Privacy Policy

Draftr Privacy Policy

Effective: July 6, 2026

This Privacy Policy explains how QWERTY Code LLC ("we," "us," "our") collects, uses, processes, and protects your information when you use the Draftr desktop application, website, cloud services, AI features, and related services (collectively, the "Service"), available at draftrcad.com. By using the Service, you agree to this Privacy Policy.

Quick Summary

  • We collect information necessary to operate, authenticate, and improve Draftr.
  • We do not sell your personal information to third parties.
  • AI prompts and generated geometry may be transmitted to third-party AI providers to fulfill your requests - see the AI Features & Data section.
  • Your CAD files and designs remain yours. We do not claim ownership over your work.
  • You may delete your account at any time; deletion includes a 30-day grace period.
  • We use reasonable technical and organizational safeguards to protect your data.

Information We Collect

Information You Provide

  • Account Information: email address, display name, authentication credentials, and preferences.
  • User Content: CAD scripts, CadQuery geometry, designs, feature trees, project files, and other content you create or sync to our cloud services.
  • AI Prompts: text instructions and geometry context you submit to AI features.
  • Support Communications: messages, feedback, bug reports, and other inquiries you send to us.
  • Billing Information: payment details processed through our third-party payment processor. We do not store full payment card numbers.

Information Collected Automatically

  • Device & Log Data: IP address, operating system, application version, crash reports, and error logs.
  • Usage Data: feature interactions, tool usage patterns, session duration, and AI generation activity (e.g., number of generations, token usage).
  • Cookies & Local Storage: authentication tokens, session state, and user preferences stored locally or in your browser.
  • Telemetry: anonymized performance metrics used to identify issues and improve the application.

Third-Party Sources

  • Authentication providers (e.g., Google, Apple, phone/SMS), which may provide your name, email address, or profile photo.
  • Payment processors, which provide transaction confirmation and subscription status.
  • Hosting, analytics, and error-monitoring providers.

Why We Collect Each Type of Data

The table below sets out every category of data we collect, what it includes, and the specific purpose for which it is collected and processed. We do not collect data beyond what is needed for these stated purposes.

Data Category What It Includes Why We Collect It
Account Information Email address, display name, authentication credentials, account preferences. To create and maintain your account, authenticate you securely, and communicate essential account-related notices (e.g. password resets, billing alerts).
Authentication Provider Data Name, email, or profile photo provided by Google, Apple, or phone/SMS sign-in. To enable third-party sign-in without requiring you to create a separate password, and to pre-populate your profile.
Billing & Payment Data Subscription status, transaction confirmations. Full card numbers are handled exclusively by our payment processor and never stored by us. To process subscription payments, enforce subscription entitlements, issue receipts, and comply with financial record-keeping obligations.
User Content (Cloud-Synced) CAD scripts, CadQuery geometry, designs, feature trees, and project files you choose to sync to our cloud storage. To store, back up, and sync your work across devices. Sync is opt-in; local-only projects are never transmitted to our servers.
AI Prompts & Conversation History Text instructions, geometry context, and multi-turn conversation history submitted to AI features. To generate CAD geometry in response to your instructions by routing requests to our AI provider (Anthropic). Prompt data is transmitted only as needed to fulfil your request and is subject to Anthropic's Privacy Policy.
Device & Log Data IP address, operating system, application version, timestamps, error messages, crash reports. To diagnose crashes and errors, detect security threats, enforce fair-use limits, and maintain audit logs required for security and legal compliance.
Usage & Feature Telemetry Which tools and features are used, session duration, AI generation counts, token usage. To understand how the application is used so we can prioritize improvements, fix performance issues, and enforce subscription-tier limits. Telemetry is anonymized where possible.
Cookies & Local Storage Authentication tokens, session identifiers, user preferences stored in your browser or locally on your device. To keep you signed in between sessions, remember your preferences, and maintain secure authenticated sessions. Essential cookies cannot be disabled without breaking authentication.
Support Communications Messages, bug reports, feedback, and inquiries you send to us. To respond to your requests, resolve issues, and improve the Service based on user feedback. These records are retained to maintain a history of support interactions.

Local execution data (the Python/CadQuery sidecar running on your machine) is never transmitted to our servers. See the AI Features & Data section for detail on what is and is not sent during AI generation.

