Privacy Policy

Who we are

SketchWeave is a software product developed and operated by Formaic ("Formaic", "we", "us", or "our"), the company behind it. SketchWeave is a visual workspace for planning and assembling drawing sets, available at sketchweave.com and the application at sketchweave.app (together, the "Service"). This policy applies to information we handle when you visit our sites, create an account, or use the Service. If you access SketchWeave through an organization that holds a subscription, that organization is the controller of the project content you create in its workspace, and this policy describes how we process it on their behalf.

Information we collect

We collect the following categories of information:

• Account information. When you sign up, we collect your email address, your name if you provide it, and authentication details needed to secure your account. If your account belongs to an organization, we also record your membership and role.
• Project content. The sheets, views, connections, sketches, drawings, PDFs, images, and text you create or upload to the Service. You control this content, and we store it to provide the Service to you and your team.
• Billing information. If you purchase a paid plan, our payment processor collects your payment details directly. We do not store full card numbers. We receive limited billing records such as your plan, subscription status, and the last four digits of a card.
• Communications. If you contact us through our forms or by email, we collect the information you send, such as your name, email, company, and message, so we can respond and keep a record of the request.
• Connected accounts. If you link a third-party service such as Autodesk (for the Autodesk Forma integration), we store the tokens needed to sync on your behalf and the identifiers of the projects and files you choose to connect. You can disconnect at any time, which removes the stored tokens.
• Technical and usage information. When you use the Service we automatically collect standard technical data such as your device and browser type, approximate location inferred from your IP address, pages viewed, and actions taken, along with log data needed to operate and secure the Service.

Cookies and local storage

We use cookies and similar browser storage in two ways:

• Essential. Cookies and local storage that keep you signed in, remember your preferences, and keep the Service working. These are essential to how the application functions.
• Advertising measurement. Our sites include Google advertising tags (Google Ads / gtag.js) that set Google cookies. We use them to measure how our advertising performs, for example to count when a visit or a sign-up resulted from one of our ads, and Google may also use this data for remarketing, such as showing SketchWeave ads to people who have visited our sites. Because visitors move from sketchweave.com to sketchweave.app to sign up, these tags link the same visit across our two domains so a sign-up can be attributed to the ad that led to it. They do not read or transmit your project content.

You can opt out of personalized advertising in your Google Ads Settings, and you can read how Google uses this data at policies.google.com/technologies/ads. You can also clear or block cookies in your browser, but parts of the Service may not work without the essential ones. We do not sell your personal information.

How we use your information

We use the information we collect to:

• Provide, maintain, and improve the Service, including saving and syncing your projects.
• Authenticate you, secure your account, and prevent fraud and abuse.
• Process payments and manage subscriptions and seats.
• Respond to your questions and provide support.
• Send service messages such as account, security, and billing notices, and, where permitted, occasional product updates you can opt out of.
• Run integrations you enable, such as syncing drawings from Autodesk Forma.
• Measure the performance of our advertising campaigns, as described in the cookies section above.
• Understand how the Service is used so we can improve it, and comply with our legal obligations.

Legal bases for processing

Where the GDPR or similar laws apply, we rely on the following legal bases: performance of our contract with you to provide the Service; our legitimate interests in operating, securing, and improving the Service; your consent where we ask for it, such as optional product emails; and compliance with our legal obligations.

Canadian privacy law (PIPEDA)

Formaic is based in Ontario, Canada, and our handling of personal information is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws. In line with those laws, we collect, use, and disclose personal information for purposes a reasonable person would consider appropriate, we rely on your consent (express or implied) for those purposes, and you may withdraw your consent at any time subject to legal or contractual limits. If you have a concern about how we handle your information, we ask that you contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca.

How we share information

We do not sell your personal information. We share it only as described here:

• Within your organization. Project content in an organization workspace is visible to other members of that organization according to their access, so a team can plan a drawing set together.
• Service providers (subprocessors). We use trusted vendors to run the Service. They process information only on our instructions and under contract. Our current subprocessors include Supabase (database, authentication, and file storage), Vercel (website and application hosting), Stripe (payment processing), Resend (transactional email), and Autodesk (only when you enable the Forma integration).
• Advertising measurement. We use Google Ads conversion tracking, so Google receives limited technical data about visits to our sites and sign-ups, as described in the cookies section. This never includes your project content.
• Legal and safety. We may disclose information if required by law, to enforce our terms, or to protect the rights, safety, and property of Formaic, our users, or others.
• Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

International data transfers

We and our service providers may process and store information in countries other than the one you live in, including the United States. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect your information when it is transferred across borders.

Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete content or close your account, we delete or de-identify the associated personal information within a reasonable period, except where we need to keep certain records to meet legal, tax, accounting, or security obligations, or to resolve disputes. Backups are purged on a rolling schedule.

Security

We protect your information with technical and organizational measures, including encryption in transit, access controls, hashed credentials, and strict server-side permissions on stored data. No method of transmission or storage is completely secure, but we work to protect your information and to promptly address issues if they arise.

Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. You can update much of your account information directly in the Service. To make a request or ask a question about your data, contact us using the details below. We will respond as required by applicable law, and you will not be discriminated against for exercising your rights. If your data is held within an organization workspace, we may direct your request to that organization as the controller. If you are in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Children

The Service is intended for professional use and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you. Your continued use of the Service after an update means you accept the revised policy.

Contact us

If you have questions about this policy or how we handle your information, email us at support@sketchweave.com.