Privacy Policy
Last updated 9 October 2026
This policy explains what personal data Sibalin Bence Gábor e.v., Göndör sor 11/A, 6727 Szeged, Hungary ("Wiregraf", "we", "us") collects when you use the website at wiregraf.net and the application at wiregraf.app, why we collect it, who we share it with, and the choices you have. We are the data controller for the data described here, except where noted. Questions go to hello@wiregraf.net.
1. What we collect
Account data
When you sign up with an email address we store it and a hashed password (we never see the password itself). You may add a display name and an avatar image. We record when the account was created and when you last signed in.
Account activity and sign-ins
The Service keeps a log of account activity and sign-ins for 90 days to operate and support it. Activity entries contain action types, timestamps, account and resource identifiers, and limited operational details, not the contents of drawings or credentials. Sign-in records contain observed session timestamps, IP addresses and browser information where available; they are not a complete history of sign-ins or authentication attempts. These records do not track page views or clicks.
Support requests
When you write to support, from the application or by email to support@wiregraf.net, we keep the request as a ticket: its subject and every message in it, yours and ours, and the files you attach. A request from the application also records, unless you untick "Where you are", the workspace, project and drawing you were in, the drawing's saved version, the kind of page (never a share link's address), the application's version and your browser. If you tick "The drawing as it is on my screen", we keep a copy of that drawing as it was, unsaved changes included. For a request by email we keep the original message as it arrived, and we may connect it to your account once we have checked it is yours. Support email is answered from our support mailbox, which keeps its own copies of the messages.
Signing in with Google
If you choose "Sign in with Google", Google shares your name, email address and profile
picture with us, and nothing else: we ask only for the basic openid,
email and profile permissions, and never for access to your Gmail,
Drive, Calendar, contacts or any other Google data. We use this information only to create
and sign in to your Wiregraf account and to show your name and picture to you and to the
members of your workspaces. We store it with your account, do not share it with anyone except
the providers in section 3 that run the Service, and do not use it for advertising. We never
receive your Google password. You can revoke Wiregraf's access at any time from your
Google account settings.
Wiregraf's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Content you create
Everything you put into the application is stored so we can show it back to you and to the people you share it with: workspaces, projects, drawings, device templates, signal and connector types, rack layouts, project title-block details such as client or site names, uploaded images and PDF documents, and the wire lists, device lists and PDF drawing sets you export. This content may incidentally contain personal data about other people, for example a client contact or an engineer's name in a title block; you are the controller of that data and we process it on your behalf.
Billing data
Paid plans are sold through Paddle.com, our merchant of record. Paddle collects your name, email, billing address, tax identifier if you give one, and your payment details, and processes them under Paddle's privacy policy. We never receive card numbers. Paddle sends us a customer reference, the subscription's plan, status and renewal date, and your billing country, which we store against the workspace.
Technical data
Our hosting providers keep standard server logs for security and debugging: IP address, browser type, the pages and API endpoints requested, timestamps and error details. We do not use analytics services, advertising networks or tracking pixels, on the website or in the application.
Data stored in your browser
The application keeps your session in a cookie so you stay signed in, and uses browser local storage for preferences such as the colour theme, sidebar state and recently used templates. None of this is used to track you across other sites.
2. Why we use it and on what basis
| Purpose | Data | Legal basis |
|---|---|---|
| Providing the Service: signing you in, storing and showing your work, sharing, exports | Account data, content | Performance of our contract with you |
| Billing, invoices, tax compliance | Billing data | Contract; legal obligation |
| Transactional email: verification, password reset, billing notices | Email address | Contract |
| Security, abuse prevention, debugging and keeping the Service running | Technical data, account activity and sign-ins | Legitimate interests |
| Answering support requests | Your support request (its messages, files and the context you send), account activity and sign-ins | Legitimate interests; contract |
Wiregraf's own people may view your content to answer a request from you or to check that the Service works.
We do not sell personal data, and we do not use your content to train machine-learning models or for advertising.
3. Who processes it for us
We run on a small number of infrastructure providers, each bound by a data-processing agreement:
| Provider | What they do |
|---|---|
| Neon | Hosts the Postgres database that holds account data and content, and provides authentication (sign-in, including the Sign in with Google exchange, password reset and verification emails). |
| Cloudflare | Serves the website and application, runs our backend functions, stores uploaded files and generated PDFs, renders PDF exports in a headless browser, and receives and sends support email. |
| Google Workspace | Hosts our support mailbox: the support email you send us and our answers. |
| GitHub | Hosts our source code and its issue tracker. When a support request shows a bug we may open an issue, which carries internal identifiers and our own description, never your messages, files or drawings. |
| Paddle | Merchant of record: checkout, payment processing, invoicing, tax, refunds and payment-failure emails. |
We will update this table if a provider is added or replaced. Beyond these processors, we disclose personal data only if the law requires it or to protect the rights and safety of users or the public.
