Privacy
Privacy Policy
This Privacy Policy describes personal information handled by Drawvia, a software-as-a-service product operated by TamIT FZ-LLC, a Free Zone Limited Liability Company registered with Ras Al Khaimah Economic Zone Authority (RAKEZ), United Arab Emirates.
- Legal operator
- TamIT FZ-LLC
- Registration number
- 0000004100388
- Registered address
- VUNE3320, Compass Building, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates
- Privacy contact
- [email protected]
- Terms version
- 1.0
- Privacy version
- 1.0
TamIT FZ-LLC decides why and how account and workspace information is used to run Drawvia. A customer that uploads participant information decides why that information is used for the customer's draw. Those roles can differ with the circumstances and the applicable data-protection law. This policy is not a statement that a particular statute has been certified.
Information the service handles
Drawvia handles account details, workspace details, files and identifiers the customer uploads, draw results, verification records, transactional email, security logs, and the cookies described in the Cookie Policy. The site does not add optional analytics or advertising trackers.
Account and workspace information
Registration stores a name, an email address, and a hash of the password. It does not store the password itself. Email verification, password reset, and workspace invitations are sent by email through Resend. Google receives the sign-in request only when a person chooses Google sign-in. A workspace may include an organization name and an optional two-letter country code.
Draw information
Depending on the file the customer uploads, draw information may include names, email addresses, employee numbers, weights, and other identifiers the customer chooses. Drawvia stores the file, a SHA-256 fingerprint of the file, eligible rows, validation errors, winners, and the verification record. Winner identifiers remain in the stored verification record. The public verification page does not list the participant population.
Payments
When a paid subscription is purchased, Paddle is the authorised reseller and merchant of record. Payment-card details entered in Paddle's checkout are handled under Paddle's terms and privacy notice. Drawvia does not require customers to enter payment-card numbers into Drawvia forms. Drawvia keeps the subscription status it needs to apply the plan.
Why information is used
Drawvia uses this information to provide the service, authenticate users, run and record draws, send transactional email, protect the service, and meet legal duties. The legal basis depends on the information and the applicable law. It may include a contract with the customer, a legal obligation, a legitimate interest in securing and accounting for draws, or consent where consent is required. This policy does not claim one basis for every category in every country.
Service providers
Customer data is stored in PostgreSQL. Rate limits use Redis. Transactional email is sent through Resend. Paddle, when a customer pays, processes the transaction, receipt, refund, and payment-related messages. Google receives a sign-in request only when Google sign-in is used. The hosting company provides the infrastructure for the application. Drawvia does not sell personal information.
Retention and deletion
Completed draws, winners, verification records, and audit evidence are kept for accountability and for legal obligations that require a record of the draw. Canceling a subscription, changing plan, or closing an account does not automatically delete those records. A history period named on a plan does not delete those records and does not, by itself, hide completed draws.
A customer may ask [email protected] to close an account or to address eligible personal information. Drawvia can disable sign-in and suspend a workspace. That restricts access. It is not an automatic erasure of every copy. There is no self-service deletion page, no automated purge, and no customer control that removes backup copies. Drawvia does not promise to keep every personal detail for ever, and it does not promise that a request will delete completed draw evidence. The Data Retention & Deletion Policy states the current limits.
Requests
Depending on applicable law, a person may ask for access, correction, deletion where the law provides it, a restriction, or an objection, or may withdraw consent where consent is the basis. Send the request to [email protected]. Where the information was uploaded by a customer, TamIT may need to coordinate with that customer. Drawvia may ask for enough information to confirm the requester's identity and authority. This section does not add a right that the applicable law does not provide.
Cookies
Drawvia uses cookies needed for the session, for request checks, and for the essential-cookie notice. Optional analytics and advertising cookies are not used. Details are in the Cookie Policy.
Children
Drawvia is for organizations and authorized users administering draws. It is not designed as a service directed at children. The customer must have the authority and safeguards required when participant information relates to minors.
International processing
The operator is established in the United Arab Emirates. Infrastructure and email providers may process information in other countries. This policy does not name a specific transfer mechanism or hosting city, because those operational details are not fixed in this version.
Changes
This Privacy Policy is version 1.0 and applies together with the Terms of Service version 1.0. It takes effect on the date shown on this page. If a later version requires acceptance, it is shown to you before it replaces this one. Accepting a later version does not change the record of an earlier acceptance.
Contact
TamIT FZ-LLC, registration number 0000004100388, VUNE3320, Compass Building, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. Privacy contact: [email protected].