draw.audio ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy outlines how we
collect, use, disclose, and safeguard your information when you visit our website draw.audio ("the Site"). By
accessing or using the Site, you agree to the terms of this Privacy Policy.
1. Information We Collect
1.1 Personal Information
We do not collect personal data such as your name, email address, or physical address unless you voluntarily
provide it to us (e.g., via email communication). However, we collect certain information that may be considered
personal data under applicable laws:
IP Address: Used to identify your geographic location and to prevent abuse.
Browser and Device Information: Type of browser, operating system, device type, unique device
identifiers.
1.2 Non-Personal Information
We collect non-personal information automatically when you visit the Site:
Usage Data: Pages viewed, time spent on pages, clickstream data, and other analytical data.
2. Legal Bases for Processing (GDPR Compliance)
We process your personal data on the following legal bases:
Legitimate Interests: Processing is necessary for our legitimate interests in operating and
improving the Site.
Consent: Where required by law, we obtain your consent before processing your personal data.
You may withdraw your consent at any time by contacting us at randy@draw.audio. Upon withdrawal of your consent,
we will remove your personal data (e.g., IP address, browser data) from our records. Please note that withdrawing
consent may affect your ability to use certain features of the Site.
3. How We Use Your Information
We use the collected information for the following purposes:
Site Improvement: To analyze usage patterns and improve the functionality and user experience
of the Site.
Prevent Abuse: To detect and prevent malicious activities such as DDoS attacks.
Content Display: To showcase user-generated content to other users.
Legal Obligations: To comply with applicable laws, regulations, and legal processes.
4. Disclosure of Your Information
We do not sell or share your personal data with third parties for marketing purposes. We may disclose your
information only in the following circumstances:
Service Providers: We use third-party service providers (Cloudflare
and Amazon Web Services) to host the Site and
ensure its functionality. These providers may have access to your personal data only to perform tasks on our
behalf and are obligated not to disclose or use it for any other purpose.
Legal Obligations: If required by law or in response to valid requests by public authorities
(e.g., a court or a government agency).
Protection of Rights: To protect and defend our rights, property, or safety, and that of our
users or others.
5. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy
Policy:
Anonymized IP Addresses and Logs: Stored for up to 12 months for security and analytical
purposes.
Cookies and Local Storage Data: Stored on your device; you can manage or delete these through
your browser settings.
6. Data Security
We implement reasonable security measures to protect your information:
Secure Servers: Hosting on secure servers provided by Cloudflare and Amazon Web Services (AWS).
Encryption: Data transmitted between your browser and the Site is protected using standard
encryption protocols (HTTPS).
Access Controls: Limiting access to personal data to authorized personnel.
Please note that no method of transmission over the Internet or electronic storage is 100% secure. While we strive
to protect your personal data, we cannot guarantee its absolute security.
7. Your Rights (GDPR Compliance)
If you are located in the European Economic Area (EEA), you have the following rights regarding your personal
data:
Right to Access: Request access to your personal data that we hold.
Right to Rectification: Request correction of inaccurate or incomplete personal data.
Right to Erasure: Request deletion of your personal data under certain conditions.
Right to Restrict Processing: Request limitation of our processing of your personal data under
certain conditions.
Right to Data Portability: Request to receive your personal data in a structured, commonly
used, and machine-readable format.
Right to Object: Object to the processing of your personal data under certain conditions.
Right to Withdraw Consent: Withdraw your consent at any time where we rely on consent to
process your personal data.
To exercise these rights, please contact us at randy@draw.audio.
Right to Lodge a Complaint
If you believe that we have processed your personal data unlawfully, you have the right to lodge a complaint with
your national data protection authority in the EEA.
8. California Privacy Rights (CCPA Compliance)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
Right to Know: Request disclosure of the categories and specific pieces of personal information
we have collected about you.
Right to Delete: Request deletion of personal information we have collected from you.
Right to Opt-Out: We do not sell personal information; however, you have the right to direct us
not to sell your personal information.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your
CCPA rights.
To exercise these rights, please contact us at randy@draw.audio.
9. Children's Privacy (COPPA Compliance)
Our Site is accessible to users of all ages. However:
Content Warnings: Implemented for user-generated content that may not be suitable for children.
Parental Supervision: Recommended for minors under the age of 18.
Users Under 16: Users under the age of 16 must have parental or guardian consent to use the
Site.
10. Cookies and Tracking Technologies
10.1 Types of Cookies Used
First-Party Cookies: We use first-party cookies placed by us to enhance user experience and
analyze usage patterns. These cookies are NOT shared with or accessible to third parties.
Anonymized Data: The data collected through cookies is anonymized or pseudonymized (e.g.,
truncated IP addresses), making it impossible to identify individual users.
Purpose of Cookies: Used solely for measuring the website’s performance, improving the Site,
and understanding user interaction in a way that does not create risks to user privacy.
Essential Cookies: Necessary for the Site to function properly.
There is no cross-site data sharing.
10.2 Managing Cookies
You can manage or disable cookies through your browser settings. However, disabling cookies may affect the
functionality of the Site.
11. Third-Party Services and Data Processors
We use the following third-party service providers to operate our Site:
Cloudflare: Provides content delivery network (CDN) services and security features to protect
the Site from malicious activities.
Amazon Web Services (AWS): Provides hosting services for the Site.
These providers may have access to your personal data only to perform tasks on our behalf and are obligated not to
disclose or use it for any other purpose. For more information on their privacy practices, please review their
privacy policies:
Your information may be transferred to and processed in countries other than your country of residence, including
the United States, where our servers are located. These countries may have data protection laws different from
those of your country.
We take appropriate safeguards to require that your personal data will remain protected in accordance with this
Privacy Policy. This includes implementing the European Commission's Standard Contractual Clauses for transfers of
personal information between us and our third-party service providers.
13. Data Breach Notification Procedures
In the unlikely event of a data breach that affects your personal data, we will notify you and the relevant
supervisory authority within 72 hours of becoming aware of the breach, when required by law.
14. Data Controller Identification
draw.audio is the data controller responsible for your personal data collected via the Site.
Contact Information:
Email: randy@draw.audio
15. Changes to This Privacy Policy
We reserve the right to update or modify this Privacy Policy at any time without prior notice, as we do not retain
contact information for users. It is your responsibility to review this Privacy Policy periodically. Your
continued use of the Site after any changes constitutes your acceptance of the new Privacy Policy.
If we make material changes to this Privacy Policy, we will update the "Last Updated" date at the top of this
Privacy Policy.
16. Security Measures
We are committed to ensuring the security of your information. Measures we take include:
Please note that no method of transmission over the Internet or electronic storage is completely secure. We cannot
guarantee the absolute security of your information.
17. User Communications
If you contact us via email or other communication methods, we may keep a record of your correspondence and use
your email address to respond to you.
18. Use of Aggregated Data
We may aggregate and anonymize data to analyze trends or gather demographic information. This aggregated data does
not identify individual users.
19. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the State of California, without
regard to its conflict of law principles.
21. Contact Us
If you have any questions or concerns about this Privacy Policy, or wish to exercise your rights, please contact
us at:
Email: randy@draw.audio
By using the Site, you acknowledge that you have read and understand this Privacy Policy and agree to its terms.