Privacy policy
Last updated 16 September 2026
Farm 40 Group Limited (company number 15492178, registered in England and Wales) is the controller of personal data processed through Drawing Board. Contact: hello@drawingboard.tech.
What we collect
- Account details: your name, username, email address and a hashed password.
- Discovery content: the answers you type, the briefs generated from them, and clarifying questions and replies.
- Payment records: what you bought, when, and the amount. Card details are collected and held by Stripe, not by us.
- Technical data: request logs held briefly by our hosting provider for security and reliability.
Why we process it
To provide the Service you asked for (contract); to take payment and keep accounting records (legal obligation); to keep the Service secure and improve it (legitimate interests); and to send you service emails such as email confirmation and password resets. We do not send marketing email without your consent.
Who else processes it
- Cloudflare hosts the application and database.
- Anthropic receives your discovery answers to write briefs and clarifying questions. Your content is not used to train their models.
- Stripe processes payments.
- Resend delivers our transactional email.
Some of these providers process data outside the UK under appropriate safeguards. Each project records a processing location (UK or US) that describes where this discovery’s answers and briefs may be processed.
How long we keep it
Account and discovery data for as long as your account exists, and up to 30 days after you delete a project or close your account, after which they are removed from our systems and backups. Payment records for six years as required by UK tax law.
Your rights
You can access, correct, export or delete your data, object to processing, and complain to the Information Commissioner’s Office. Email hello@drawingboard.tech to exercise a right; deleting a project in the app removes its answers and briefs.
Cookies
We use only the cookies needed to keep you signed in and secure. There are no advertising or analytics cookies.