Privacy Policy

Who we are

CometDraw is a drawing tool for architecture, interior and product design: you mark up drawings, pictures and 3D models, and an AI revises them. This policy says what CometDraw keeps about you, why, who else handles it, and what you can do about it.

Operator

[Company legal name]

Address

[Company address]

Contact

[email protected]

Signing in with Kith

You sign in with Kith, the account service for all Aether Formosa services. Kith handles your passkey, Google, Apple or email sign-in; CometDraw never sees a password.

From Kith, CometDraw receives your account's identifier, your verified email address, your name if you gave one, and whether you are one of CometDraw's admins.

Each device you sign in on keeps a session in a cookie for 30 days. Signing out ends it.

What CometDraw keeps

• Your work: projects, drawings, the files you add (pictures, PDFs, CAD drawings and 3D models), every version, your marks and notes, and your conversations with the AI.
• Your settings: the AI, model and voice you chose, your pens and similar preferences.
• Usage: what you used and its estimated cost (rounds, tokens, voice minutes), without the content.
• Problem reports you send: what you said or typed, a screenshot, page errors, failed requests, device details and recent AI-connection activity.
• NAS connections you add: the address, user name and folder. The password or private key is sealed (encrypted with AES-256-GCM under a key kept apart from the database) and is never shown again.
• Push devices: your iPad's notification token, with its environment and language.
• Security records: sign-ins, sign-outs, trash and deletions, in an audit log.

Where it is stored

Your data is stored on our servers: today a Mac in Taiwan that we run, and soon Google Cloud in Taiwan.

Each account has its own private workspace. Other people using CometDraw never see your projects. CometDraw's admins can look at them, read-only, to help with problems.

CometDraw is reached through Cloudflare, which carries the traffic between your device and our server.

AI processing

When you ask for something (you send a round, talk to the voice, or send a problem report), CometDraw sends what that request needs to the AI providers that do the work: OpenAI, Anthropic, xAI and Google. That can be the drawing or model, your marks and notes, the files you attached and, for voice, your voice. They process it to answer your request, under their terms for business use of their services.

If you connect your own AI app (ChatGPT, Codex or Claude, for example) over MCP, that app reads the drawings and notes you give it, under your own account with its maker.

The AI reaches your files through signed links that expire after fifteen minutes.

Voice

Voice conversations use GPT-Live (OpenAI) or Grok Voice (xAI). The microphone is on only while a conversation is open, and the audio goes from your device to that provider. CometDraw does not keep the audio; it keeps how long the conversation lasted, for usage.

What you ask for by voice becomes the note of the round it sends, kept like a typed one. A problem report made by voice keeps its transcript in the report.

Analytics

Cloudflare Web Analytics counts page visits without cookies.

When PostHog analytics is on, your browser sends it through CometDraw's own address. PostHog knows you by an opaque id, never by your email or name, and a browser that asks not to be tracked is left alone. What it records depends on the mode CometDraw runs in.

In strict mode, it records no text, names or file names, and no screen recordings: only which features are used.

Push notifications

If you allow notifications in the iPad app, CometDraw sends an alert through Apple's push service when a round ends. The alert shows the project and drawing names.

Your iPad's token is removed when you sign out on that iPad, when you are signed out everywhere, or when you delete your account.

Cookies and storage on your device

CometDraw uses a cookie to keep you signed in (30 days), and short-lived cookies while you sign in (10 minutes). Your browser keeps preferences such as language, theme and layout in its own storage, and when PostHog analytics is on, an anonymous id. Signing out clears what CometDraw stored in that browser.

How long it is kept

• Your work stays until you delete it. What you move to the trash is deleted for good after 30 days.
• Files nothing uses any more, such as an abandoned upload, are removed after a day.
• Sign-in sessions end after 30 days. A QR sign-in code works once, for two minutes.
• When you delete your account, these are deleted at once: your workspace (projects, drawings, files, versions, marks and conversations with the AI), your problem reports with their screenshots, your NAS connections, push devices, sessions and AI connections, and the account itself.
• These are kept after that, with no drawings, notes or files in them: usage records (counts, tokens, minutes and estimated costs), the audit log, including an entry for the deletion with your email, and your Kith identifier with the time of the deletion, so that an AI app's older sign-in cannot bring the account back.
• Our backups can hold copies for a limited time after something is deleted.

Your choices

You can download your drawings, delete versions, drawings and projects, and delete your account in Settings › Delete account….

Deleting your CometDraw account does not delete your Kith account, which other services use. To delete it too, do it in Kith:

kith.tw

To ask what we hold about you, to correct it, or to ask anything else about your data, write to us.

Children

CometDraw is a professional tool and is not meant for children.

Changes

If this policy changes, we will update this page and its date, and tell you in CometDraw before a change that matters takes effect.

Contact

Questions about this policy:

[email protected]