Privacy Policy

Last updated 2 October 2026

This policy explains what personal data CanonDraft (canondraft.com) handles and why. CanonDraft is run by Painting Pictures, 50, Ratan Colony, Jiwaji Ganj, Gwalior, Madhya Pradesh 474001, India, which is responsible for your data. Questions or requests go to yt@paintingpictures.co.in.

The short version

• Your scripts and projects are saved in your own browser, not on our servers.
• When you use an AI feature, the text or images it needs are sent to Google's Gemini models to produce the result.
• If you sign in, we keep your name, email and photo from Google, and your plan.
• Paddle handles payments. We never see your card details.
• No ads, no analytics trackers, and we don't sell your data.

What we collect

Your writing. Your scripts, characters, locations, research and canvas are stored in your browser's storage on your device. We don't collect them, except for the parts sent to AI features as described below.

Your account. If you sign in with Google, we receive and store your name, email address, profile photo and Google account ID, along with the sign-in tokens Google issues. For security, each sign-in session also records your IP address and browser type.

Your subscription. If you subscribe to Pro, Paddle tells us your plan, its status and renewal dates, and your Paddle customer and subscription IDs. Paddle collects your payment details. We never receive your card number.

AI requests. When you use an AI feature, the content that request needs is sent through our server to Google's Gemini API: for example the text you selected, scenes, character and location details, your research question, or reference images you chose. The writers' room chat also sends your script, cast, locations and research for context, unless you switch off "Share the script, cast, locations and research with the AI for context" under the chat box. We don't keep copies of these requests. Under Google's terms for paid Gemini API use, Google doesn't use this content to improve its products.

Technical data. Like any website, our servers process your IP address and basic request details to deliver pages, and may record errors so we can fix them.

How we use it

• to sign you in and keep your account secure;
• to give you the features of your plan, including Pro after you subscribe;
• to run the AI features you choose to use;
• to answer you when you contact us;
• to meet our legal, tax and accounting obligations.

Who we share it with

We share data only with the services that run CanonDraft, and only what each one needs:

• Google: sign-in with your Google account, and the AI features (Gemini API).
• Paddle: our reseller and Merchant of Record, which handles checkout, payments, tax and invoices under its own privacy policy.
• Amazon Web Services: hosts our server and database in the United States.
• UI Avatars (ui-avatars.com): if your Google account has no profile photo, your name is sent there to draw an initials picture.
• Transparent Textures (transparenttextures.com): one of our marketing pages loads a background pattern from this site, so your browser connects to it when you visit that page.

We may also disclose data if the law requires it. We never sell personal data or use it for advertising.

Cookies and storage on your device

We use one essential cookie that keeps you signed in. CanonDraft also uses your browser's storage to save your projects and preferences on your device. Paddle may set its own cookies when you open checkout. We don't use advertising or analytics cookies.

Where your data is processed

Our server and database are in the United States. Google and Paddle may process data in other countries under their own safeguards.

How long we keep it

We keep your account data while you have an account. If you ask us to delete your account, we delete its data within 30 days, and it leaves our backups within 7 days after that. Paddle keeps transaction records for as long as tax law requires. Projects in your browser stay there until you delete them or clear your browser's data.

Your rights

You can ask us for a copy of your personal data, ask us to correct or delete it, or withdraw consent you've given. Email yt@paintingpictures.co.in and we'll reply within 30 days. You may also have the right to complain to your local data protection authority.

Children

CanonDraft accounts are for people aged 18 and over. We don't knowingly collect data from children. If you think a child has given us data, contact us and we'll delete it.

Security

All traffic to CanonDraft is encrypted with HTTPS, access to our server is restricted, and we collect as little data as we can.

Changes to this policy

If we change this policy, we'll post the new version here with a new date, and tell you before an important change takes effect.

Contact

Painting Pictures, 50, Ratan Colony, Jiwaji Ganj, Gwalior, Madhya Pradesh 474001, India. Email: yt@paintingpictures.co.in