Effective August 31, 2026. This policy explains how Draveon collects, uses, protects and manages information across the Draveon website, platform, AIRA, analytics, integrations and related commercial services.
This Privacy Policy applies to draveon.tech, the Draveon OS platform, AIRA by Draveon, commercial intake forms, pilots, support interactions, authenticated workspaces and integrations that a customer or authorized user chooses to connect. Signed customer agreements, data processing agreements or order forms may provide additional terms.
We may collect information you submit directly, including name, work email, organization, telephone number, country or region, organization size, product or service interests, inquiry details, support requests and other information you choose to provide.
For authenticated users, Draveon may process account identifiers, organization and workspace membership, roles, permissions, activity records, workflow and operational data, approval history, audit events and integration status.
We may also process technical information used for security, reliability and analytics. This can include timestamps, authentication events, request logs, browser storage identifiers, page paths, campaign attribution, coarse device information, language, time zone and performance metrics.
We process information to provide and secure Draveon, authenticate users, manage access, deliver support, respond to inquiries, operate pilots, provide integrations, maintain auditability, detect misuse, improve reliability and measure website performance. Where consent is required for optional analytics or marketing technologies, Draveon requests that consent before activating the applicable tracking layer. Necessary authentication, security and service-continuity technologies operate because they are required to provide the requested service.
We do not sell personal information to advertisers. We do not use Google Workspace data for advertising. We do not use customer private workspace data to train unrelated public advertising profiles.
Draveon uses necessary cookies or similar storage for authentication, security, consent recording and service continuity. The public AIRA live chat may use local storage to preserve a conversation token.
First-party website analytics are consent-gated. When analytics consent is granted, Draveon may record page views, navigation and button interactions, form submission events without form values, campaign attribution, coarse device type, language, time zone and web performance metrics. The analytics layer is designed not to store form field contents, live-chat message contents, raw IP addresses or raw user-agent strings in the analytics database.
Visitors can change optional preferences through the Privacy Choices control. See the Cookie & Tracking Policy for additional detail.
When an authorized user connects Google Workspace or Gmail, Draveon uses Google OAuth and does not ask for or store the user's Gmail password. Depending on permissions approved by the user, Draveon may access basic identity information, read permitted Gmail data for authorized synchronization and send email on behalf of the connected user or approved mailbox.
Google data is used for authorized CRM communication history, mailbox synchronization, permitted record association, user-initiated email actions and approved support or notification workflows. Draveon's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including Limited Use requirements.
Draveon may use infrastructure, authentication, database, hosting, email, monitoring and integration providers, including Vercel, Supabase and Google Workspace. We may share information with providers acting on our behalf, with customer-authorized integrations, when required by law, to protect rights and security, or as part of a corporate transaction subject to appropriate safeguards.
Draveon uses administrative, technical and organizational safeguards designed to protect information, including authentication, tenant and workspace isolation, role-based access, row-level security, private storage, audit logging, approval controls and governed integration readiness. No internet service can guarantee absolute security.
We retain information for as long as reasonably necessary to provide the service, meet contractual obligations, maintain security and audit records, resolve disputes and comply with law. Retention varies by data category. Consent preferences are currently configured for up to 180 days unless changed earlier. Analytics retention is periodically reviewed and minimized where practical.
Draveon and its providers may process information outside the country where a user is located. Where applicable, contractual, technical or organizational safeguards are used to support lawful cross-border processing.
Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability or other handling of personal information. You may withdraw optional consent at any time through Privacy Choices. Certain records may need to be retained for legal, security or contractual reasons. Requests may be sent to support@draveon.tech.
Draveon is an enterprise and business service and is not directed to children. We do not knowingly offer the platform for independent use by children.
We may update this Privacy Policy as Draveon, applicable law or our service providers change. The effective date will be updated when material revisions are published.
For privacy, analytics, Google data, account or rights requests, contact support@draveon.tech.