Last updated: October 14, 2026
Drawdy ("Drawdy", "we", "our", or "us") is committed to protecting your privacy.
This Privacy Policy explains how we collect, use, disclose, store, and protect information when you access or use Drawdy's websites, applications, diagramming tools, whiteboards, synchronization services, cloud storage features, and related services (collectively, the "Services").
By using the Services, you acknowledge that you have read and understood this Privacy Policy.
We may collect information that you voluntarily provide, including:
When using Drawdy, you may create, upload, import, or store:
You retain ownership of your content.
We may automatically collect:
We use cookies and similar technologies as described in our Cookie Policy.
We use information to:
We do not use private user content for advertising purposes.
Drawdy is designed to provide users with control over their content.
Private diagrams, whiteboards, and files are not publicly accessible unless you choose to share them.
We do not routinely review, monitor, or analyze private user content except when:
Users retain ownership of all intellectual property rights in content created or uploaded to Drawdy.
Drawdy receives a limited license solely to:
Drawdy does not acquire ownership of user content.
We do not sell personal information.
We may share information with the following categories of recipients where reasonably necessary to provide, operate, secure, improve, or support the Services:
Including providers of:
These providers are authorized to process information only as necessary to perform services on our behalf.
We may share information with our parent company, subsidiaries, affiliates, and companies under common ownership or control for operational, administrative, legal, security, compliance, customer support, and business continuity purposes.
Authorized employees, contractors, consultants, and service providers of Drawdy may access information only where necessary to:
All such personnel are subject to confidentiality obligations.
We may share limited information with trusted business partners where necessary to provide specific features, integrations, services, or functionality requested by the user.
We do not authorize business partners to use personal information for their own independent marketing purposes unless permitted by applicable law or with the user's consent.
Information may be shared with users, organizations, workspace administrators, or collaborators to whom you intentionally grant access.
We may disclose information where required by:
Information may be transferred as part of:
When you connect an AI app, the board content it reads at your request goes to that app's provider.
Extensions run in your browser. Drawdy does not send your information to an extension's publisher. An extension can read what its permissions allow, and one that relies on an outside service, such as photo search, sends that service what it needs to work.
Drawdy has no AI of its own. You can connect an AI app of your choice, such as Claude, ChatGPT, Codex or VS Code, through Drawdy's MCP server.
When you connect an app, you sign in to Drawdy and approve the access it asks for:
We store that approval and the access tokens it creates. You can disconnect an app at any time from your account settings, under MCP.
The app reads and changes board content when you ask it to. Whatever it reads is processed by the app's provider under that provider's own terms and privacy policy, not ours. Boards kept only on your device are never visible to a connected app.
We record which app connected, its version, and which tools it used on which board, to run, secure and improve the Services. These records do not contain board content.
Extensions add features to Drawdy. Some are made by Drawdy and some by third-party publishers.
An extension runs in your browser and asks before it uses a permission, such as:
Some extensions use outside services to work, for example photo or GIF search. What they send is handled by that service under its own terms.
We keep records of the extensions you install. If you publish or add an extension, we also keep the GitHub repository and account information needed to build and verify it. If you report an extension, we keep your report and email address so our team can review it.
Third-party publishers are responsible for their extensions. Review the information on an extension's page before you install it.
We retain information only as long as reasonably necessary to:
Deleted content may remain in backups for a limited period before permanent removal.
Inactive accounts may be deleted after extended periods of inactivity.
We implement reasonable administrative, technical, and organizational safeguards to protect information.
These measures may include:
However, no security measure can guarantee absolute protection.
Users are responsible for maintaining the security of their own accounts and devices.
Your information may be collected, stored, processed, transferred, or accessed in countries outside your country of residence.
By using the Services, you acknowledge and consent that your information may be transferred to, stored in, or processed in jurisdictions where Drawdy, its affiliates, service providers, contractors, business partners, or infrastructure providers operate.
Such jurisdictions may have data protection laws that differ from those of your country of residence.
Where required by applicable law, including but not limited to the Thailand Personal Data Protection Act (PDPA), the EU General Data Protection Regulation (GDPR), and other applicable privacy laws, Drawdy will implement appropriate safeguards and protective measures for international data transfers.
Such safeguards may include:
By continuing to use the Services, you acknowledge and agree that international transfers may be necessary for the operation, maintenance, support, security, storage, synchronization, and improvement of the Services.
Depending on your location, you may have rights including:
To exercise your rights, please contact us using the information below.
We may send:
You may opt out of marketing communications at any time.
Certain service-related communications cannot be disabled.
The Services may contain links to third-party websites or services.
Drawdy is not responsible for the privacy practices of third parties.
Users should review third-party privacy policies independently.
We may update this Privacy Policy periodically.
Material changes may be communicated through:
Continued use of the Services after changes become effective constitutes acceptance of the revised Privacy Policy.
If you have questions regarding this Privacy Policy or wish to exercise your privacy rights, please contact support@drawdy.io.