Privacy Policy

01What we collect

02Temporary processing and background storage

To provide document extraction and AI-assisted processing services, DraftIQ may temporarily process, cache, transmit, or store uploaded documents and extracted content within secure infrastructure systems and third-party processing services.

This may include:

• encrypted upload handling
• OCR preprocessing
• temporary image or text extraction buffers
• structured extraction outputs
• API request and response logging
• monitoring and error logs
• infrastructure backups
• processing through third-party AI providers

DraftIQ does not use customer documents to train its own AI models. See Section 05.

03Third-party services and sub-processors

DraftIQ uses third-party service providers to operate the platform. The following sub-processors are explicitly named:

A current list of sub-processors and their privacy policies is maintained at draftiq.ca/pages/sub-processors.

DraftIQ does not use advertising networks, analytics tracking, social media pixels, or any other data collection services beyond those listed above.

04Cross-border data processing

By using DraftIQ, you consent to the transfer of data to these jurisdictions for the purpose of operating the service. Each sub-processor named in Section 03 operates under their own published data-handling and regional infrastructure policies. Where supported, DraftIQ selects regional endpoints or configurations that minimize cross-border transfer; however, complete confinement of processing within Canada cannot be guaranteed at this time.

05AI training and model use

DraftIQ does not use customer documents to train its own AI models.

Third-party providers (Anthropic, Google Cloud) may process data according to their own policies and configured API terms. DraftIQ selects API configurations designed to minimize retention and prevent model training on customer content where supported by the provider. We cannot, however, override the underlying terms of those providers — please review their published policies if model-training behavior is material to your decision to use DraftIQ.

06How your documents flow through the system

For transparency, here is the typical data flow for a P&ID extraction:

1. You upload a PDF in your browser.
2. For vector PDFs, geometric symbol detection runs locally in your browser. No drawing data leaves your device for this step.
3. The PDF is rasterized (converted to an image) and transmitted to DraftIQ's server over an encrypted connection.
4. The rasterized image is sent to Google Cloud (Vision / Gemini) for OCR and multimodal text/symbol detection.
5. The rasterized image is sent to Anthropic (Claude API) for AI vision analysis, symbol interpretation, and cross-validation.
6. Structured extraction results are formatted and returned to you.
7. Uploaded files, intermediate processing artifacts, and logs are subject to the temporary-processing terms in Section 02. They are not intended for long-term storage, but may persist briefly in infrastructure systems or third-party environments.

07How we use your information

• To send your access code and onboarding information
• To communicate updates, changes, or issues with the tool
• To aggregate anonymised, non-identifiable usage patterns to improve the service
• To respond to support requests

We will never sell, rent, or share your personal information with third parties for marketing or commercial purposes.

By using DraftIQ, you consent to the collection and use of information as described in this policy.

08Email communications (CASL)

Account emails (always sent): DraftIQ will send you emails related to your account — welcome message, password reset, usage notifications, payment confirmations, and feedback requests after your first extraction. These are transactional messages and are not optional while you have an active account.

Newsletter (opt-in only): At signup you can choose to subscribe to the DraftIQ newsletter — occasional product updates, P&ID extraction tips, and early-access offers. Canada's Anti-Spam Legislation (CASL) requires your express consent before we send these, so the newsletter checkbox is unchecked by default. We record the date, source, and wording of your consent.

Unsubscribe: Every newsletter message includes an unsubscribe link. You can also unsubscribe at any time by emailing hello@draftiq.ca with "Unsubscribe" in the subject line. Unsubscribing stops marketing emails only — account emails will continue as long as you have an active account.

09Your rights

Under PIPEDA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your registration data
• Withdraw consent for processing (this will end your platform access)

To exercise any of these rights, email hello@draftiq.ca. We will respond within 30 days.

10Data retention

Registration data: retained for the duration of your Design Partner program membership plus 12 months.

Usage logs: retained for 24 months. Usage logs do not contain document content; they contain operational metadata such as timestamps, file sizes, and extraction methods used.

Documents and extraction outputs: Drawing images (valve crops, thumbnails) are deleted within 7 days. Structured extraction outputs and review records are deleted within 90 days. No drawing content is retained beyond these windows.

You may request earlier deletion of registration data at any time by emailing hello@draftiq.ca.

11Security

DraftIQ uses HTTPS encryption for all data in transit. Access to registration and usage data is restricted to DraftIQ's operator. We follow reasonable security practices appropriate for a small SaaS business. While we take reasonable measures to protect your information, no system can be guaranteed to be 100% secure.

12Contact

Privacy questions or requests: hello@draftiq.ca