Legal
Last updated: February 26th 2026
This document contains the imprint (as required for commercial websites in Germany under § 5 DDG), the Terms and Conditions, and the Privacy Policy for Draw Schema.
Imprint
Responsible for content (Provider):
Cem Ahmet Yilmaz
Speyerer Straße 60
67373 Dudenhofen
Deutschland
Contact:
Terms and Conditions
Last updated: February 26th 2026
1. Scope and acceptance
These Terms and Conditions (“Terms”) apply to the use of Draw Schema (“Service”), a web-based service at draw-schema.com that allows users to visually create and manage data models, including collaboration, customization, versioning, partial views, and optional AI-assisted features.
The operator of the Service is Cem Ahmet Yilmaz, Speyerer Straße 60, 67373 Dudenhofen, Deutschland (“Operator”). Contact: .
By creating an account or using the Service, you agree to these Terms. If you do not agree, you must not use the Service. The Service is available to users of any age; users under 16 require parental or guardian consent to use the Service. Use of the Service constitutes acceptance of these Terms.
2. Account and use
You must provide accurate information when registering. Authentication is passwordless: you sign in via GitHub or Google as identity providers, or by providing your email and using an expiring one-time password sent to that email. You are responsible for keeping access to your email account and any connected identity providers secure, and for all activity under your account. You may delete your account and associated data at any time through the Service; deletion is processed immediately. The Operator may retain invoice and payment-related data as required for legal and accounting purposes after account deletion.
The Operator reserves the right to suspend or terminate your account without prior notice if you breach these Terms or engage in abuse, illegal activity, or conduct that harms the Service or other users.
3. Acceptable use
You agree not to:
- Use the Service for any illegal purpose or to store or process illegal content.
- Abuse the Service (e.g. attempt to overload systems, circumvent security, or disrupt availability).
- Resell, sublicense, or commercially exploit access to the Service in a manner not permitted by your plan.
- Use the Service in any way that infringes third-party rights or violates applicable law.
The Operator may take any action it deems necessary, including account suspension or termination, in case of violation of this section.
4. Your content and intellectual property
You retain all ownership rights in the content you create using the Service (e.g. diagrams, data models, and related metadata) (“Your Content”). By using the Service, you grant the Operator a non-exclusive, royalty-free license to host, store, display, reproduce, and technically process Your Content solely to provide and operate the Service, and to evaluate and use Your Content (including in anonymized or aggregated form) to improve, develop, and operate the product and the Service. The Operator will not use Your Content for marketing or for purposes unrelated to operating and improving the Service.
You may export Your Content from the Service in various formats (e.g. code, SQL, images); additional export formats may be added over time.
5. AI-assisted features
AI- or LLM-based features are optional and only active when you choose to use them. Use of these features may involve sending data-model-related information to third-party providers (e.g. Google). No user-identifying or personal data beyond what is necessary for the feature is sent. By using AI features, you accept that such data may be processed by these providers in accordance with the Privacy Policy.
6. Fees, payment, and plans
Paid plans and pricing are described on the Service. Fees are charged via Stripe. For subscription plans (e.g. monthly or yearly), the price you pay is guaranteed until the end of your current billing period. The Operator may change prices or plan features for future billing periods; such changes will be communicated in advance. Continued use of a paid plan after the change takes effect constitutes acceptance of the new terms for the next billing period.
All fees are non-refundable. Refunds are not offered except where required by applicable law.
7. Limitation of liability
To the fullest extent permitted by applicable law, the Operator shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profit, data, or business opportunity, arising out of or in connection with the Service or these Terms. The Operator’s total liability for any claims arising from or related to the Service or these Terms shall not exceed the amount you paid to the Operator in the twelve (12) months preceding the event giving rise to the claim.
Nothing in these Terms excludes or limits the Operator’s liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other matter that cannot be excluded or limited under applicable law (including mandatory provisions of German law).
8. Disclaimer
The Service is provided “as is”. The Operator does not warrant that the Service will be uninterrupted, error-free, or secure. You use the Service at your own risk.
9. Governing law and jurisdiction
These Terms are governed by the laws of the Federal Republic of Germany, without regard to conflict of law principles. The Operator prefers to resolve disputes amicably before resorting to court proceedings. The place of jurisdiction for any disputes arising out of or in connection with these Terms shall be the courts of the Operator’s place of residence, unless a different mandatory jurisdiction applies.
