ACCOUNT AND DATA DELETION POLICY

Last updated: April 10, 2026

Account Deletion and Personal Data Erasure

Redraw allows users to create an account through different authentication methods, including: i) direct registration on the platform by completing a registration form and creating their own login credentials, ii) sign in with a Google account, and iii) sign in with a Facebook account.

Regardless of the registration or authentication method used, the data subject may, at any time, request the deletion of their account and the personal data associated with it, subject to the procedures described in this section.

Collection and Purpose of Data

When registration is completed directly on the platform, Redraw may collect the personal data provided by the user in the registration form, including name, telephone number, email address, and any other information required to create the account. When access occurs through third party authentication providers, such as Google and Facebook, Redraw may collect the data made available by such providers, in accordance with the authorization granted by the user, including name, date of birth, and email address.

The personal data collected is used for legitimate purposes related to user identification, account creation and authentication, platform access management, communications related to the account and services used, as well as security, account integrity, and fraud prevention.

Deletion Procedure

The request for account deletion and erasure of the personal data associated with it may be made by any user, regardless of the login method used, through the following means:

Directly on the platform: through the path Profile > Personal Data > Delete my data
Official support channels: through Redraw’s official support channels, including chat, email, and WhatsApp

This procedure applies equally to accounts created through direct platform registration, Google, or Facebook.

Deadlines and Retention of Information

30 day period prior to permanent deletion: Once the request has been formally submitted, the account may be immediately deactivated or suspended. From that date, the account will remain in a 30 day deletion processing period, intended for the completion of the applicable technical and administrative procedures and, where applicable, for a valid reactivation request submitted by the user within such period.
‍
Permanent deletion: Once the 30 day period has elapsed without a valid reactivation request, the personal data linked to the account will be deleted from Redraw’s systems or anonymized, except where retention is expressly authorized or required under applicable law.
‍
Retention scenarios: Redraw may retain certain personal data after the deletion request exclusively where necessary for compliance with a legal or regulatory obligation, the regular exercise of rights in judicial, administrative, or arbitration proceedings, fraud prevention, and the security of the platform.

‍

Important Notes

Loss of content: The data subject acknowledges that account deletion may result in the permanent and irreversible loss of content, history, projects, files, credits, coins, and licenses linked to the account.
‍
Active subscriptions: If there is an active subscription linked to the account, prior cancellation of the applicable plan is recommended in order to avoid future charges. A request for account deletion does not, by itself, replace the financial and contractual procedures required to cancel active subscriptions.
‍
Reuse restrictions: After permanent deletion, the email address previously linked to the account may be subject to restrictions on reuse in new registrations or promotional plans, in accordance with Redraw’s internal security and account integrity criteria.

‍