Privacy Policy

1. Introduction

DrawX ("we," "our," or "us") is an AI-powered diagram creation platform operated at getdrawx.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect your email address, name, and authentication credentials via Google OAuth or email/password signup. This data is managed through Supabase, our authentication and database provider.

Usage Data

We collect information about how you use DrawX, including diagram generation requests, AI model usage, token consumption, and session metadata. This helps us enforce usage quotas, improve our service, and monitor for abuse.

Diagram Content

Your diagram prompts and generated diagrams are processed by our AI service (Google Gemini). We do not permanently store the content of your AI conversations beyond what is necessary for the current session. Diagram projects are stored in your account for your access.

Payment Information

Payments are processed by DodoPayments. We do not store your credit card details directly. Payment metadata (transaction ID, plan type, timestamp) is stored to manage your subscription.

3. How We Use Your Information

• To provide and maintain the DrawX service
• To authenticate your identity and manage your account
• To process payments and manage subscriptions
• To enforce usage quotas and prevent abuse
• To monitor and analyze service performance and AI quality
• To communicate with you about service updates
• To comply with legal obligations

4. Third-Party Services

We use the following third-party services:

• Supabase — Authentication, database, and user management
• Google Gemini AI — AI-powered diagram generation
• DodoPayments — Payment processing
• Vercel — Application hosting and deployment
• Langfuse — AI observability and analytics

Each of these services has their own privacy policies governing how they handle your data.

5. Data Retention

We retain your account data for as long as your account is active. Diagram projects are stored until you delete them. AI conversation logs are retained for up to 90 days for quality monitoring and then automatically purged. You may request deletion of your account and associated data at any time by contacting us.

6. Data Security

We implement industry-standard security measures including encrypted data transmission (TLS/HTTPS), row-level security in our database, secure authentication via Supabase, and regular security audits. However, no method of electronic storage is 100% secure.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your diagram projects
• Withdraw consent for data processing

8. Children's Privacy

DrawX is not intended for use by children under 13. We do not knowingly collect personal information from children under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, please contact us at saharshpamecha1@gmail.com.