Privacy
What we hold, why, who else touches it, and how to get it back or get rid of it.
What we hold
About you: your name, your email address, your company name and details, and a hashed password. We record when you sign in and from what address, because that is how an account break-in is spotted.
Your work: drawings, measurements, price books, quotes, photographs you upload, and the customers you address quotes to, including their name, email, phone and site address. You put this in; it is yours.
Your customers signing: when a quote is accepted we record the signature image, the time, the IP address and the version of the document. That is the evidence the acceptance happened, and it is the point of keeping it.
Billing: your plan, its state and our payment provider's reference for you. Card numbers never reach our servers.
The website: a count of page views by path. No advertising trackers, no third-party analytics scripts, nothing sold to anybody.
Why
To run the service you asked for, to bill you for it, to keep it secure, and to answer you when you write to support. Nothing else. We do not sell personal data, we do not share it for advertising, and we do not use your work to train any model.
Who else touches it
- Our hosting provider, which runs the servers and holds the database.
- Our email provider, which delivers the quotes you send and the notices we send you.
- Our payment provider, which takes the card payment and holds the card details we never see.
Each is bound to use the data only to provide that service to us. We add none lightly and the list above is the whole list.
How long
While your account is open, we keep your work so you can use it. When you close the account we delete your quotes, drawings, photographs, price book and customer records within 30 days, and from backups within a further 60. What survives is a short record that an account of that name was closed on that date, because we have to be able to answer the question "did you delete it when I asked".
Billing records are kept for as long as tax law requires, which is typically seven years, and they contain no drawings or customer data.
Your choices
Take it with you. Settings gives you a complete machine-readable copy of everything on the account, on demand, at no charge.
Have it deleted. Settings also closes the account and starts the deletion above. It cannot be undone, which is why it asks you to type the company name first.
Correct it. Every field about you is editable in the product. If something is wrong that you cannot reach, write to us.
Depending on where you live you may also have the right to object to processing, to restrict it, or to complain to a supervisory authority. Write to support@drawlite.com and we will deal with it.
Security
Passwords are hashed, never stored. Traffic is encrypted in transit. Every account's data is separated by a company identifier enforced at the database layer and checked automatically on every build. Sign-in has rate limiting, lockout after repeated failures, and optional emailed codes as a second factor.
Children
This is a tool for businesses. It is not for anybody under 16 and we do not knowingly collect their data.
Changes
If this policy changes materially we will email the address on your account before it takes effect.
Contact: support@drawlite.com.