10. Changes to the Terms
The Operator may update these Terms from time to time. Material changes will be communicated (e.g. by email or a notice in the Service) with reasonable notice. Your continued use of the Service after the effective date of the changes constitutes acceptance of the updated Terms. If you do not agree, you must stop using the Service and may delete your account.
11. Severability
If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.
12. Contact
For support and legal questions regarding the Service or these Terms, please contact: .
Privacy Policy
Last updated: February 26th 2026
1. Controller
The controller responsible for the processing of your personal data in connection with Draw Schema is:
Cem Ahmet Yilmaz
Speyerer Straße 60
67373 Dudenhofen
Deutschland
Email:
For any request regarding your personal data (access, correction, deletion, portability, restriction, or objection), you may use the in-app options where available, or contact the above email.
2. What data we collect and why
We process personal data only as necessary to provide the Service, process payments, and comply with legal obligations.
-
Account and profile: Email address, name (if provided), and authentication data. We do not store passwords; you sign in via GitHub or Google (OAuth) or by receiving an expiring one-time password by email. This data is used to create and manage your account, authenticate you, and communicate with you about the Service. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
-
Content you create: Diagrams, data models, and related metadata. Stored to provide the Service (e.g. versioning, collaboration). We may also use this content in anonymized or aggregated form to improve the product. Legal basis: performance of the contract; for product improvement, our legitimate interest (Art. 6(1)(f) GDPR).
-
Usage and technical data: Logs and technical information (e.g. IP address, browser type, timestamps) to operate, secure, and improve the Service. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
-
Payment data: For paid plans, we use Stripe. We do not store full card numbers. Stripe may receive your email, name, and payment details in accordance with their privacy policy. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
-
Invoice data: We retain invoice and payment-related data as required for tax and accounting purposes, including after account deletion. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
We do not knowingly collect data from children under 16 without parental or guardian consent. If you believe we have collected such data, please contact us and we will delete it without undue delay.
3. Cookies
We use only one cookie: a session cookie that is strictly necessary for authentication and authorization. It is scoped to the draw-schema.com domain and is required for the Service to function. No consent is required for this cookie under applicable law. We do not use tracking cookies, analytics cookies, or advertising cookies. If we introduce analytics or other cookies that require consent, we will obtain consent and update this policy.
4. Where data is stored and processed
-
Hosting: The Service and its database are hosted in the European Union (Ionos). Your data is stored on servers in the EU. Data is stored in an unencrypted form in the database; access is restricted and protected by authentication and authorization.
-
Backups: Daily backups of the database are performed for operational continuity. Backups are stored in the EU.
-
Payments: Stripe processes payments and may process data in the United States or other regions. Stripe’s privacy policy and data processing terms apply: .
-
AI features: When you use the optional AI-assisted features, data-model-related information (no user-identifying or personal data) is sent to Google (Gemini). The Google AI Studio / Gemini API may process data on Google’s global infrastructure, which can include locations outside the European Economic Area (EEA). Where data is transferred outside the EEA, Google may rely on standard contractual clauses or other mechanisms permitted under GDPR. We do not send user-specific or personal data to the AI provider.
Subprocessors: We use the following subprocessors to operate the Service. Each processes data only as necessary for the stated purpose and in accordance with applicable data processing agreements:
5. Data retention
-
Active accounts: We retain your data for as long as your account exists and you use the Service.
-
Account deletion: When you delete your account, we delete your personal data and content without undue delay. We may anonymize certain data (e.g. audit or change history) so that we can no longer identify you, in order to maintain system traceability and improve the product. Invoice and payment-related data will be retained as required by law.
6. Your rights
Under the GDPR you have the right to:
- Access your personal data and obtain a copy.
- Rectification of inaccurate data.
- Erasure (“right to be forgotten”), subject to legal retention requirements (e.g. invoices).
- Restriction of processing in certain cases.
- Data portability where processing is based on contract or consent and is carried out by automated means. The Service allows you to export your content in various formats (e.g. code, SQL, images), supporting this right; additional export formats may be added over time.
- Object to processing based on legitimate interests.
You can exercise these rights through the options provided in the Service (e.g. account and data settings) or by contacting . We will respond within a reasonable period, and in any event within one month where required by law.
You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your residence, place of work, or place of the alleged infringement. In Germany, you may contact the competent state data protection authority (e.g. Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit in your federal state).
7. Security
We implement appropriate technical and organizational measures to protect your data. Access to the database and systems is restricted. Session cookies are scoped to the draw-schema.com domain. We do not use third-party tracking or analytics on the website.
8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Material changes will be communicated (e.g. by email or a notice in the Service). The “Last updated” date at the top indicates the effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.