Overview
drawflow.io ("we", "us") provides an online diagram editor in your browser. This policy explains how we handle information when you use the site. It is intended to help users in the European Economic Area, United Kingdom, and elsewhere understand our practices. It is not legal advice; please review with counsel if you need certainty for your situation.
What we process
We do not require an account to use the editor. We may process: (1) technical data sent automatically when you load pages (such as IP address, user agent, and rough network location as determined by analytics providers); (2) optional analytics events if you consent; (3) data you store locally in your browser for diagrams and UI preferences.
Browser storage (diagrams and theme)
Your diagrams and related editor state are stored in this browser (for example via localStorage) so you can keep working without signing in. Theme (light/dark/system) may also be stored locally. This data stays on your device unless you export or copy it elsewhere. We do not use it to identify you on our servers because it is not transmitted to us by default.
Analytics (Google Analytics)
If you accept analytics in the cookie banner, we load Google Analytics (GA4) to measure traffic and usage. Google may process data per its terms and privacy policy. We configure Consent Mode so non-essential measurement does not run until you opt in. You can change your mind by clearing site data and revisiting, or using browser controls.
Legal bases (GDPR)
Where GDPR applies: we rely on your consent for optional analytics cookies and similar technologies (Art. 6(1)(a) GDPR). Operating the site and delivering pages uses processing necessary for our legitimate interests in running a secure, functional service (Art. 6(1)(f)), balanced against your rights. Local-only storage is controlled by your device and your use of the app.
Retention
Server logs and analytics retention depend on our hosting and Google Analytics settings. Locally stored diagrams remain until you delete them or clear browser storage. We may update retention practices and will reflect material changes on this page.
Your rights
Depending on your location, you may have rights to access, rectify, erase, restrict, or object to processing of personal data, and to data portability. You may withdraw consent for analytics at any time (without affecting prior lawful processing). You may lodge a complaint with a supervisory authority. For rights requests, contact us using the details below.
Contact
For privacy questions about drawflow.io, contact the site operator at the support channel published on drawflow.io (or your product contact if this deployment is self-hosted). If this is a self-hosted instance, the controller is the person or organization operating that instance.
Changes
We may update this policy from time to time. We will post the new date at the top when we do. Continued use after changes means you accept the updated policy, except where your consent is required for new processing.