Privacy Statement — privacy

·Legal Privacy Statement

·This Privacy Statement informs you about the type of personal data we collect from you, and we process them through our website (www.sketch.com), Sketch Platform (Mac app, Web app, and Sketch iOS app, as applicable) as these terms are defined and described in our Terms of Service.

·Personal information refers to any information that can be used to distinguish one individual from another. In the General Data Protection Regulation ("GDPR") personal data is defined as any information relating to an identified or identifiable natural person ('data subject').

·Who we are

·We are the Dutch company, Sketch B.V. ("we" or "us"), with a place of business at Flight Forum 40, Ground floor, 5657 DB Eindhoven, the Netherlands, with a chamber of commerce registration number 60360461 and VAT number NL8538.75.273.B01.

·We are the controller responsible for the processing of personal data through our website and Sketch Platform.

·What personal data do you collect from me?

·Depending on how you use our services, we may collect and process the following types of personal data.

·Information you provide us

·We collect information you provide when you: create a Sketch account use the Sketch Platform contact us fill-in any forms on our website

• ·show interest in receiving any other information from us
• ·take part in online discussions or forums interact with us on social media participate in research activities

·In particular, we will process and/or collect the following information:

• 1Contact & communication details (such as name, address, email, phone numbers, language spoken);
• 2Account details (such as email address, password, profile picture/avatar, name alias, username, license key if applicable);
• 3Payment information ( such as the full name of cc's owner, last four digits of credit card, credit card expiration date, type of credit card, bank entity issuing the credit card, and country of origin);
• 4Records of our discussions when you contact us for support
• 5Proof of student status (e.g. a student card that may include your date of birth)
• 6IP address to estimate your country in order to show relevant pricing. This process does not use cookies or store any personal data beyond the request itself

·We may collect other types of personal data if required under applicable law or if this is necessary for the purposes listed in this Privacy Statement.

·Information collected automatically

·We collect certain information automatically when, and depending on how, you use Sketch Platform.

·When you use our Web app, this information may include: your Internet protocol (IP) address country details about your browser device information (e.g. computer name) timestamps

·When you use our Mac app, this information may include: your Internet protocol (IP) address

• ·device information (computer name, model, GPU & CPU type, UDID which is your Mac Unique ID, macOS Version) timestamps license identifier

·When you use our Sketch iOS app, this information may include: your Internet protocol (IP) address device information (e.g. device name) timestamps

·Cookies & similar technologies

·We may store cookies on your device if necessary for the smooth operation of our website and web application, including for being able to log in.

·We may also use Analytics, Advertising and Functionality cookies, but only after you have provided your consent to any of these.

·Please refer to our Cookie Policy for more information.

·Information from other sources

·If you use Sketch Platform on behalf of, or in collaboration with, a Company that is a Sketch customer (e.g., your employer, a reseller, an agent, a sales representative or other), that company may provide us with information about you so that we can provision your account.

·On-device processing and third-party AI tools

·Background removal processes images locally on your Mac using Apple's on-device machine-learning frameworks. Images are not sent to Sketch or an external provider for background-removal processing.

·Sketch's Model Context Protocol (MCP) server runs locally on your Mac and is disabled by default. You choose whether to enable it and which compatible third-party AI tools to connect. You can disable the server in Sketch's settings. The server processes requests locally and returns results to the connected third-party AI tool. Those results may include document content, text, metadata, or images. Connected third-party AI tools can also modify documents and export content.

·Depending on the AI tool and your configuration, information from Sketch may be sent to your chosen third-party AI provider. That provider's privacy policy governs how it processes, retains, and may use this data, including for model training. You should review the tool's permissions and the provider's settings before connecting it to Sketch. Approval controls depend on the AI tool and its configuration. See our MCP Server documentation for detailed information.

·Using background removal or connected third-party AI tools does not change how Sketch stores and synchronizes your Workspace documents, or how we collect the account and technical information described in this Privacy Statement.

