Skip to content
Draw the System
Sign in with GitHub
DRAFT — not yet reviewed by counsel
This is a working draft, not a binding legal document. Have a lawyer review it before launch.

Privacy Policy (DRAFT)

Last updated: 2026-08-21

1. What we collect

  • Account data — email, name, and avatar from your sign-in provider (e.g. GitHub).
  • Practice content — the sessions you create: prompts, notes, diagrams, transcripts, feedback, and progress scores.
  • Usage analytics — product events (page views, feature use) and client-side error reports via PostHog. No practice content is sent to analytics: we do not record your screen, your diagrams, or your transcripts.

2. What we don't collect

Payment details go directly to Paddle.com, the merchant of record — we never see your card number. Your AI agent runs under your own provider account; its API traffic with its provider is between you and them.

3. Where data lives

Data is stored on Cloudflare's platform (D1 database, R2 object storage, Durable Objects), which may replicate across regions for availability. Access is scoped to your account: an agent you authorize can only read and write your own sessions.

4. How we use it

Only to run the service: showing you your workspace, letting your authorized agent conduct and grade interviews, and improving the product from aggregate usage. We do not sell personal data, and we do not train AI models on your content.

5. Sharing

Service providers only: Cloudflare (hosting/storage), Paddle (billing), PostHog (analytics). Each processes data on our instructions. We disclose data if legally required.

6. Cookies

An encrypted session cookie keeps you signed in, and PostHog sets a first-party cookie so repeat visits count as one person rather than many. No advertising or cross-site tracking cookies.

7. Your rights

Both of these are buttons on your account page, not requests you have to send us:

  • Export — one JSON file with your sessions, notes, diagrams, transcripts, feedback, progress scores, and purchase history. A session's private interviewer notes are included once that session has been graded.
  • Deletion — removes your account and everything it owns from our database and object storage. It is immediate and permanent; we keep no copy. Records Paddle holds as merchant of record (invoices, tax records) are theirs to retain under their own policy.

Depending on where you live you may have further rights (access, correction, portability, objection) — contact us and we'll honor them.

8. Contact

[CONTACT EMAIL — fill in] · Data controller: [LEGAL ENTITY — fill in]