processing, and to withdraw consent. Email support@drawra.com and we will respond within one month. If you are in the UK or EEA you may also complain to your supervisory authority; if your data is transferred outside the UK/EEA we rely on adequacy decisions or Standard Contractual Clauses.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and row-level database isolation, so that your projects and documents are only accessible to your account.

Cookies

We use essential cookies and local storage to keep you signed in and to run the checkout. Paddle sets its own cookies during checkout to process the payment and prevent fraud. We do not use advertising cookies. You can clear or block cookies in your browser, but the app will not stay signed in without the essential ones.