·Legal basis for processing

·When we process personal data, we rely on the following legal bases:

• ·Contractual obligation - We process personal data because this is necessary for the performance of the contract between you and us. For example, we cannot create an account for you, if you choose not to share your personal data with us.
• ·Legal obligation - There may be cases when we have a legal responsibility to process your personal data in order to comply with our legal obligations.
• ·Legitimate interest - Our legitimate interests are our commercial company interests (e.g. to improve our products and services), our interest to prevent fraud, and our interest to report possible criminal acts or threats to competent authorities. We rely on this reason only when reasonable, and when balanced against your human rights and freedoms.
• ·Consent - When you have given us explicit consent to process your personal data for a specific purpose.

·How we may use personal data

·The table below summarises the ways in which we may use your personal data.

·How we may share your personal data

·We may share your personal data on a need-to-know basis with the following categories of third parties:

• 1Our service providers; used in the provision of our products and services, e.g. Here you can find the list of our List of Subprocessors. IT and data hosting services Payment service providers Communication service providers
• 2Competent authorities or other third parties, if required by law or reasonably necessary, to protect the rights, property and safety of ourselves or others.

·We reserve the right to transfer personal data about you in the event that we sell or transfer all or a portion of our business or assets in accordance with applicable law. Should such a sale or transfer occur, we will use reasonable efforts to direct the transferee to use the data you have provided to us in a manner that is consistent with this Privacy Statement. Following such a sale or transfer, you may contact the entity to which we transferred your data with any inquiries concerning the processing of that data.

·We use a third-party service to infer your country from your IP address in order to display appropriate currency options during checkout. This location data is not stored and is used solely to enhance your purchasing experience.

·We do not sell, rent or trade your personal data.

·How long do we retain personal data?

·We retain personal data for as long as necessary to fulfil the purposes for which we collect or receive the personal data, except if required otherwise by applicable law.

·For most users, this means we retain data for the duration of your use of the Sketch Platform and website. Once your account is deactivated or your contract is terminated, we apply purpose-specific retention rules:

• ·Personal data processed solely on the basis of your consent for marketing activities is deleted 24 months after your last interaction or complete inactivity, unless you withdraw consent earlier;
• ·One-stop shop (OSS) data is retained for 10 years in accordance with applicable EU VAT regulations. Personal data necessary for compliance with Dutch fiscal obligations (e.g., invoices, payment records) is retained for 7 years after the end of the fiscal year in which your contract ended;
• ·Personal data relevant for the establishment, exercise, or defense of legal claims related to our contractual relationship may be retained for up to 10 (ten) years after contract termination, in line with applicable limitation periods under Dutch civil law.

·Data transfers outside the EEA

·We may transfer the personal data we obtain to third parties in countries outside the European Economic Area (EEA). In particular, personal data may be transferred to the United States. When we transfer your personal data outside the EEA, we will protect your personal data as described in this Privacy Statement and in accordance with applicable law, such as by entering into the European Commission's Standard Contractual Clauses for the transfer of personal data to a processor located outside of the EEA.

·How we protect personal data

·We maintain appropriate technical and organizational security safeguards designed to protect your personal data against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use.

·We will notify you of any data breach that is likely to have unfavourable consequences for your privacy in accordance with applicable law.

·Your Rights

·In relation to your personal data, you have the right to:

• 1Be informed on how your data are being processed.
• 2Access your personal data, including confirmation whether we are processing your personal information and obtaining a copy of your personal information.
• 3Request a correction of your personal data if inaccurate.
• 4Request a deletion of your personal data.
• 5Request Restriction of or Object to our processing of your personal information
• 6Request us to provide you with your data in a structured, commonly used and machine-readable format which can be transmitted to another controller.

·To exercise these rights, please get in touch with us using our contact details set out below. We may request to prove your identity and/or your age. We will respond to your request within the applicable statutory term.

·Updates to this Privacy Statement

·We may update this Privacy Statement from time to time. Any change we make to our Privacy Statement in the future will be posted on this page and, if such change is material, will be also notified to you via email. Please check back frequently for any updates or changes to our Privacy Statement. All changes shall be effective from the date of publication, unless otherwise provided in the notification.

·It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

·How to Contact Us

·If you have any comments or inquiries about the information in this Privacy Statement, if you would like us to update your personal data, or to exercise your rights, please contact us by email at privacy@sketch.com

·In addition, you always have the right to make a complaint at any time to a competent supervisory authority.