Legal
Privacy policy
Version 1.1 · in force since October 31, 2026
1. In short
- Your library (chats, files, notes, prompts) is yours. We keep it so you can use it on every device, and for nothing else.
- We don’t sell data, show ads, use analytics or tracking tools, or build profiles about you.
- Your content is not used to train artificial intelligence models, neither by us nor by the providers we use.
- The AI only works when you use it, on the content you choose. The one exception, which you can turn off, is suggested filing (section 2.3).
- Data is stored in Europe, in Frankfurt. Some providers are based in the United States: section 3 says who they are and what safeguards apply.
- You can download everything and delete your account at any time, from the app.
2. What data we process, why, and for how long
2.1 Your account
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Email and password (the password is stored only as a one-way hash) | Signing you in and sending account emails: address confirmation, new password, change of address | Performance of the contract (Art. 6(1)(b) GDPR) | As long as you have the account |
| If you sign in with Google: the email, name, picture and identifier of your Google account | Signing you in with Google | Contract | As long as you have the account |
| Display name and profile picture, if you add them | Showing them to you in the app | Contract | Until you remove them or delete the account |
| App language | Sending you emails in your language | Contract | As long as you have the account |
| Which version of the Terms you accepted, and when | Knowing which terms apply to you and asking you to accept new ones | Contract | As long as you have the account |
| Plan (free or paid) | Applying your plan’s storage and AI limits | Contract | As long as you have the account |
| Devices and browsers you signed in with, sign-in dates | Showing you where you’re signed in and letting you sign out of other devices; security | Contract and legitimate interest in the security of the service (Art. 6(1)(f) GDPR) | As long as the session is active |
| IP address, date and time of sign-in requests | Security and abuse prevention | Legitimate interest | For the short period set by the provider’s service (Supabase), then deleted automatically |
Your account stays until you delete it: we don’t delete inactive accounts.
2.2 Your library
What: the chats you save (message text, who is speaking, title, which AI, dates, address of the original chat), drawers, labels, clips, notes, snippets, links, prompts, artifacts, files you upload and their previews, summaries and digests made with the AI, rules, bookmarks, versions, the Trash, and the preferences synced across your devices.
Why: it is the service itself: keeping it and keeping it the same on all your devices. Legal basis: contract.
Where: in your account, on servers in Frankfurt (Germany). The browser you use keeps a working copy, which is erased when you sign out choosing to remove the library from that computer, or when you delete your account.
How long: until you delete it. What you delete goes to the Trash and is permanently deleted after 30 days, or earlier if you empty it. Database backups are overwritten automatically within 30 days.
Chats may contain information about other people, or sensitive information (for example about health or opinions) that you wrote or received. We keep it as you save it, without analysing it for any other purpose. See also the Terms of use, section 3.
2.3 Artificial intelligence
drawerly’s AI works only on the content you ask it to: for example summarising a chat, writing a digest of a drawer, answering a question about your library.
With the Pro plan, the text needed goes through our server, in Frankfurt, to Anthropic, which answers. We keep only the month’s counts (how many tokens and requests) to apply the quota, never the text. Anthropic handles the text as our provider, does not use it to train its models, and deletes it automatically within 30 days, unless it must keep it longer by law or to fight abuse.
With your own API key (Anthropic, OpenAI or Google), the text goes from your browser straight to the provider you chose, under your own contract with them, without passing through us. The key stays only in your browser: it never goes into your account or your backups.
Suggested filing. When the AI is on, drawerly sends new chats from the last 30 days that are still in "Unsorted" to the AI, to suggest a drawer and labels. You decide whether to apply them. You can turn it off in Settings › AI.
The results (summaries, digests and so on) go into your library like everything else. The AI can be wrong; no result leads to decisions with legal or similarly significant effects on you.
Legal basis: contract, because these are features you ask for.
2.4 Features computed only in your browser
Activity (chats, messages, active days, hours, use per AI), To review, related chats, search and suggestions without AI are computed in your browser, from your library. They send nothing to us or anyone else: they are numbers for you, not statistics of ours about you. The Activity summary image is made in the browser, contains only numbers (never titles or chat text), and is shared only if you decide to share it.
Search by meaning (off until you turn it on): when you turn it on, the browser downloads the program from jsDelivr and the model from Hugging Face, which see your IP address as with any download. Your chats never leave the browser; the index stays there and is erased when you turn the feature off.
2.5 Community
Only if you join the Community.
| Data | Who sees it | How long |
|---|---|---|
| Username, bio and picture | People who have a drawerly account | Until you leave the Community or delete your account |
| Your name | Only if you choose to show it | As above |
| Your posts | People who have an account | Until you delete them |
| The hearts you give | Everyone sees how many hearts a post has; only you know which ones you gave | Until you remove them |
| The people you follow | Everyone sees how many people you follow and how many follow you; only the person you follow knows you follow them | Until you unfollow |
| Saved posts and blocked people | Only you | Until you remove them |
| Reports you make or that concern you: who reports, who is reported, reason, note, copy of the post | Only the controller, to decide | 12 months after the report is closed, then deleted automatically |
The Community is not visible to people without an account. When someone saves one of your prompts, they keep a copy in their library, with your username: if you delete the post, that copy stays.
