Clear and Human
Privacy Policy
Scrawl is built for sketching ideas, not harvesting personal data. This page explains what we collect, why we collect it, and how you can control it.
Last Updated
April 17, 2026
Scope
Applies to Scrawl web app, collaboration rooms, account sessions, and invite workflows.
Section 01
What We Collect
We only collect data needed to run whiteboards, collaboration, and account access.
- Account details: your name, email, avatar, and linked sign-in provider details (for example Google or GitHub).
- Workspace data: room names, room membership, comments, and collaboration permissions.
- Content you create: whiteboard elements, uploaded images, and optional room checkpoints.
- Session and security data: session tokens, approximate device information, IP address, and user-agent for authentication and abuse prevention.
Section 02
How We Use Data
Your data is used to operate the product and keep it safe.
- Authenticate users and keep sessions active across visits.
- Enable real-time collaboration, room access control, and invite handling.
- Store and deliver uploaded whiteboard images and room state.
- Detect fraud, investigate misuse, and maintain service reliability.
Section 04
Retention
We keep data for as long as it is needed for product functionality.
- Account and room records are retained while your account and rooms remain active.
- Invite records and session records may be kept for security and audit trails.
- Uploaded files remain available until removed from their workspace or account context.
- Backup and log retention windows may persist for limited periods after deletion requests.
Section 05
Your Controls
You can manage visibility and access in product settings.
- Room owners can change room access, remove members, and stop sharing links.
- You can sign out at any time and unlink from active sessions.
- If you need account or data deletion assistance, contact privacy@scrawl.site.
- Where required by law, you may request access, correction, portability, or deletion of personal data.
Section 06
Security and Policy Changes
We apply technical and organizational safeguards, then update this page as the product evolves.
- Data access is restricted to authorized systems and personnel with a legitimate need.
- We use industry-standard encryption in transit and provider-level storage protections.
- No method of storage or transfer is perfectly secure, but we continuously improve controls.
- Material policy changes will be reflected by updating the Last Updated date on this page.
Questions
Contact and Notices
For privacy requests or policy questions, contactprivacy@scrawl.siteand include the email address tied to your account.
This document is provided for transparency and product operations. It is not legal advice.