Privacy Policy

Drawhisper Technology Limited
著墨語科技有限公司

Last Updated: December 2025

1. Introduction

Drawhisper Technology Limited ("Drawhisper," "Company," "we," "us," or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our website, applications, APIs, and any related services (collectively, the "Services").

Drawhisper Technology Limited is a company incorporated in Hong Kong under the Companies Ordinance (Chapter 622 of the Laws of Hong Kong), with company registration number 78290796, operating in the fields of software information technology services, artificial intelligence application software development, and internet sales.

By accessing or using our Services, you consent to the data practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you register for an account, make a purchase, contact us for support, or otherwise interact with our Services.

Account Information: When you create an account, we collect your email address, username, and password. You may also choose to provide additional profile information such as your name, profile picture, and preferences.

Payment Information: When you purchase credits, we collect payment-related information necessary to process your transaction. This may include your billing address and payment method details. Please note that payment card information is processed directly by our payment processor, Stripe, and is not stored on our servers.

Communications: When you contact us for support or feedback, we collect the content of your communications, including your email address and any other information you choose to provide.

User Content: We collect content that you create, upload, or generate using our Services, including text inputs, images, audio files, and AI-generated outputs.

Voice Cloning Data: If you use our voice cloning features powered by FishAudio, we collect voice samples and audio recordings you upload to create custom voice models, metadata associated with voice models including creation date and usage history, and consent documentation you provide regarding voice owner authorization.

2.2 Information Collected Automatically

When you access or use our Services, we automatically collect certain information about your device and usage patterns.

Device Information: We collect information about the device you use to access our Services, including device type, operating system, browser type, unique device identifiers, and IP address.

Usage Data: We collect information about your interactions with our Services, including pages visited, features used, time spent on pages, click patterns, and the dates and times of your visits.

Cookies and Similar Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your browsing activities. For more information, please see Section 7 (Cookies and Tracking Technologies).

Log Data: Our servers automatically record information when you access our Services, including your IP address, browser type, referring/exit pages, and timestamps.

2.3 Information from Third Parties

We may receive information about you from third-party sources, including authentication services if you choose to sign in using a third-party account, payment processors regarding your transactions, and analytics providers that help us understand how our Services are used.

3. How We Use Your Information

We use the information we collect for the following purposes.

Providing and Maintaining Services: We use your information to operate, maintain, and improve our Services, including processing your transactions, managing your account, and providing customer support.

Personalization: We use your information to personalize your experience, including remembering your preferences and customizing content and features to your interests.

Communication: We use your information to communicate with you about your account, transactions, and our Services, including sending service-related announcements, updates, and promotional communications (where permitted by law).

Analytics and Improvement: We use your information to analyze usage patterns, monitor the effectiveness of our Services, and develop new features and improvements.

Security and Fraud Prevention: We use your information to detect, prevent, and respond to fraud, abuse, security risks, and technical issues.

Legal Compliance: We use your information to comply with applicable laws, regulations, legal processes, and governmental requests.

AI Service Delivery: We use your inputs and prompts to generate AI-powered outputs through our integrated AI providers, including chat, text-to-speech, and image generation services.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances.

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including payment processing through Stripe, cloud hosting and infrastructure, analytics and monitoring, customer support tools, and email delivery services. These service providers are contractually obligated to use your information only as necessary to provide their services to us and to maintain appropriate security measures.

4.2 AI Service Providers

To deliver our AI-powered features, we share necessary data with our AI service providers, including DeepSeek, xAI, and OpenAI for chat services; FishAudio and MiniMax for text-to-speech services; and Replicate (Flux, Seedream), PixAI, and Google Gemini for image generation services. The data shared with these providers is limited to what is necessary to process your requests. Each provider is subject to their own privacy policies and data handling practices.

4.3 Voice Cloning Data Sharing

When you use our voice cloning features, your voice samples and audio data are transmitted to FishAudio for processing and voice model creation. FishAudio may store and process this data in accordance with their privacy policy and data retention practices. We recommend reviewing FishAudio's privacy policy to understand how your voice data is handled. By using voice cloning features, you consent to this data sharing and acknowledge that voice biometric data is considered sensitive personal information in many jurisdictions.

4.4 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities, such as court orders, subpoenas, or government investigations. We may also disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

4.5 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or uses of your personal information.

4.6 With Your Consent

We may share your information with third parties when you have given us your explicit consent to do so.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with our legal obligations.

Account Information: We retain your account information for as long as your account remains active. If you request account deletion, we will delete or anonymize your personal information within 30 days, except as required by law or for legitimate business purposes.

Transaction Records: We retain records of your purchases and credit transactions for a minimum of seven years to comply with accounting and tax requirements under Hong Kong law.

Usage Data: We retain aggregated and anonymized usage data indefinitely for analytics purposes. Identifiable usage data is typically retained for up to 24 months.

