DraftMind AI (“DraftMind,” “we,” “us,” or “our”) provides tools that turn written requirements and reference information into 3D CAD content. This Privacy Policy explains how we collect, use, disclose, and retain personal information in connection with draftmind.co, app.draftmind.co, our CAD generation application, and related services (the “Services”).
This policy should be read with our Terms & Conditions. It does not cover third-party websites or services that have their own privacy policies.
1. Scope
This policy applies when you visit our website, request access, create or use an account, purchase a plan, submit prompts or files, generate or export CAD content, communicate with support, or otherwise interact with the Services.
If your employer or another organization provides your DraftMind account, that organization may control the account and related information. Its privacy practices may also apply.
2. Information we collect
Information you provide
- Account information: name, email address, password or authentication details, organization, role, and account preferences.
- Design and service content: prompts, specifications, measurements, uploaded files, reference images, CAD files, Generated Output, edits, project names, and related metadata.
- Purchase information: selected plan, billing contact details, transaction status, subscription dates, and limited payment information received from our payment processor. DraftMind does not directly store full payment-card numbers.
- Communications: support messages, feedback, survey responses, access-request answers, and other information you choose to send us.
Information collected automatically
- Device and network information: IP address, browser and device type, operating system, language, approximate region, referring page, and diagnostic identifiers.
- Usage information: pages viewed, buttons and links selected, session timing, feature use, generation and export events, plan interactions, errors, performance data, and conversion events.
- Cookies and similar technologies: browser storage, tags, pixels, and similar tools used for essential functions, security, preferences, analytics, quality measurement, and advertising attribution.
Please do not submit payment-card numbers, government identifiers, medical information, export-controlled data, or confidential material you are not authorized to share through prompts or CAD uploads.
3. Sources of information
We collect information:
- directly from you when you use or contact the Services;
- automatically from your browser, device, and interactions with the Services;
- from payment processors, authentication providers, hosting and infrastructure providers, analytics partners, and other vendors;
- from an organization that provides or administers your account; and
- from publicly available sources or partners where permitted by law.
4. How we use information
We use personal information to:
- create and administer accounts, authenticate users, and provide the features, generations, exports, and support you request;
- process prompts and files, generate CAD results, maintain project history, and enforce plan limits;
- process transactions, manage subscriptions and trials, send receipts, and prevent payment fraud;
- communicate about accounts, support, security, product changes, policy updates, and, where permitted, product news or offers;
- monitor reliability, debug errors, protect users and systems, prevent abuse, and enforce our agreements;
- understand feature adoption, measure advertising conversions, improve the Services, and develop new functionality;
- create aggregated or de-identified statistics that do not reasonably identify an individual; and
- comply with law, respond to lawful requests, resolve disputes, and establish or defend legal claims.
5. Legal bases for processing
Where a law requires us to identify a legal basis, we process information as needed to perform our contract with you, pursue legitimate interests that are not overridden by your rights, comply with legal obligations, protect vital interests, or act on your consent.
Legitimate interests may include operating and improving the Services, securing accounts and systems, preventing fraud, understanding product use, communicating with customers, and marketing our Services. You may withdraw consent at any time, without affecting processing that occurred before withdrawal.
6. How we disclose information
We do not disclose personal information except as described below or with your direction:
- Service providers: vendors supporting hosting, cloud infrastructure, data storage, authentication, payment processing, customer support, email, security, analytics, advertising attribution, and product quality.
- AI and technical providers: providers that process prompts, uploaded content, and technical data to generate output or operate requested features, subject to contractual and technical safeguards where appropriate.
- Account administrators: an organization that pays for or manages your account may access administrative, billing, and usage information and may control project access.
- Legal and safety recipients: courts, authorities, advisers, or affected parties when we reasonably believe disclosure is required by law or needed to protect rights, safety, property, or the integrity of the Services.
