Privacy Policy
Last updated: March 2026
1. Data We Collect
We collect: (a) Google account details on sign-in (name, email, photo); (b) Drawings, BOMs, and notes you create, stored in Firestore; (c) Company logos you upload, stored privately in Vercel Blob; (d) Anonymous error reports via Sentry to improve the service. Guest users: your data is encrypted and stored on your device only — nothing is sent to our servers.
2. How We Use Your Data
Data is used solely to: (a) operate the service and preserve your history; (b) verify identity and prevent abuse; (c) improve service quality based on anonymous error reports. We do not sell, trade, or rent your information to any third parties.
3. Cookies
We use Firebase session cookies for authentication only. No marketing or tracking cookies are used.
4. Data Retention
Account data and drawings are retained as long as the account is active. Upon account deletion, all data is erased within 30 days.
5. Your Rights
Under the Israeli Privacy Protection Information Law (5741-1981) and GDPR principles, you have the right to access, correct, and request deletion of your data. Contact: support@metaldrawai.com
6. Security
We use HTTPS, AES-GCM encryption for guest data, and Vercel Blob Private with time-limited URLs. Data access is restricted to authorized personnel only.
7. Policy Changes
We will notify you by email of material changes. Continued use after notice constitutes acceptance of the updated terms.
8. Sub-Processors & Data Transfers
We use third-party service providers (data processors) to operate the service. All are bound by Data Processing Agreements (DPAs):
Google Firebase / Google Cloud — user authentication and drawing storage (Firestore). Servers: US and EU.
Vercel — logo storage (Vercel Blob). Servers: US.
Sentry — anonymous error reporting. Servers: US.
Data transfers outside Israel are conducted under contractual safeguards (Standard Contractual Clauses / DPA) compliant with the Israeli Privacy Protection Law (5741-1981) and the 2017 Security Regulations.
9. Security Incidents
In the event of a security breach affecting your personal data:
(a) We will report to the Privacy Protection Authority 'without delay' as required by the 2017 Security Regulations.
(b) We will notify you directly if the breach is likely to cause you significant harm.
(c) All incidents, response actions, and decisions will be documented.
To report a suspected security incident: support@metaldrawai.com
Questions? Contact us: support@metaldrawai.com