Privacy Policy

This Privacy Policy explains how EasyDraw (“we”, “us”, or “our”) handles personal information when you visit, create an account, sign in, create diagrams, contact us, or otherwise use the EasyDraw website and application (the Service).

This Policy should be read with our Terms of Service. It does not cover a third-party service that you access independently under that provider’s own privacy policy.

Account and authentication information

• your email address and, if provided, your name;
• a Google account identifier if you use Sign in with Google;
• a securely hashed version of your password for email/password accounts—we do not store your plain-text password; and
• hashed password-reset tokens and their expiry time when you request a reset.

Diagram content

We store the diagrams you save, including diagram titles, types, status, nodes, connections, formatting, and associated creation and update times.

Technical and security information

Our systems and infrastructure providers may process information such as your IP address, request method and URL, response status, timestamps, authentication sessions, and security or rate-limit events. We use this information to operate, troubleshoot, and protect the Service.

Browser data and communications

EasyDraw stores editor snapshots and interface preferences in your browser. If you email us, we also receive the content of your message and the contact information needed to reply.

We collect information:

• directly from you when you register, create diagrams, or contact us;
• from Google when you choose Sign in with Google; and
• automatically from your browser and our infrastructure when you use the Service.

We use information to:

• create and administer your account;
• authenticate you and keep your account secure;
• store, retrieve, sync, and export your diagrams;
• send transactional messages such as password-reset emails;
• provide support and respond to questions or complaints;
• monitor, troubleshoot, maintain, and improve the Service;
• prevent abuse, enforce our Terms, and protect users and the Service; and
• comply with legal obligations and resolve disputes.

If you choose Sign in with Google, Google provides us with your Google account identifier, name, and email address so that we can create or connect your EasyDraw account. EasyDraw requests only the basic email and profile scopes.

We do not request access to your Google Drive files, contacts, calendar, or email, and we do not store Google access or refresh tokens in our database. Google handles your information under the Google Privacy Policy.

EasyDraw uses an essential, HTTP-only authentication cookie to keep you signed in. The cookie normally expires after seven days and cannot be read by application JavaScript. You can remove it by signing out or clearing browser data.

We use local storage on your device for editor snapshots and preferences such as sidebar layout and available line endings. This helps restore work and settings between visits. Local storage remains on that browser until EasyDraw removes it, you clear it, or your browser does.

We do not currently use third-party advertising or tracking cookies.

We do not sell, rent, or trade your personal information. We disclose information only as reasonably necessary:

• to service providers that help operate EasyDraw, including Amazon Web Services for cloud infrastructure and operational logging, Google for authentication, Twilio SendGrid for transactional email, Cloudflare for domain and email-routing services, and providers used for database and cache infrastructure;
• to professional advisers or authorities where reasonably necessary to comply with law, protect rights and safety, or investigate misuse;
• as part of a genuine merger, financing, reorganisation, or transfer of the Service, subject to appropriate confidentiality and applicable law; or
• with your direction or consent.

Your diagrams are private to your account by default and are not made publicly visible to other EasyDraw users.

EasyDraw is operated from Australia. Some service providers may process or store information outside Australia, including in the United States and other countries where they or their subprocessors operate. Privacy protections in those locations may differ from Australian law.

Where required, we take reasonable steps to use providers and arrangements that protect personal information. You can contact us for current information about the providers relevant to your data.

We use reasonable technical and organisational safeguards appropriate to the Service. These include password hashing, hashed one-time reset tokens, HTTP-only authentication cookies, access controls, request rate limits, and restricted access to production infrastructure.

No internet service or storage system is completely secure. You should use a unique password, protect access to your email account, sign out on shared devices, and export backups of important diagrams.

If a data breach occurs, we will investigate and notify affected people and regulators where required by applicable law.

We keep account information and saved diagrams while your account is active and for as long as reasonably needed to provide and secure the Service. A password-reset link becomes unusable 30 minutes after it is issued and can be used only once.

When account deletion succeeds, the active account and its saved diagrams are deleted from the primary application database. EasyDraw also clears its local browser storage on the device used to perform the deletion. Information may remain for a limited period in protected backups or operational records until overwritten, or where retention is reasonably necessary for security, fraud prevention, dispute resolution, or legal compliance.

Exports you downloaded, copies stored in browser or device backups, and data on another device remain under your control and may need to be deleted separately.

Depending on the law that applies, you may ask us to:

• confirm whether we hold personal information about you;
• provide access to, or correct, your personal information;
• delete your account and associated diagrams; or
• respond to a privacy question or complaint.

You can view account details, export diagrams, and delete your account from the Service. For other requests, email support@easydraw.net. We may need to verify your identity before acting on a request and may retain information where the law permits or requires it.

EasyDraw is not directed to children under 16, and they must not create an account. If you believe a child under 16 has provided personal information, contact us so we can investigate and take appropriate action.

We may update this Privacy Policy as the Service, our providers, or legal requirements change. We will post the revised version here, update the date at the top, and provide reasonable additional notice if a change materially affects how we handle personal information.

For privacy questions, access or correction requests, or complaints, email support@easydraw.net. Please describe your request and include enough information for us to investigate. We will acknowledge and respond within a reasonable time.

If you are not satisfied with our response and the Australian Privacy Act applies, you may be able to complain to the Office of the Australian Information Commissioner.