4. What other people can see
- Workspace members see your name, email and avatar, and everything in the workspace's projects.
- Share links. Anyone who has a share link you created can view the drawing or project it points to, and the project documents it includes, without signing in, until the link is deleted or expires. Drawing sets exported with a QR code contain such a link.
- Community catalog. Device templates, signal types and connector types you publish are visible to every Wiregraf user and cannot be withdrawn. Publish only reference data, never personal data.
5. Where data is stored and international transfers
Our database is hosted by Neon in a single region, and files are stored in Cloudflare's object storage. Cloudflare serves the application from its global network, so requests may be handled in the country closest to you. Where personal data leaves the European Economic Area or the United Kingdom, the transfer is covered by the providers' standard contractual clauses or an equivalent lawful mechanism.
6. How long we keep it
- Account data and content are kept for as long as your account exists. When you delete a workspace or project, it is scheduled for permanent deletion with its drawings and files. Deleting a drawing removes it from the working project at once; copies of it kept in the project's saved revisions stay with those revisions. Deleting a revision removes it from the database; the PDF files exported from it are deleted when the project is permanently deleted.
- Draft PDF exports rendered from unsaved revisions are deleted automatically after 7 days; exports attached to a saved revision are kept with it.
- Account deletion. Email hello@wiregraf.net to request deletion. Workspaces you own that have other members must first be transferred to another member, or deleted with your consent. Paid subscriptions billed to you must be cancelled and return to Free before your account is deleted, even if ownership was transferred. While deletion is in progress, paid workspaces cannot be transferred until cancellation. When deletion starts, we block access immediately. Once our sign-in provider's deletion is confirmed in our database, the same deletion operation removes your personal database records and schedules your avatar and support files for deletion. If the provider or deletion operation fails, we resume it; we cannot guarantee a completion deadline while those steps remain unresolved. The file-deletion queue is processed every 15 minutes and failed runs are retried. A backlog or a large job can take several runs, so this is not a guarantee that files disappear within 15 minutes. Workspaces you alone own go to the seven-day trash and the permanent deletion process described above. Content in surviving workspaces and community catalog items you published remains, with your opaque member id displayed as “Former member” where no name remains. Deletion from the support mailbox is a separate manual step.
- Billing records are retained by Paddle and by us for as long as tax and accounting law requires, typically 7 years.
- Account activity and sign-in records are kept for 90 days. IP addresses in sign-in records are cleared after 30 days.
- Support requests made from the application, and email requests we have connected to your account, are kept while your account exists and deleted with it. Account deletion also includes email requests whose sender address exactly matches your account email, ignoring letter case, if they have never been attached to another account. Other email requests connected to no account are deleted two years after they are resolved; email we held back and never added to a request is deleted after 90 days. The copies in our support mailbox are deleted when you ask us to delete your account.
- Server logs are kept for up to 30 days.
7. Your rights
Depending on where you live, and in particular under the GDPR and UK GDPR, you have the right to access the personal data we hold about you, to correct it, to have it deleted, to receive it in a portable format, to restrict or object to certain processing, and to lodge a complaint with your data-protection authority. Our lead authority is Hungary's Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH). Most of this you can do yourself: your profile and content are editable in the application, and exports are available at any time. For anything else, email hello@wiregraf.net; we answer within 30 days. For billing data you can also contact Paddle directly.
8. Security
All traffic is encrypted in transit. Passwords are stored hashed. Access to data is enforced inside the database with row-level rules, so every request is checked against your workspace membership. Uploaded files are stored in private storage and served only after the same check. No system is perfectly secure; if we learn of a breach affecting your data we will tell you and the relevant authorities as the law requires.
9. Children
The Service is for professional use and is not directed at children. We do not knowingly collect data from anyone under 16; if you believe we have, contact us and we will delete it.
10. Changes
We may update this policy. Material changes will be announced by email or in the application before they take effect. The date at the top of this page shows the current version.
11. Contact
Sibalin Bence Gábor e.v.
Göndör sor 11/A, 6727 Szeged, Hungary
Sole trader registration number: 56462980
Tax number: 57802891-1-26
hello@wiregraf.net