Legal basis: contract; for moderation and reports, the legitimate interest in keeping the Community safe and the obligations of the EU Digital Services Act.
2.6 Shared links
When you create a shared link, we store a copy of only the text you choose: title, messages with who is speaking, name of the AI, date. Anyone who has the link can read it, even without an account. The page is hidden from search engines. The copy stays until you revoke the link or it expires; when you revoke it, it is emptied at once.
2.7 Email and contact
Account emails are sent from noreply@drawerly.app through Resend. If you write to info@drawerly.app, the message reaches the controller’s mailbox through Cloudflare (forwarding) and Google (mail): we use it to answer you and keep it as long as needed to handle your request. We don’t send newsletters or promotional emails.
2.8 Chrome extension
The extension works on chatgpt.com and claude.ai, and on gemini.google.com only if you turn it on in Options (Chrome asks you for a separate permission). It reads the page of the open chat to show you your library and to save the chats you choose; automatic saving is off until you turn it on. What you save goes only to your drawerly library.
| Permission | What it is for |
|---|---|
| Storage | Keeping the extension’s preferences and your drawerly account session |
| Cookies | Reading only drawerly.app’s sign-in cookie, to know which account you’re signed in with |
| Scripting, offscreen document | Connecting to your library on drawerly.app |
| Side panel | drawerly’s side panel |
| Context menus, active tab | "Save page" and "Save selection" from the right-click menu: only when you choose it, it takes the address, title and any selected text of that page |
| Sites: chatgpt.com, claude.ai, drawerly.app; gemini.google.com optional | Working only on these sites |
The extension doesn’t read other sites (except the right-click menu, at your choice), doesn’t record your browsing history, doesn’t send data to third parties, and contains no ads or analytics. Its use of data complies with the Chrome Web Store "Limited Use" requirements: data serves only the features you see.
drawerly is not affiliated with OpenAI, Anthropic or Google.
2.10 Technical data
Like any website, the servers record IP address, browser, requested page and time, to work and to protect themselves from abuse (legitimate interest). These logs are kept by Vercel and Supabase for a short period set by their service, then deleted automatically.
2.11 Payments
drawerly does not sell paid plans today. When it does, payments will go through Polar, which will act as reseller (Merchant of Record): it will collect payment and billing data itself, as an independent controller, under its own privacy notice. We will receive only your email, plan and subscription status. We will update this policy before payments are switched on.
3. Who receives the data
We use providers that process data on our behalf, under a contract that binds them to do so only to provide the service (Art. 28 GDPR):
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, files | Frankfurt (EU). Supabase is based in the United States: its staff may access data from there only for support and security |
| Vercel | Website and server | Frankfurt (EU) for the server; global network to deliver pages |
| Resend | Account emails | United States |
| Anthropic | AI for the Pro plan | United States |
| Cloudflare | Domain and forwarding of emails sent to info@drawerly.app | Global network |
| Sign in with Google; the controller’s mailbox | Global network |
When data leaves the European Economic Area, the transfer relies on the standard contractual clauses approved by the European Commission or on the provider’s participation in the EU–US Data Privacy Framework, together with measures such as encryption.
We don’t sell or hand over data to anyone. We may have to disclose it to authorities only when the law requires it.
4. Security
Connections are always encrypted (HTTPS). Each account sees only its own data, with rules enforced by the database itself. Passwords are stored only as one-way hashes. Server keys never reach the browser. From your Profile you can see where you’re signed in and sign out of other devices.
5. Who handles your data
drawerly is a service run by Matteo Laporta, Via Carabelli 22, 20045 Lainate (MI), Italy, the data controller.
For any privacy question or to exercise your rights: info@drawerly.app.
6. Your rights
You have the right to access your data, correct it, delete it, restrict its processing, object to processing based on legitimate interest, and receive it in a readable format (portability). Much of it you can do yourself:
- Download everything: Settings › Backup, or the exports of chats and content.
- Correct: you can edit everything in the app.
- Delete: delete content, empty the Trash, or use Profile › Delete account, which immediately deletes your account, library, files, Community presence and shared links.
For anything else write to info@drawerly.app: we answer within one month. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of the country where you live or work.
7. Minimum age
drawerly is for people aged 16 or over. If we find that an account belongs to someone younger, we delete it.
8. Changes
If we change this policy, we update the version and date at the top and record the change in the list below. For important changes we notify you in the app and by email before they take effect.
Change log
- 1.0 · 31 October 2026: first version.
- 1.1 · 31 October 2026: the copy of the app and the last account, to open the library without a connection (section 2.9).