Privacy policy

This explains what personal information NetDraw (“we”) collects when you use NetDraw, why, who we share it with and what your rights are. We act as the controller of the personal information described here.

What we collect

• Account details: your name (if you give it), email address and how you sign in (email and password, Google or Microsoft). We do not see your password.
• What you create: diagrams, devices, ports, notes and anything else you put into the Diagram Builder.
• NetDraw Monitor data: the sites and networks you add, the devices a collector finds (names, IP and MAC addresses, device type, SNMP details), readings such as status, response time and port traffic, alerts, and the people you invite to your organisation and their roles.
• Credentials you store: SNMP community strings and similar secrets are encrypted before they are saved and are only sent to your own collector.
• Billing: if you subscribe, our payment provider collects your payment details. We receive your plan, billing period and a customer reference, not your full card number.
• Usage and security records: sign-in times, the address a request came from, and an audit log of sensitive actions such as remote device access, so we can keep the service secure and investigate problems.
• Support: anything you send us when you ask for help.

Why we use it

• To provide the services you asked for (our contract with you).
• To take payment, prevent fraud and keep the services secure (our legitimate interests and legal obligations).
• To reply to you and give support.
• To tell you about changes to the service. We will only send marketing email if you have agreed to it, and you can opt out at any time.

Who we share it with

We use trusted providers to run the services. They process data for us and only as we instruct. They fall into these groups:

• Cloud hosting providers, which run the NetDraw website and the NetDraw Monitor service.
• Database and sign-in providers, which store accounts, diagrams and monitoring data.
• A payment provider, which takes payments.
• The sign-in provider you choose, if you sign in with a Google or Microsoft account.
• An email provider, to send alert and account emails.

We do not sell your personal information. Some providers may handle data outside the UK or the EU; where they do, we rely on appropriate safeguards such as approved contract terms. If you would like to know which providers handle your data, email us and we will tell you.

Cookies

We use cookies that are needed to keep you signed in and to keep the service secure. We do not use advertising cookies.

How long we keep it

We keep your account and diagrams while your account is open. NetDraw Monitor keeps detailed readings for 90 days. When you ask us to delete your account we remove your data, except what we must keep for legal or accounting reasons (such as payment records) or for a short time in backups.

Your rights

You can ask us for a copy of your personal information, to correct it, to delete it, to restrict or object to how we use it, and to move it to another service. To use any of these rights, email [email protected]. If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority.

Information about other people

NetDraw Monitor can collect information about devices on networks you manage, which may include names or identifiers that relate to people. You are responsible for having the right to monitor those networks and for telling the people affected where the law requires it.

Changes

If we change this policy in a way that matters to you, we will tell you before it takes effect.

Contact

Privacy questions: [email protected].