Privacy policy

Zaher Bin Mabrouk Masn Trading Est. (trading as Zaher Tech Solutions), CR 1277601, Sultanate of Oman, is the controller of the personal data processed in DrawAI, under the Personal Data Protection Law (Royal Decree 6/2022) and its Executive Regulation (Ministerial Decision 34/2024).

Our personal data protection officer can be reached at zaheertechsolutions@gmail.com.

Account details: name, work email, phone, company name and CR number, or engineering licence number for individual accounts.

Project data: the files you upload (drawings, Revit/IFC models, Robot results), the project details you enter (such as owner name and plot number), structural design inputs, and the results.

Activity records: sign-ins, uploads, designs and downloads, kept for security and audit.

Payment records: plan, amount, date and the gateway’s transaction reference. Card details are entered on the payment gateway and never reach us.

We do not collect sensitive personal data such as health or biometric data.

To provide the service you ask for under these terms: run reviews and designs, show them to your workspace, provide report verification, handle payments and contact you about your account.

To keep the service secure and to meet legal obligations, such as tax and audit records.

We do not sell your data, do not use your files for advertising, and do not use them to train artificial intelligence models.

Files are read and checked by DrawAI’s own software. Text recognition of scanned drawings and the AI text checks run on DrawAI’s own servers. The one exception is the AI consultant panel: only when you ask for it and tick your agreement each time, the text of that drawing set, design or concept is sent to the Claude API (Anthropic) under a confidentiality and zero-data-retention agreement, so it is not kept by Anthropic or used to train AI models. The drawing files themselves are not sent.

DrawAI currently runs with hosting and database providers whose servers may be located outside the Sultanate of Oman. Data is stored there only with your consent, given when you request access, and only with providers that protect it at a level at least equal to that required by Omani law.

We are preparing to move DrawAI to a server hosted inside the Sultanate of Oman. We will update this page when the move is complete.

Members of your workspace. A limited summary of a review report is visible to anyone who has its verification code (see the terms of use).

Service providers who process data on our behalf only to run the service: hosting, database, the payment gateway, and Anthropic for the consultant panel reviews you ask for. They may not use it for their own purposes.

DrawAI staff access data only to support you or keep the service secure. We disclose data to authorities only when the law requires it.

Connections are encrypted (HTTPS), passwords are stored as one-way hashes, files are stored outside the public web folder and served only to members of the owning workspace, and access is limited by role.

If a breach of personal data occurs, we record it, notify the Ministry of Transport, Communications and Information Technology within 72 hours of becoming aware of it, and notify you within the same period where it could cause you serious harm.

We keep project files and results while your account is active so you can return to earlier reviews, revisions and designs.

A workspace administrator can ask us to delete a review or design or to close the account. We delete the data within 30 days of the request, and it leaves our backups within a further 30 days. Records we must keep by law, such as payment and tax records, are kept for the period the law sets.

You can ask to access, correct, delete or receive a copy of your personal data, withdraw consent where processing relies on it, and object to processing.

Send requests to zaheertechsolutions@gmail.com or through your workspace administrator. We answer within 45 days. If you are not satisfied, you can complain to the Ministry of Transport, Communications and Information Technology.

We use only the cookies the service needs: one to keep you signed in and one to remember your language. We do not use advertising or tracking cookies.

We will publish any change on this page and update the date above. For material changes we will also notify you on the platform or by email.