Privacy Policy

This Privacy Policy explains how DrawPaw LLC ("DrawPaw | Math Presentation Toolkit for Teachers," "we," "us," or "our") collects, uses, stores, and protects personal information when you use our website at https://drawpaw.io and our mathematics lesson and slide creation platform (the "Services").

For privacy questions or requests, contact legal@drawpaw.io or support@drawpaw.io.

DrawPaw LLC
[Registered Address]

We collect and process information needed to provide, maintain, secure, and improve DrawPaw | Math Presentation Toolkit for Teachers.

Information you provide directly

• Account information: name, email address, password (hashed), and optionally institution or role. Used to create and manage your account and communicate with you.
• Google sign-in profile: if you authenticate with Google, we receive identifiers such as email, name, and profile image as permitted by Google's OAuth scopes.
• Payment information: billing name, email, and payment method details handled by Stripe. We do not store full card numbers. Used to process subscriptions, lifetime purchases, and credit packs.
• User-generated content: prompts, lesson and slide content, equations, tables, uploaded files, and related materials. Used to provide core product functionality.
• Communications: information you send when contacting support or using contact forms. Used to respond and assist.
• Marketing preferences: records of consent or opt-out for product updates and marketing where applicable.

Information collected automatically

• Usage data: features used, pages visited, clicks, timing, and product journeys (for example via PostHog). Used to understand usage, improve the product, and troubleshoot.
• Device and connection data: IP address, browser type, operating system, and similar technical details. Used for security, analytics, and delivery optimisation.
• Cookies and similar technologies: see our Cookie Policy.
• Error and performance data: stack traces and diagnostic metadata via Sentry (typically without name or email).

Where GDPR or UK GDPR applies, we rely on:

• Contract: processing necessary to provide the Services (account management, content generation, payments).
• Legitimate interests: security, service improvement, usage analysis, and limited product communications, balanced against your rights.
• Consent: where required for certain cookies, marketing, or optional processing. You may withdraw consent at any time.
• Legal obligation: for example, tax and accounting record-keeping.

• Directly from you when you sign up, use the Services, pay, or contact us.
• Automatically through your use of the website and product.
• Third parties such as Google if you choose Google sign-in, and Stripe for payment status.

We retain personal data only as long as needed for the purposes in this policy, legal obligations, dispute resolution, and enforcement of agreements. Typical periods:

You may request deletion subject to legal or operational requirements. See "Your Data Protection Rights" below.

We use trusted third parties to operate DrawPaw | Math Presentation Toolkit for Teachers. Key sub-processors include:

Where providers are outside the UK/EEA, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.

We do not sell your personal data. We share information with sub-processors listed above under contracts that require appropriate confidentiality and data protection. We may also share data if required by law, to protect rights and safety, or in connection with a business transfer (merger, acquisition, or asset sale), with appropriate safeguards.

Primary application data is stored with Supabase in the EU (Ireland). Some providers process data in the United States or other countries. When we transfer personal data internationally, we implement safeguards such as SCCs approved by the European Commission and/or UK authorities, or rely on an adequacy decision where available. If we make a material change to primary hosting location or add material new sub-processors in new jurisdictions, we will notify you (for example by email).

1. Purpose. Prompts and lesson content are sent to AI providers (including OpenAI and Anthropic, and routing via Vercel's AI Gateway where used) so we can generate and edit mathematics lessons, slides, equations, tables, and related outputs.
2. Consent / contract. By creating an account and using AI features, you instruct us to process that content as needed to deliver the feature. Where consent is required, you may withdraw it by emailing legal@drawpaw.io with the subject "Withdraw AI Consent." Withdrawal disables AI-powered features; your account and previously generated content remain accessible subject to these Terms.
3. Training. We do not use your User Content or Generated Content to train foundation models, and we configure providers not to train on API customer data where their terms permit.
4. Accuracy. AI outputs may be wrong. Review mathematics content before classroom use. See the Terms of Use section on mathematical accuracy.

We implement administrative, technical, and organisational measures appropriate to the risk, including encryption in transit, access controls, hashed passwords, and monitoring. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

DrawPaw | Math Presentation Toolkit for Teachers is directed at teachers and education professionals aged 18 and over. We do not knowingly collect personal data from children as product users. Students are not intended end users of the Services.

Do not upload or enter student personal data into the Services. If you believe student personal data has been submitted, contact legal@drawpaw.io so we can delete it. Parents or students seeking education records should contact their school; we process teacher account data as an independent controller of our SaaS platform, not as a student learning management system.

Depending on your location (including under GDPR, UK GDPR, and similar laws), you may have rights to:

• Access a copy of personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase data in certain circumstances.
• Restrict or object to certain processing.
• Data portability where applicable.
• Withdraw consent where processing is based on consent.

Under CCPA/CPRA (California) and similar US state laws, you may have rights to know, delete, correct, and opt out of certain sharing or targeted advertising. We do not sell personal information for money. We honour Global Privacy Control (GPC) signals as an opt-out of sale/share or targeted advertising where required.

To exercise rights, email legal@drawpaw.io. We may need to verify your identity. We aim to respond within one month where GDPR applies, or within the timeline required by applicable US state law.

We use cookies and similar technologies for essential functionality, preferences, analytics, and (where used) marketing measurement. In the UK, EEA, and Switzerland, non-essential analytics cookies should only run after you accept via our cookie banner (or equivalent controls). Details, including cookie names and durations, are in our Cookie Policy.

Please contact us first at legal@drawpaw.io. You may also lodge a complaint with your supervisory authority, for example:

• UK: Information Commissioner's Office (ICO) — ico.org.uk/make-a-complaint
• EU: your member state data protection authority
• US education privacy concerns involving a school: typically the school or the U.S. Department of Education Student Privacy Policy Office

We may update this Privacy Policy from time to time. For material changes, we will notify you by email and/or an in-service notice stating the effective date. The "Last updated" date records when the text was last edited. Continued use after the effective date constitutes acceptance of the revised policy.