Your privacy is important to us, and so is our responsibility to be transparent about how we collect, use and share information about you. We are bound by the Australian Privacy Principles contained in the Privacy Act 1988 (Cth), and we observe applicable principles of the General Data Protection Regulation (GDPR).
This policy ("Privacy Policy") describes:
In this Privacy Policy, "Drawboard", "us", "we" or "our" means Drawboard Pty Ltd (ACN 156 607 028). Our products are Drawboard PDF (Windows, iOS, macOS and web applications at pdf.drawboard.com) and Drawboard Projects (web, Windows and iOS applications at projects.drawboard.com). Drawboard Projects was previously named Bullclip.
By providing personal information to us, you consent to our collection, use and disclosure of your personal information in accordance with this Privacy Policy and any other arrangements that apply between you and Drawboard. You can withdraw your consent at any time. We may change this Privacy Policy from time to time by publishing changes on our website, and we encourage you to check it periodically.
When you use the products and services provided by Drawboard we may record and use your personal data. Personal data means any information relating to an identified or identifiable natural person. The data, including personal data, that we collect includes:
For personal data subject to the GDPR, we rely on several legal bases to process the data:
Where you use Drawboard through an organisation, that organisation is the data controller for the content and account data in its workspace, and Drawboard acts as its processor under a Data Processing Addendum.
You may at any time refuse to provide the personal data that we request; however, this may limit or prohibit our ability to provide our products and services to you. You may withdraw your consent for us to process your personal data at any time by contacting us using the details in the "Contact us" section below.
When you use the cloud features of Drawboard PDF or Drawboard Projects, the documents, drawings, annotations and comments you store or share ("your content") are stored on our systems so that we can provide storage, synchronisation and collaboration to you. Your content belongs to you. We access it only to operate the service, to respond to a support request you have made, or where the law requires. We do not sell your content and we do not use it for advertising.
Please do not upload special categories of data, such as health information, government identifiers, biometric data or payment card data, unless we have agreed to this with you in writing.
Due to the work-related nature of our services we do not knowingly advertise to or collect personal data from any individual under the age of 16. If we later find out that we have collected personal data from an individual under the age of 16, we suspend and remove this personal data immediately.
We use the personal data we collect from you to:
The sections below describe the main areas where we gather and use this data.
Like many websites, www.drawboard.com, pdf.drawboard.com and projects.drawboard.com collect certain information through the use of cookies, web beacons, device identifiers, pixels and other technologies to provide functionality and to recognise you across different services and devices. This includes both users of our products and services and non-users.
Cookies are small text files that are saved by your browser when you access our site. We may use both session cookies (stored for individual visits to the website) and persistent cookies (stored over time) to identify that you have visited or logged in to a site and to tell us how and when you interact with our site. We may also use cookies to monitor aggregate usage and web traffic routing on our site and to customise and improve our products and services. We may link this information to your user account.
Session cookies are deleted when you log off from the site and close your browser. Although most browsers automatically accept cookies, you can change your browser options to stop automatically accepting cookies or to prompt you before accepting cookies. If you do not accept cookies, you may not be able to access all portions or features of our products and services.
We may also use cookies in connection with third-party services to run analytics on our site; such cookies may collect personal data about users.
If you live in the European Economic Area, the United Kingdom or Switzerland (the "Designated Countries"), you must opt in before we use cookies on www.drawboard.com for non-essential tracking. You can do this through the cookie notice that appears when you first visit the website, and you can change your choice at any time through the same notice.
Our servers automatically record certain information about how a person uses our products and services. This information is collected from the Drawboard PDF Windows, iOS, macOS and web applications and the Drawboard Projects web, Windows and iOS applications. It may include a user's Internet Protocol (IP) address, device and browser type, operating system, the pages or features used and the time spent on them, how often the product is used, search terms, the links clicked, and other statistics. If you have cookies enabled on your web browser, we are usually able to connect your product behaviour to your anonymous behaviour on www.drawboard.com.
We use this information to administer our products and services, and we analyse it (and may engage third parties to analyse it) to improve and enhance the products and services by expanding their features and functionality and tailoring them to our users' needs and preferences.
If you delete your Drawboard PDF or Drawboard Projects account, audit logs of your activity in the service are retained. These logs are a core part of the service provided to the teams and organisations you collaborated with. We recommend that our business customers have arrangements with their staff that provide a basis for retaining these records.
Drawboard does not respond to "Do Not Track" browser signals or other similar mechanisms.
Third parties may also collect personal information about your online activities over time and across sites when you visit the sites or use our services.
Drawboard uses machine learning in three ways. None of them uses your content to train content-producing artificial intelligence.
Some features recognise common conventions in engineering and construction drawings, such as standard symbols, title blocks, sheet titles and page numbers, so that drawings can be indexed, named and navigated automatically. The models behind these features are trained to recognise those generic drawing conventions, not the design content of any drawing. Training uses drawings that Drawboard owns or licenses and publicly available datasets. Where customer drawings are used to improve these features, this happens only with the customer's agreement, only to mark symbols, title blocks and page numbers, and the models do not store or reproduce the drawings. No customer design, architectural or engineering information, or any other intellectual property in your content, is used to train models that generate content.
