Draft. This policy is waiting for the owner's review and is not in force yet. Items marked [DECIDE] are decisions still to be made; clauses marked [REVIEW] need a lawyer's review before publication.
Who we are
TellMeCAD is provided by [LEGAL_NAME] [DECIDE: company registration number], Malaysia. For anything about your data, write to support@tellmecad.com. [REVIEW]
What leaves your computer
TellMeCAD works on your drawings on your own computer. DraftSI stays off until you press Turn on, after a notice that explains what it sends. When you give DraftSI an instruction, this goes through our server to Anthropic, whose AI model does the work:
- what you type in the chat;
- a short note on the drawing's state: its file name (never the folder), units, current layer, current space or layout, the visible area and the handles of selected objects;
- what DraftSI looks up to do the job: object types, handles, coordinates, layers and properties, the texts and attribute values in the drawing (which can include names, addresses and project details), the command-line output of its own steps and the list of commands it may use;
- pictures of the drawing or parts of it;
- pictures you add to a message, such as photos, screenshots or sketches. TellMeCAD shrinks and re-encodes them on your computer first, which drops their metadata (a photo's location among it). It keeps them in memory only, never writes them to disk and never logs them.
Never sent: the drawing file itself, other files, your computer's folders and the drawing's location on disk, or anything at all while DraftSI is off. File names stored inside a drawing (external references, images, hyperlinks) are part of its content and can be sent.
What our server keeps
To run your account and charge credits fairly, our server keeps:
- Your email address. It is your account: one account per address.
- Your computers: the device name you give each one, an install id the app makes for it, when it was last used, and its sign-in token, stored only as a keyed hash. A token lapses after about 30 days without use, and you can sign any computer out from the app.
- Usage figures for each step DraftSI takes: the time, the computer that made it, the conversation id (an id the app makes for each chat, which says nothing about what is in it), the turn and step numbers, the speed tier and the model used, the tokens counted, the cost and the credits charged, how long the step took and how it ended, and your app version. We also keep daily cost totals for each account, which the daily limit uses.
- Your purchases: the pack, the amount and currency, Creem's order reference, and any refund or chargeback.
- The credit ledger: every change to your balance, whether starter credits, a purchase, use, a refund or an adjustment we make (with our note).
- Your account status: whether your free starter credits are pending, approved or declined, and, if we suspend the account, when and why.
Your conversations are not kept. What you type, your drawing's data, pictures and DraftSI's replies pass through our server to Anthropic and back. Our server never stores or logs them.
Sign-in codes work for 10 minutes. We store each code only as a keyed hash, next to the email address it was sent to, and delete it as soon as it is used. An unused code and its email address stay until the next daily cleanup, so for up to about a day. Asking for a code doesn't create an account: that happens only when a correct code is entered.
IP addresses are used only to limit sign-in attempts. We never store the address itself, only a keyed hash of it (for IPv6, of its network prefix) with a count for each hour. Sign-in attempts per email address are counted the same way, under a keyed hash. These counts are deleted at the first daily cleanup after they are 2 days old, so they are kept for about 3 days at most.
This website
tellmecad.com sets no cookies, runs no analytics and loads nothing from other sites. It remembers your light or dark theme choice in your browser's local storage; that value never leaves your browser.
If you request beta access, the form sends your name, email address and what you type to our form provider [DECIDE: name the form provider, where it stores submissions and for how long]. We use these details only to manage beta access and to contact you about it. [REVIEW]
Who else handles your data
We use these providers to run the service. Each one gets only what its job needs:
- Anthropic runs the AI model behind DraftSI. For each step it receives the content listed under "What leaves your computer", but not your email address or account. Under its commercial terms, Anthropic does not use this data to train its models by default and keeps it only for a limited period [DECIDE: confirm both points against Anthropic's current commercial terms before launch].
- Cloudflare runs our server, its database and this website. Your conversation content passes through Cloudflare's systems on its way to Anthropic and back, but is not stored there; your account data (everything under "What our server keeps") is stored there. Like any network, Cloudflare sees your IP address when the app connects or you open this site.
- Creem handles payments for credit packs as the merchant of record. It receives your account's email address, which we pass to Creem when you start a checkout (even if you don't finish it), and your payment details, which you give to Creem directly. We never see your card number.
- Resend sends our emails: sign-in codes and the note that your free credits are ready. It receives your email address and the message.
Some of these providers handle data outside Malaysia. [DECIDE: wording for transfers abroad under PDPA 2010 and GDPR] [REVIEW]
How long we keep it
- Your email address, computers, purchases and credit ledger: while your account exists. After you ask us to close it: [DECIDE: retention after closure; tax and accounting rules may require keeping purchase records for some years] [REVIEW]
- Usage figures: 24 months [DECIDE: confirm; no cleanup job exists yet].
- Sign-in codes and the email address they were sent to: up to about a day. Hashed sign-in counts: up to about 3 days.
- Beta access requests: [DECIDE: how long form submissions are kept].
Your rights
Under Malaysia's Personal Data Protection Act 2010 (PDPA 2010) you can ask to see the personal data we hold about you, ask us to correct it, and withdraw your consent. Withdrawing consent closes your account, because we can't run it without your email address.
If the EU's General Data Protection Regulation (GDPR) applies to you, you can also ask us to erase your data, to restrict or stop using it, and to give it to you in a portable form. You can complain to your data protection authority as well. [REVIEW]
To use any of these rights, write to support@tellmecad.com from your account's email address. We will answer within [DECIDE: response time]. A Malay version of this policy: [DECIDE: Malay version; PDPA 2010 expects notices in Malay and English] [REVIEW]
Age
TellMeCAD is made for people who work with drawings. [DECIDE: minimum age] [REVIEW]
Changes
If we change this policy, we will post the new version here with its date. Last updated: [DECIDE: date].