User Content: Content you create or generate using our Services is retained until you delete it or your account is terminated, unless we are required to retain it for legal purposes.

Voice Cloning Data: Voice samples and custom voice models are retained for as long as your account remains active and you choose to keep them. You may delete your cloned voice models at any time through your account settings. Upon account termination or deletion request, we will delete your voice models within 30 days. However, voice data that has been transmitted to FishAudio is subject to their retention policies.

Communications: We retain support communications and correspondence for up to three years to improve our Services and for quality assurance purposes.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

Encryption: We use industry-standard encryption protocols (TLS/SSL) to protect data in transit. Sensitive data at rest is encrypted using AES-256 encryption.

Access Controls: Access to personal information is restricted to authorized personnel who need the information to perform their job functions. All access is logged and monitored.

Infrastructure Security: Our Services are hosted on secure cloud infrastructure with multiple layers of security, including firewalls, intrusion detection systems, and regular security audits.

Payment Security: All payment transactions are processed through Stripe, which is PCI DSS compliant. We do not store complete payment card information on our servers.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

7. Cookies and Tracking Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. We use cookies and similar technologies to enhance your experience, analyze usage patterns, and deliver personalized content.

7.2 Types of Cookies We Use

Essential Cookies: These cookies are necessary for the operation of our Services. They enable core functionality such as security, account authentication, and remembering your preferences. You cannot opt out of these cookies.

Analytics Cookies: These cookies help us understand how visitors interact with our Services by collecting and reporting information anonymously. This data helps us improve our Services.

Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your language preferences and display settings.

Marketing Cookies: With your consent, we may use cookies to deliver relevant advertisements and measure the effectiveness of our marketing campaigns.

7.3 Managing Cookies

Most web browsers allow you to manage cookie preferences through their settings. You can set your browser to refuse cookies or alert you when cookies are being sent. However, disabling cookies may affect the functionality of our Services.

7.4 Do Not Track

Some browsers offer a "Do Not Track" (DNT) feature. Our Services do not currently respond to DNT signals, but we respect your privacy choices through other means as described in this Policy.

8. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights regarding your personal information.

8.1 Access and Portability

You have the right to request access to the personal information we hold about you. You may also request a copy of your data in a structured, commonly used, and machine-readable format.

8.2 Correction

You have the right to request correction of inaccurate or incomplete personal information we hold about you. You can update most account information directly through your account settings.

8.3 Deletion

You have the right to request deletion of your personal information, subject to certain exceptions. We may retain certain information as required by law or for legitimate business purposes.

8.4 Restriction and Objection

You have the right to request restriction of processing of your personal information in certain circumstances. You may also object to processing of your personal information for direct marketing purposes.

8.5 Voice Cloning Data Rights

If you have used our voice cloning features, you have additional rights regarding your voice data. You may request deletion of all cloned voice models associated with your account at any time, and we will process such requests within 30 days. You may request information about how your voice data has been processed and shared with third-party providers. If you are the subject of a voice clone created by another user, you may contact us to report unauthorized use of your voice, and we will investigate and take appropriate action including removal of the voice model if consent cannot be verified.

8.6 Withdrawal of Consent

Where we rely on your consent to process personal information, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

8.7 Exercising Your Rights

To exercise any of these rights, please contact us at support@drawhisper.com. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

9. International Data Transfers

Drawhisper Technology Limited is based in Hong Kong. If you access our Services from outside Hong Kong, your information may be transferred to, stored, and processed in Hong Kong or other countries where our service providers operate.

When we transfer personal information outside of your jurisdiction, we implement appropriate safeguards to ensure that your information receives an adequate level of protection, including contractual clauses with our service providers regarding data protection.

By using our Services, you consent to the transfer of your information to Hong Kong and other countries as described in this Policy.

10. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at support@drawhisper.com. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information.

11. Third-Party Links and Services

Our Services may contain links to third-party websites, services, or applications that are not operated by us. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party services you access through our Services.

We are not responsible for the privacy practices or content of third-party services, including our AI service providers. When you use features powered by third-party AI providers, your data may be subject to their respective privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on our website with a revised "Last Updated" date.

For significant changes that materially affect your rights or how we use your personal information, we will provide more prominent notice, such as email notification to registered users or a banner on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Services after any changes to this Privacy Policy constitutes your acceptance of the updated Policy.

13. Data Protection Officer

While Hong Kong does not require the appointment of a Data Protection Officer, we take data protection seriously. For any privacy-related inquiries or concerns, please contact our privacy team at support@drawhisper.com.

14. Compliance with Hong Kong Law

This Privacy Policy is designed to comply with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong. We adhere to the Data Protection Principles set out in the Ordinance, including collection limitation, data quality, purpose specification, use limitation, data security, openness, data access, and data correction.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: