Legal

Data Protection & Security

Version 1.0. This policy takes effect on the date shown on this page.

This page describes security measures for Drawvia, a software-as-a-service product operated by TamIT FZ-LLC, registration number 0000004100388, VUNE3320, Compass Building, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates. Contact: [email protected].

What the service does

Drawvia stores passwords as hashes, not as the password itself. The sign-in cookie cannot be read by page scripts. Changes that need a session are checked against a matching request token. Sign-in, registration, uploads, draws, and several other actions are rate limited. Customer data is stored in PostgreSQL, and rate limits use Redis.

A completed draw keeps its recorded result, winners, and verification fingerprint. Opening the draw again does not run a second draw. The public verification page confirms the recorded draw and does not list the participant population. Winner identifiers remain in the stored verification record.

What this page does not claim

Drawvia does not claim a security certification, a penetration-test report, a fairness audit, or an availability commitment. It does not claim that backups are purged when a customer asks for deletion. Retention and deletion limits are in the Data Retention & Deletion Policy.

Reporting a concern

Send a security or privacy concern to [email protected]. Include enough detail to investigate, and do not include passwords or full participant files in the first message if a shorter description will do.