When you select, search or copy text in a document, Drawboard's own models identify the text on the page. This runs on Drawboard's systems. No third party is involved and your document is not sent anywhere for this purpose.
Drawboard PDF offers optional features that summarise or rewrite text. These run only when you invoke them. When you do, the text you have selected is sent to OpenAI, which produces the result and returns it. Only the text you select for the feature is sent, not your document as a whole, and it is used only to produce the result you asked for. We do not permit our artificial intelligence provider to use your content to train its models.
Drawboard does not sell your content or share it with any third party for the purpose of training artificial intelligence.
We may partner with third-party ad networks and vendors to manage our advertising on other sites. Our ad network partners may use cookies and web beacons to collect data, including personal data, about your activities on our site and other sites to provide you targeted advertising. If you do not wish this information to be used to serve you targeted advertising, you may opt out by contacting us (see "Contact us").
You may choose to submit your email address or other contact information via our website, products, services, support sites or via our partners. We may use this information to send you news about Drawboard services, products or promotions. We use service providers to administer these messages, and we do not share your email address with any other third party for their own marketing without your permission. Every marketing email we send contains a link to opt out. In some of our communications we use tracking means, such as a click-through URL linked to content on our websites, to help us measure the effectiveness of our communications.
Drawboard may collect and analyse data (but not personal data) about the performance of its products and services. From time to time, Drawboard may release such data in aggregate, for example by publishing a report on trends in the usage of its products and services.
If you purchase subscriptions to Drawboard Projects or Drawboard PDF from our site, we request that you provide your name, email address, billing address, payment card information, telephone number and other information necessary to open your account and complete the transaction. Drawboard does not collect or store your payment card information, and our employees have no access to it. Our payment processing provider, which is a PCI DSS Level 1 certified service provider, collects and stores payment card information to process your payment.
When transacting on the Microsoft Store or Apple App Store, your card data is handled by Microsoft Corporation or Apple Inc. under their own privacy policies, separate from Drawboard, and we do not see or store your card data. When transacting via PayPal, your card data is not seen or stored by Drawboard; a record of the sale is recorded in our systems together with some additional personal data, but this does not include your card details.
When you apply for a role at Drawboard we may collect personal data to enable us to communicate with you and progress you through our hiring process, including identity, right to work and reference checks carried out by a screening provider where the role requires it. This data is limited to what we need to assess your application.
If you use our products and services via or in conjunction with a service integrated with our own, the integrated service may provide us with your personal data. This collection is controlled by the integrated service, and we encourage you to consult that service's privacy policy.
Outside of authorised personnel employed or engaged by Drawboard, we only disclose personal data to third parties that meet our data privacy conditions (guided by the Australian Privacy Act and the GDPR). When this occurs, it occurs in a secure and contractually regulated manner. These third parties include:
We may also share or publish aggregate information that does not specifically identify you, such as statistical information about how our users use our products or their demographic characteristics.
We use the following service providers to deliver our products and services. Each is bound by contractual terms covering the confidentiality and security of the data it processes for us.
PurposeProviderData involvedCloud hosting of the Drawboard PDF and Drawboard Projects servicesMicrosoft Azure (United States)Account data, your content, service logsProduct analyticsAmplitudeUsage events, account identifiersSubscription billingChargebeeName, email, billing details. Card data is held only by the payment processorPurchases made through an app store or PayPalMicrosoft, Apple, PayPalHandled under their own privacy policiesCustomer supportZendeskName, email, support correspondence and any files you send usIn-app messaging and product announcementsIntercomName, email, product usageSales and customer relationship managementHubSpotBusiness contact detailsBusiness productivity and internal emailGoogle WorkspaceBusiness correspondence with youTransactional and marketing emailSendGrid, MailgunEmail address, nameWebsite and marketing analyticsGoogle Analytics, delivered through Google Tag ManagerCookies, device and usage dataAdvertising and retargetingMeta (Facebook), LinkedInCookies, device and usage dataSummarising and rewriting text in Drawboard PDFOpenAIThe text you select when you use the feature, for the duration of the request
We update this list when our providers change. Business customers with a Data Processing Addendum receive notice of sub-processor changes under that agreement.
Our products are hosted on Microsoft Azure in the United States, and production hosting is United States only. We do not currently offer regional hosting elsewhere. Your information may therefore be transferred to, and maintained on, computers located outside of your state, province, country or other governmental jurisdiction, where the privacy laws may not be as protective as those in your jurisdiction. Drawboard may transfer your data (including personal data) to and from any country, including Australia and the United States of America, in order to provide our products and services and to process data in accordance with this Privacy Policy. You agree to your data being transferred to other countries when you share your data with us. If you later wish to withdraw your consent, you can delete your account as described in the "Accessing, changing, exporting or deleting your information" section.
