Drawrix Back to App

Privacy Policy

Last updated: October 30, 2026

At Drawrix, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our service.

Summary: We only collect what is necessary to provide the service. We do not sell your data. We use industry-standard security practices to protect your information.

1. Information We Collect

1.1 Information You Provide

Data Type Purpose Required
Email Address Account creation, login, notifications Yes
Name Personalization (optional) No
Password Account security (stored as hash) Only for email/password registration; not for Google sign-in

1.2 Information Collected Automatically

Data Type Purpose
IP Address Security, rate limiting, fraud prevention
Browser/Device Info Service optimization, troubleshooting
Usage Data Download history, requested areas, file formats
Cookies Session management, authentication, advertising preferences, and ad measurement
Advertising Data Advertising identifiers, IP address, device/browser information, and ad interactions may be processed by Google AdSense

For generation troubleshooting, we keep minimal first-party attempt diagnostics: your internal account ID, a random attempt reference, timestamps, reported format and rounded area size, a fixed verification/request error category, and any server-confirmed HTTP outcome or linked job. These are not a browsing history and contain no map coordinates, authentication tokens or CAPTCHA responses. Only administrators can read them. Records expire after seven days and are purged during scheduled maintenance or API startup; collection is best effort and does not block map generation.

2. How We Use Your Information

We use the collected information to:

  • Provide the Service: Process your map generation requests and deliver files
  • Manage Your Account: Authentication, email verification, password recovery
  • Process Payments: Handle payments for downloads and billing (through secure payment processors)
  • Improve the Service: Analyze usage patterns to enhance features
  • Show and Measure Advertising: Deliver and measure ads, and personalize them when permitted by your choices and applicable law
  • Communicate: Send service updates, security alerts, and support responses
  • Security: Detect and prevent fraud, abuse, and unauthorized access

3. Information Sharing

We do NOT sell your personal information to third parties.

We may share information only in these circumstances:

  • Payment Processors: When you make a payment, the data is handled by Paddle or similar providers. We do not store your full card details.
  • Advertising Provider: Google AdSense may collect or receive device, browser, IP address, cookie, and ad-interaction data to deliver and measure advertising, subject to your consent where required.
  • Technical Providers: Supabase (database), Railway (API and map processing), Upstash (queue and temporary state), Cloudflare (web delivery, storage and security), Resend (transactional email), and Sentry (error diagnostics) support the service. Map selections are also queried through geographic-data providers, including OSM/Overpass services; basemap providers such as CARTO receive map-view requests.
  • Google Sign-in: If you choose Google login, Drawrix receives the account information needed to authenticate you, such as your email and profile name. Drawrix does not receive your Google password.
  • Legal Requirements: If required by law, court order, or governmental authority
  • Protection: To protect our rights, safety, or property, or those of our users
  • Business Transfers: In the event of a merger, acquisition, or sale of assets

4. Data Security

We implement industry-standard security measures:

  • Encryption: All data transmitted via HTTPS/TLS
  • Password Hashing: Passwords are hashed using bcrypt with salt
  • Access Controls: Limited employee access to personal data
  • Regular Updates: Security patches and vulnerability monitoring

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your data as follows:

  • Account Data: Retained while your account is active
  • Download History: Retained to provide account history, support and billing records, subject to applicable deletion and retention requirements.
  • Generated Files: Normally available to download for 7 days. Download access expires separately from storage-provider cleanup; an expired link does not mean that an object has already been physically deleted.
  • Logs: Retention depends on the hosting and diagnostic providers and the security or support purpose. Contact us for information about the applicable retention settings.

6. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request the deletion of your account and associated data
  • Export: Receive your data in a portable format
  • Opt-out: Unsubscribe from marketing communications

To exercise these rights, contact us at [email protected]

7. Cookies

We use cookies for:

  • Essential Cookies: Required for login and session management
  • Preference Cookies: To remember your settings and preferences
  • Advertising Cookies and Similar Technologies: Google AdSense may use cookies, local storage, web beacons, or similar technologies to deliver, measure, and personalize ads, subject to your consent where required

Google and its advertising partners may personalize ads based on visits to this and other sites where permitted. You can manage site choices through Privacy and cookie settings and manage Google advertising personalization in My Ad Center. Other participating providers offer controls through YourAdChoices. These provider controls do not replace consent required on this site.

Sign-in uses local storage as well as provider technologies; not every stored entry is an advertising cookie. Refusing advertising does not change your plan or instruct Drawrix to clear your login. Read our Cookie Policy for the storage inventory and available controls, and Google's advertising information for provider practices.

8. Third-Party Services

Our service may integrate with:

  • OpenStreetMap: Map data source (subject to their privacy policy)
  • Payment Processors: Paddle for payment handling
  • Google AdSense: Advertising delivery and measurement
  • Cloud Infrastructure: Hosting and storage providers

Each third party has its own privacy policy that governs the use of information.

9. Children's Privacy

Drawrix is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so that it can be deleted.

10. International Users

Drawrix operates from Peru. Its infrastructure and service providers may process information in other countries. Provider locations and applicable protections can differ from your country. For questions about processing locations and your rights, contact [email protected]; using the site is not a blanket consent to advertising or all international data transfers.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by email or through the Service. The "Last updated" date at the top indicates the most recent revision.

12. Contact Us

For questions or concerns about this Privacy Policy or our data practices, contact us at:

Email: [email protected]

By using Drawrix, you acknowledge that you have read and understood this Privacy Policy.