- Business transaction recipients: prospective or actual buyers, investors, lenders, advisers, and counterparties in a merger, financing, reorganization, bankruptcy, sale, or transfer involving all or part of DraftMind.
| Category | Main purpose | Typical recipients |
|---|---|---|
| Account and contact data | Access, authentication, support, and communications | Hosting, authentication, email, and support providers |
| Prompts, files, and CAD content | Generate, store, edit, and export requested output | Cloud, storage, AI, and technical service providers |
| Billing and transaction data | Payment, subscription management, and fraud prevention | Payment and financial service providers |
| Device, usage, and conversion data | Security, analytics, performance, and attribution | Hosting, security, analytics, and advertising providers |
7. Analytics, advertising, and cookies
The website uses Plausible Analytics to understand aggregate site activity and Google tags to measure advertising and purchase conversions. We may also use quality and security telemetry and browser storage needed to operate the Services. These providers may receive information such as IP address, device and browser details, page URL, referral information, event data, and advertising or device identifiers.
You can limit cookies through browser settings and may use the advertising controls provided by Google or your device. Blocking essential storage may prevent parts of the Services from working. Analytics or advertising choices generally apply separately to each browser and device.
For more information, review Plausible’s data policy and Google’s privacy policy.
8. Retention
We keep personal information only as long as reasonably needed for the purposes described in this policy, including to provide the Services, preserve account and project history, meet legal and accounting duties, resolve disputes, enforce agreements, prevent fraud, and maintain backups and security records.
Retention periods vary based on the type and sensitivity of the information, your account settings, the length of our relationship, technical requirements, and applicable law. When information is no longer needed, we delete or de-identify it, unless retention is legally required.
9. Security
We use administrative, technical, and organizational safeguards designed to protect personal information. No online service or storage system can be guaranteed completely secure. You are responsible for using a strong password, protecting account credentials, and notifying us promptly of suspected unauthorized access.
10. International data transfers
DraftMind and its service providers may process information in countries other than where you live. Those countries may have different privacy laws. Where required, we rely on recognized transfer mechanisms and safeguards, such as contractual clauses, adequacy decisions, or your consent.
11. Your choices and privacy rights
Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, or portability of personal information; withdraw consent; opt out of certain marketing or targeted advertising; or appeal a denied request.
- Account information: update available details in your account or contact support.
- Marketing email: use the unsubscribe link. We may still send transactional, security, and service notices.
- Privacy requests: email support@draftmind.ai with “Privacy Request” in the subject line.
We may need to verify your identity before completing a request. An authorized agent may submit a request where permitted by law, but we may require proof of authority and identity. We will not discriminate against you for exercising a privacy right.
12. Regional privacy notices
United States
The categories collected and disclosed are summarized above. We do not sell personal information for money. Some advertising or conversion-measurement activity may be considered “sharing,” “targeted advertising,” or a “sale” under certain state laws even where no money is exchanged. Residents of states that provide applicable opt-out rights may contact us using the privacy-request method above.
Canada
You may request access to or correction of personal information and may withdraw consent, subject to legal and contractual limits. You may also contact the relevant federal or provincial privacy regulator if you are not satisfied with our response.
European Economic Area, United Kingdom, and Switzerland
You may have the rights described above and the right to lodge a complaint with your local data-protection authority. Where we rely on legitimate interests, you may request information about the balancing assessment. Where we rely on consent, you may withdraw it at any time.
13. Children
The Services are intended for adults and are not directed to children under 13 or the minimum age required by local law. We do not knowingly collect personal information from children in that age group. If you believe a child provided personal information, contact us so we can investigate and delete it where required.
14. Changes to this policy
We may update this Privacy Policy as the Services, our practices, or applicable laws change. We will post the revised policy and update the effective date. Where required, we will provide additional notice or request consent for material changes.
15. Contact us
For privacy questions or to exercise a privacy right, contact DraftMind at support@draftmind.ai.