The European Commission has the power to determine, on the basis of the GDPR, whether a country outside the European Union offers an adequate level of data protection by making an adequacy decision. To date, the European Commission has not adopted an adequacy decision in respect of Australia. We rely on other legal bases to lawfully transfer personal data, including your consent and the European Commission-approved standard contractual clauses, which require certain privacy and security protections. Our Data Processing Addendum, effective 10 January 2024, incorporates those clauses. You may obtain a copy by contacting us using the details in the "Contact us" section.
Our services may contain links to other websites and services. Linking to a website or service is not an endorsement, authorisation or representation that we are affiliated with that third party. We do not control third-party websites or services and are not responsible for their actions. Other websites and services follow different rules regarding the use or disclosure of the personal data you submit to them. We encourage you to read their privacy policies.
We may make available on our site, or link to, opportunities for our customers and other users to share information online (for example in message boards, chat areas, file uploads or events). Whenever you voluntarily disclose personal information online, that information becomes public and can be collected and used by others. We have no control over, and take no responsibility for, the use, storage or dissemination of such publicly disclosed personal information. By posting personal information in public forums, you may receive unsolicited messages from other parties.
All Drawboard Projects and Drawboard PDF account holders may access, review, update, rectify or delete the personal data in their profile by logging into their account. Removing your information may limit our ability to provide the service to you. If you delete your account, it is deactivated and you lose access to the service.
You can export your documents from Drawboard PDF and Drawboard Projects at any time in standard PDF format through the applications. You may also contact us to receive, in a commonly used file format, the personal data you have provided to us.
If you ask us to delete your personal data, we complete the deletion within 28 days. When a business customer's agreement with us ends, we delete that customer's data within 180 days. Residual copies in our system backups are removed as those backups expire in the normal cycle, and audit logs are retained as described in "Product and service tracking".
You may contact us directly to request access, correction, export or deletion outside of our services, or if you have additional questions. We will take reasonable steps to provide, modify or delete your information as soon as is practicable, but some information may remain in archived or backup copies for legal reasons or to prevent harm, including as described in "Who we disclose information to". We may limit or reject your request in certain cases, including where the burden or expense of providing access would be disproportionate to the risks to your privacy, where the rights of other persons would be violated, or as required by law. We will respond to all requests within 30 days.
If you need further assistance regarding your access and control of your personal data, please contact our Data Protection Officer using the details in "Contact us". If you reside in a Designated Country and are unhappy with our data practices, you also have the right to lodge a complaint with your local data protection authority.
The security of your personal data is important to us.
Every employee is aware of our security policies, and your information is available only to those employees who need it to perform their jobs. No method of transmission over the Internet is completely secure, so we cannot guarantee the absolute security of your information.
If a data breach occurs that is likely to result in serious harm to you, we will notify you and the relevant regulators as required by law, as soon as practicable after becoming aware of it. We notify affected customers without undue delay of any information security incident that affects them.
For more information, please see our Approach to Security page at www.drawboard.com/resources/Drawboard-Approach-to-Security.pdf.
We keep your account information, such as your name and email address, for as long as your account exists because we need it to operate your account. We keep your content for as long as you keep it in the service. We keep other data, including information about how you use our products and services, until you request that we delete it, because we use this data to provide our products and services to you and for the other purposes set out in "How we use personal data". Records we are required to keep by law, and audit logs as described above, are retained for as long as those obligations require.
Drawboard uses Sign in with Google, Sign in with Apple and Sign in with Microsoft to let you create, log in to and connect services to your Drawboard PDF and Drawboard Projects accounts. To provide these features, Drawboard collects your email address, first name and last name from the respective service. This information is stored in your Drawboard profile and is used to personalise communications to you from Drawboard.
Business customers may connect their organisation's identity provider, for example Microsoft Entra ID, so that their staff sign in with their work accounts. In that case your organisation controls the creation and removal of your account, and we receive your name, email address and group membership from your organisation's identity provider.
Drawboard Projects integrates with Google Drive, enabling users to upload files directly from their Google Drive account into Drawboard Projects. Using this integration will securely store your Google Drive credentials, allow Drawboard Projects to access files stored in your Google Drive account, and allow you to copy selected files from Google Drive to be stored within Drawboard Projects.
We may modify this Privacy Policy at any time. We encourage you to review this page periodically for the latest information on our privacy practices. If we make material changes to this Privacy Policy we will notify you by email (if we have your contact information) or through the services in a manner reasonably likely to reach you, which may include posting a new Privacy Policy on our website or an announcement on this page or on our blog. Modifications are effective when we post the new terms or implement the changes in the service, or as otherwise indicated at the time of posting. Your continued use of the service or site after a modified Privacy Policy is posted indicates your acceptance of the modified terms.
For further information about our Privacy Policy or practices, to access, correct, export or delete your personal information, or to make a complaint, please contact us: