Privacy Policy

1. Your screen and drawings stay on your Mac

The DrawZal app processes your screen, drawings, snapshots, typed text, and settings only on your Mac and never sends them to us.

The app connects to the internet only to check for updates. Every 4 hours it fetches the latest version information from download.drawzal.com, and if there is a new version, it downloads it and installs it when you quit the app. These requests include the app name and version, and the server sees your IP address. The app does not send system information or device identifiers. You can turn off automatic checks in the app settings.

If we add sign-in or license checks to the app, we will add what we process to this policy and tell you before it takes effect.

2. What we process and why

• Launch notification sign-up: your email, how you plan to use DrawZal (optional answers), and whether you agreed to receive news. We use it to tell you when DrawZal launches and, if you agreed, to send news. Legal basis: your consent.
• Purchases: Paddle, the seller of record, processes your payment. We receive your name, email, country, product, order or subscription ID, and payment status from Paddle to provide your license and support. We never receive card numbers or other payment details. Legal basis: performing our contract with you.
• Questions: your email address and message, to answer you. Legal basis: our legitimate interest in responding.
• Website visits and app update checks: drawzal.com uses no cookies and no analytics. Our host, Cloudflare, may process access logs such as IP address, browser or app name and version, and request time for security and reliable operation. Legal basis: our legitimate interest in a secure website.

3. How long we keep it

• Launch notification only: deleted after we send the launch notification.
• News consent: kept until you withdraw your consent.
• Purchase records: kept for 5 years (contracts, cancellations, and payments) and 3 years (complaints and disputes), as Korean e-commerce law requires.
• Questions: kept for 1 year after we answer, then deleted.
• Access logs: kept for our host's retention period.

4. Sharing

We do not sell or share your personal data with third parties, except where the law requires it.

Paddle processes payments as the seller of record under its own privacy notice (paddle.com/legal/privacy).

5. Service providers and international transfers

We use the following providers, which store data outside Korea. Data is sent over the network when you use the Service and kept for the periods in section 3. If you do not want your data transferred, do not sign up for the launch notification, or ask us to delete it. You can also turn off automatic update checks in the app settings.

• Tally BV (Belgium): runs the launch notification form and stores responses on servers in Europe. Email, intended use, news consent
• Cloudflare, Inc. (United States): hosts, delivers, and protects the website and app update files. Access logs (IP address, browser or app name and version, request time)
• Google LLC (United States): receives and stores emails you send us (Google Workspace). Email address, message

6. Deletion

When the retention period ends or the purpose is fulfilled, we delete the data without delay in a way that cannot be recovered. Data we must keep by law is stored separately and only for the required period.

7. Your rights

You can ask to access, correct, or delete your data, restrict or object to its processing, get a copy of it, or withdraw your consent at any time by emailing hello@devbrothers.ai. We respond without undue delay. Launch and news emails always include a way to unsubscribe. You can also complain to your local data protection authority.

8. Security

Only our representative can access personal data, admin accounts use two-factor authentication, and the website and form are encrypted in transit with HTTPS.

9. Privacy contact

Junhyuk Choi (Representative), hello@devbrothers.ai

10. Privacy complaints in Korea

In Korea, you can also contact these organizations about a privacy complaint:

• Personal Information Dispute Mediation Committee: 1833-6972, www.kopico.go.kr
• Personal Information Infringement Report Center: 118, privacy.kisa.or.kr
• Supreme Prosecutors' Office: 1301, www.spo.go.kr
• Korean National Police Agency: 182, ecrm.police.go.kr

11. Children

The Service is not directed at children under 14, and we do not knowingly collect personal data from children under 14.

12. Changes to this policy

We will post changes to this policy on this page at least 7 days before they take effect.