How We Use Information

  • Create, maintain, and secure your account.
  • Deliver, operate, and improve the Service, including the desktop application, AI features, and cloud sync.
  • Process payments and manage subscription entitlements.
  • Respond to support requests and communications.
  • Monitor for abuse, security incidents, and policy violations.
  • Analyze aggregate usage patterns to improve the product.
  • Comply with applicable legal obligations.
  • Send transactional communications (e.g., receipts, account notices) and, where you have opted in, product updates or announcements.

Legal bases for processing (where applicable under GDPR or similar frameworks) include contract performance, legitimate interests, consent, and legal compliance.

AI Features & Data

Draftr's AI features are powered by large language models provided by third-party AI providers, including Anthropic. When you use AI-driven features:

  • Prompt transmission: Your text prompts, relevant geometry context, and conversation history may be transmitted to third-party AI providers to generate responses. Do not include sensitive personal information, credentials, trade secrets, or proprietary information in your AI prompts.
  • Provider terms: Your use of AI features is also subject to the terms and privacy policies of the underlying AI providers. We encourage you to review Anthropic's Privacy Policy.
  • No training on your content: We do not use your personal CAD files or design content to train our own models. AI providers may have their own data usage policies; we seek providers that offer appropriate data protection for API usage.
  • Locally executed code: CadQuery Python scripts generated by the AI are executed locally on your machine through the Draftr sidecar process. We do not transmit your local execution environment or filesystem to our servers.

How We Share Information

We do not sell your personal data. We may share data in the following limited circumstances:

  • Service Providers: With vendors under contract who assist with hosting, authentication, payments, analytics, error monitoring, and AI processing - only to the extent necessary to provide the Service.
  • AI Providers: With third-party AI API providers (e.g., Anthropic) when you use AI-powered features, as described above.
  • Legal Compliance: When required by law, court order, or government request, or to protect the rights, safety, or property of QWERTY Code LLC, our users, or the public.
  • Business Transfers: In connection with a merger, acquisition, financing, or sale of all or substantially all of our assets. You will be notified of any such change.
  • With Your Consent: In any other circumstances with your explicit consent.
  • Aggregate/Anonymous Data: De-identified or aggregated data that cannot reasonably identify you may be shared or published for any purpose.

Data Retention & Deletion

You may request deletion of your account at any time from within the application or by contacting us.

  • Accounts enter a 30-day deactivation period after a deletion request, during which you may cancel the deletion and restore access.
  • After 30 days, your personal data and synced project files are permanently deleted from active systems.
  • Automated backups may retain data for a limited period before being overwritten in the normal course of operations.
  • We may retain certain data as required by law or to resolve disputes, enforce agreements, or maintain security logs.
  • Anonymized or aggregated data derived from your usage may be retained indefinitely.

Security

We implement reasonable technical and organizational security measures to protect your personal data, including encryption in transit, access controls, and secure authentication. No system is completely secure, and we cannot guarantee that unauthorized parties will never defeat our measures. You are responsible for maintaining the security of your account credentials.

If you believe your account has been compromised, contact us immediately at support@draftrcad.com.

Your Rights

Depending on your jurisdiction, you may have rights including:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that inaccurate data be corrected.
  • Deletion: Request deletion of your personal data (subject to legal retention requirements).
  • Data Portability: Receive your data in a structured, machine-readable format.
  • Objection / Restriction: Object to or request restriction of certain processing activities.
  • Opt-Out of Marketing: Unsubscribe from non-transactional communications at any time via the unsubscribe link or by contacting us.
  • Supervisory Authority: Lodge a complaint with a data protection authority in your jurisdiction.

To exercise your rights, contact us at support@draftrcad.com.

Cookies & Analytics

The Draftr website and web-based portions of the Service use cookies and similar technologies for authentication, session management, and analytics. You can manage cookie preferences through your browser settings. Disabling certain cookies may affect functionality.

We may use analytics tools (e.g., Firebase Analytics, Crashlytics) that collect anonymized usage and crash data from the desktop application. This data is used solely to improve the Service and is not linked to personally identifiable information where avoidable.

International Transfers

Your information may be processed and stored on servers located outside your country of residence. If you are located in the European Economic Area, United Kingdom, or Switzerland, we implement appropriate safeguards (such as standard contractual clauses) when transferring personal data internationally.

Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we learn that we have collected data from a person under 18 without parental consent, we will promptly delete it. If you believe a minor has provided us with personal data, contact us at support@draftrcad.com.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice via the application or by other reasonable means before the changes take effect. Your continued use of the Service after the updated policy takes effect constitutes your acceptance of the changes.

Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at support@draftrcad.com.

QWERTY Code LLC - USA