Your Data and Your IP

If you are about to upload a photograph of a part you designed, you are entitled to know what happens to it. This page answers that in plain language. The binding versions are the Terms and the Privacy Policy; nothing here contradicts them.

The short version

• You own what you upload and what comes out. We claim no rights over your photographs or over the drawings, DXF, DWG, PDF or 3D files made from them. Use them commercially, sell them, put them in a client deliverable — no attribution, no licence fee.
• Your files are not used to train AI models. Not ours — we do not train models. And we do not hand your content to anyone else for that purpose.
• Most of our tools never send your file anywhere. The converters, viewers and repair tools run inside your browser. Your file is read by the tab and never reaches a server, ours or anyone else's.
• You are covered by the GDPR. TechDraw AI is run by MeltFlex s.r.o. in Bratislava, inside the EU, so European data protection law governs your files whether you are in Nottingham, Seoul or Texas. Your drawings are never sold, never used for advertising and never handed to anyone outside the short list of processors below.

Who owns the drawings

You keep ownership of every sketch, photograph and prompt you upload. You grant us a licence to process, store and show that content for one purpose only: running the service for you. It ends when you delete the content.

We do not claim ownership of what the AI produces from your uploads. You may use it for personal, commercial or professional work, including production documentation and client deliverables. What we cannot do is warrant that an AI-generated drawing does not resemble someone else's design, any more than a draughtsman could — and, as the Terms say at greater length, AI output is a starting point that a qualified engineer has to check before anything gets made from it.

Is my data used to train AI?

No. TechDraw AI does not train, fine-tune or improve any model on your uploads, drawings, dimensions or prompts. We have no model of our own to train — we send the image to a model provider, get an image back, and the vector geometry is computed from it on your own machine.

Where we use aggregate data at all, it is usage statistics — how often a format is exported, how long a generation takes, how often something fails. That is counts and timings, not your content.

What happens to a photo you upload

• It goes from your browser to our server, and from there to the model provider that generates the drawing. It is not stored by us on the way through.
• The generated drawing comes back and is saved, along with your original photo, in a private storage bucket under a path that begins with your own user ID.
• That bucket is not public. It is protected by row-level security and a matching storage policy, so one account cannot read another account's files even by guessing the path, and files are served only through short-lived signed links.
• Nobody at TechDraw AI looks at your drawings as a matter of course. We open a file only when you send it to us with a support question, or where we are legally obliged to.

What never leaves your browser

This is the part worth knowing if you work under NDA. These tools do their work in the page itself — the file is opened by your browser, the geometry is computed there, and the result is written to a download. Nothing is uploaded, so there is nothing for us or a model provider to see:

• Every raster-to-CAD converter, including image to DXF and the DWG, SVG and STL variants of it
• The DXF and DWG viewers, and the conversions between DXF, DWG, SVG, PDF and STL
• The mesh tools: STL, OBJ, 3MF and STEP conversion, STL repair, sections, orthographic projection and the G-code viewer
• The DXF and DWG you export from a generated sheet: the tracing and the CAD file are produced on your machine, not on a server
• The text recognition in the dimension editor, which reads the drawing in the page rather than sending it anywhere

The public REST API, the CLI and the MCP server are the deliberate exception: there is no browser in those, so the trace runs on our server. Your image is held in memory for the length of the request and never written to disk; the request log keeps only who called, the pixel size and how many contours came back.

Which companies see your files, and under what rules

Generating a drawing means sending your photograph to a model provider — there is no way around that, and we would rather name them than let you assume otherwise. Every company below is a processor in the GDPR sense: bound by a data processing agreement, acting only on our documented instructions, and forbidden from using your content for any purpose of its own. Where data leaves the EEA it travels under Standard Contractual Clauses approved by the European Commission. What each one receives:

• Vercel — hosting. Requests pass through it.
• Supabase — the database and the private file storage where your projects live.
• fal.ai and Google (Gemini image models) — the image you upload and the drawing prompt, in order to generate the drawing. For its paid API, which is what we use, Google states that prompts and responses are not used to improve its products, and that it logs them only to detect abuse.
• Meshy — only if you use photo-to-3D, and only that photograph.
• Stripe — payment details. Stripe never receives a drawing, and we never see your card number.

Outside that list, your drawings go nowhere. No data brokers, no advertising networks, no training sets, no “partners”. And if a part is sensitive enough that even a named processor is one party too many, the in-browser tools above send nothing at all — that is the route we would take ourselves for work under NDA.

Your rights under the GDPR

MeltFlex s.r.o. is the data controller, established in the Slovak Republic and therefore squarely inside the GDPR. That is not a badge we award ourselves; it is a law with a regulator attached. You can demand a copy of everything we hold on you, have it corrected, have it erased, take it elsewhere in a portable format, or object to a particular use — and we have to answer within one month.

Write to info@techdrawai.com to exercise any of them. If we get it wrong you can complain to your own national data protection authority, or to ours: the Office for Personal Data Protection of the Slovak Republic. The full list of rights and the legal bases we rely on is in the Privacy Policy.

How long it is kept, and how to erase it

• Delete a project and its files go with it. Nothing is kept as a "backup copy" of the content.
• To erase your whole account, email info@techdrawai.com from the address you signed up with. Everything personal is deleted within 30 days; invoices are kept for as long as Slovak tax law requires, which is up to ten years.
• You can also ask for a copy of what we hold, or ask us to correct it. The full list of your rights is in the Privacy Policy.

Still not answered?

Write to info@techdrawai.com and ask directly — including the awkward version of the question. If we cannot promise something, we would rather tell you that than find out later that you assumed we had.