Privacy Policy
Last updated [date]
This policy explains what ModeBit LLC, doing business as DrawMode ("DrawMode", "we"), collects when you use drawmode.ai, the web app at app.drawmode.ai, the desktop app and Showcase sites, why, who processes it for us, how long we keep it, and your rights. We do not sell your personal information, do not use it for advertising, and do not use your content to train AI models.
1. What we collect
Your account. Your email address, which is also your username, and your name; your password, which our sign-in service stores only as a salted hash; your two-factor settings; and, if you sign in with Google or GitHub, the identity they confirm. Your plan, trial dates and preferences (for example your accent colour).
Your content. The projects, diagrams and images you create; documents you add to your library, including websites you ask it to read; messages in team chat; your recent AI conversations; Showcase sites you publish; and, where a project turns it on, the change history that records who changed what.
Sign-in and usage. When and how often you sign in; the IP address and browser of your latest sign-in, and an approximate location (city, region and country) worked out from that IP address; how much you use the AI features; and application logs, which can include your email or IP address when they record an error or a limit being reached.
Payments. If you subscribe, Stripe collects your card and billing details. We never see or store your full card number. We keep your Stripe customer and subscription IDs, your plan, its status and when it renews.
On drawmode.ai. Cloudflare Web Analytics counts page views, the site you came from and your country, without cookies and without identifying you. If you give your email address when you download the desktop app, we keep it, with your operating system and how many times you downloaded, so we know the app is used and can tell you about significant developments. Every such email has a one-click unsubscribe, which deletes your address.
The desktop app. Your projects stay on your computer as files. Once a day the app checks for a newer version and sends a random install ID with its version and operating system, so we can count installations; turn off automatic update checks and it sends no ID. When its AI assistant searches DrawMode's shared document library, it sends the search text and that ID to our servers. If you connect the app to your web account, its daily plan check sends your desktop key and a one-way hash of the computer's ID, so your account can count its computers. The app's own AI features use your own API key and go from your computer straight to the AI provider, not through us.
2. How we use it
- To run DrawMode for you: sign-in, saving and syncing your work, sharing and collaboration, publishing, AI features and the desktop's connection to your web account.
- To bill you and to apply your plan and its limits.
- To keep DrawMode secure and working: preventing abuse, investigating problems and fixing errors.
- To answer you when you contact us, and to send emails about your account: verification, invitations, security notices and billing.
- To understand, in aggregate, how DrawMode and the website are used, so we can improve them.
If you are in the EEA or the UK: we rely on our contract with you to run the service and bill you, on our legitimate interests for security, support and improvement, on your consent for the download email, and on legal obligations where they apply.
3. Who processes it for us
We use these providers to run DrawMode. Each gets only what it needs for its part, and we update this list when it changes.
| Provider | What for | Where |
|---|---|---|
| Northflank | Hosting the web app, its database and our sign-in service, which we run ourselves | United States |
| Cloudflare | DNS, hosting drawmode.ai and Showcase sites (including the files of sites you publish), and drawmode.ai's visit counts | Global |
| OpenAI | The AI assistant, reading images, and the search index of documents in your library | United States |
| Serper | Web search for the AI assistant: the search terms only | — |
| Stripe | Payments and invoices | United States |
| Email, Google sign-in if you choose it, and the fonts on drawmode.ai, in the web app and on Showcase sites | United States | |
| GitHub | GitHub sign-in if you choose it, and hosting desktop app downloads and updates | United States |
| jsDelivr | Delivering the open-source code libraries the web app loads in your browser | Global |
| ipwho.is | Working out an approximate location from an IP address | — |
AI features. When you use one, we send OpenAI what that request needs, for example the diagram you are working on, your message, an image or a document. We do not send your name or email address with it, and under OpenAI's API terms it is not used to train its models. When the assistant searches the web, Serper receives the search terms the assistant writes, which can include words from your conversation.
4. Who else can see it
- People you work with. Collaborators see the projects you share and their team chat, your name and email address, and which diagram you are in and where your cursor is. Where a project keeps a change history, it shows who changed what. A Company admin sees who holds the Company's seats.
- The public, for a Showcase site you publish, unless you set a password. A site is listed on your catalog page unless you make it link-only.
- Our team. The people who run DrawMode can see account details (such as sign-in history, approximate location, plan and AI usage) and can open the projects in an account. We look at your projects only when you ask for help, or to investigate abuse, a security problem or a legal request.
- The law. We disclose information when the law requires it, or to protect people's safety, and we will tell you unless we are not allowed to.
- A new owner. If DrawMode is sold or merged, your information passes to the new owner under this policy.
5. Cookies and browser storage
The web app sets a cookie that keeps you signed in for up to 14 days; our sign-in service sets its own while you sign in; and a password-protected Showcase site sets one for 7 days after you enter its password. The web app also keeps a few settings in your browser's storage on that device, such as where your code lives on your computer. None of these track you elsewhere. drawmode.ai sets no cookies: its visit counts come from Cloudflare Web Analytics, which needs none. We use no advertising cookies.
6. How long we keep it
| Your account and content | While your account exists |
| Projects and diagrams you delete | In the app's trash until you empty it |
| Sign-in sessions | Until 30 days without use |
| AI conversations | Your three most recent |
| AI usage totals and desktop install records | While we need them to apply limits and count use |
| Your download email | Until you unsubscribe or ask us to delete it |
| Database backups | Up to 120 days |
| Invoices and payment records | As long as tax law requires (kept by Stripe) |
To delete your account, choose Delete my account… in the app's account menu. Your account, your projects and Showcase sites, and the documents, images, AI conversations and keys tied to it are deleted at once, and a subscription is cancelled. You can also write to info@drawmode.ai and we will do it within 30 days. Copies in backups expire within 120 days. Shared projects you contributed to keep your past changes and messages, without your account behind them.
7. Your rights
You can ask us to show you, correct, export or delete the personal information we hold about you, or to stop using it in a particular way. You can export any of your projects yourself with Export project…. For anything else, email info@drawmode.ai; we answer within 30 days and may need to confirm it is you first.
California residents have the right to know, delete and correct their personal information and to opt out of its sale or sharing. We do not sell or share personal information for advertising, and we will not treat you differently for using these rights.
In the EEA or the UK, you also have the right to data portability, to withdraw consent at any time, and to complain to your local data protection authority. Your information is processed in the United States, under the safeguards our providers offer for such transfers.
8. Security
Everything travels over HTTPS. Passwords are stored only as salted hashes, two-factor sign-in is available, and access to the systems that hold your data is limited to the people who run DrawMode. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.
9. Children
DrawMode is not for anyone under 16, and we do not knowingly collect their information. If you think a child has given us information, tell us and we will delete it.
10. Changes
If we change this policy in a way that matters, we will tell you by email or in the app before the change applies. The date at the top shows when it last changed.
11. Contact
ModeBit LLC, [business address] · info@drawmode.ai