Privacy Notice

1. Who we are

InduDraft is operated by Bredesen Tech Holding AS, Norway. We are the data controller for the personal data we process in connection with the InduDraft service. This means we determine why and how your personal data is processed.

2. What data we collect

• Account data: name, email address and login credentials, used to create and secure your account.
• Content: the drawings, projects and settings you create, used to provide the service to you.
• Support messages: messages you send us, used to respond to and follow up your requests.
• Usage and technical data: device identifiers, IP address, browser type and usage telemetry, used for security, fraud prevention and product improvement.
• Newsletter: your email address, used to send product updates when you have subscribed.

Payment data (card details, billing address) is collected and processed directly by our Merchant of Record, Paddle, and is not stored by us.

3. Legal basis

We process personal data on the following legal bases:

• Contract performance: to create your account and provide the service you signed up for.
• Legitimate interests: security, fraud prevention and improvement of the service.
• Consent: for optional communications such as the newsletter; you can withdraw consent at any time.
• Legal obligation: where we are required to retain or disclose data by law.

4. Who we share data with

• Service providers: hosting, analytics and support tooling providers that process data on our behalf.
• Merchant of Record: Paddle, for the sale of our products, subscription management, payments, tax compliance and invoicing.
• Professional advisers: legal and accounting advisers where necessary.
• Authorities: where required by law.

5. International transfers

Some of our service providers process data outside the EU/EEA. Where this happens, we use appropriate safeguards such as standard contractual clauses or adequacy decisions.

6. Retention

We keep personal data only for as long as needed for the purposes described above. Account data is kept while your account is active; when data is no longer needed it is deleted or anonymised.

7. Your rights

Under the GDPR you have the right to access, rectify and erase your personal data, to restrict or object to processing, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or your local supervisory authority. We respond to requests within one month.

8. Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit and access controls.

9. Cookies

Essential cookies support sign-in and payments. Google Ads measures visits, registration, first successful drawing save and export, checkout start and the first confirmed paid Pro subscription. Google may receive advertising click and device identifiers, event times, transaction ID, payment amount and currency for attribution and advertising measurement. We do not send drawing content, email addresses or customer matching data to Google Ads. Advertising tags and events are blocked everywhere before explicit acceptance and after rejection or withdrawal. No cookieless advertising measurements are sent without acceptance.

Use Cookie settings in the footer to accept, reject or withdraw advertising permission. Your browser retains the notice version, choice, region and time, including prior acceptance when you withdraw. Withdrawing stops future advertising events; previously shared data may remain subject to Google's retention policies. Test payments, free Pro and renewals are not counted as new paying customers. Google may process data internationally; see Google's privacy information.

10. Contact

For questions about this notice or to exercise your rights, contact Bredesen Tech Holding AS via the contact options on our website.