This policy explains what Draftera collects and how we use it, whether you use Draftera for personal records or business documents. We keep it minimal: we collect what we need to run your workspace, and we do not sell your data.
1 What we collect
- Account data: your email address, and a sign-in code we send to it.
- Your content: the briefs, brand assets (logo, colors, company details), documents you generate, and files you upload to your data room.
- Usage data: an anonymous visitor identifier, page and CTA activity, referral or campaign source, device, language, timezone, and coarse country or region when available. We link that journey to your email only after you sign in. Landing analytics do not store raw IP addresses or precise GPS location. Shared-room access may record IP for security and audit purposes.
- Subscription data: your plan, subscription status, renewal or expiration date, store source, and limited transaction identifiers from Apple or Stripe. Draftera does not receive your full payment-card number from Apple or Stripe.
2 How we use it
- To operate your workspace: generate documents, render images, store your data room, and share links you create.
- To send you account email (sign-in codes, a welcome message, and important service notices).
- To keep the service reliable and prevent abuse.
- To verify purchases, provide Draftera Pro on eligible devices and the web, restore access, manage billing support, and prevent subscription fraud.
3 AI processing
AI processing is optional and blocked until you give explicit permission. When you request an AI action, Draftera may send Anthropic (Claude) and OpenAI the prompt, brief, or question you enter and only the selected document text, pages, images, or business and financial details needed to produce the requested draft, answer, review, visual, or renewal-date result. We do not send your account email or profile identity to these providers. Your content is not used to train their models. They act as service providers under data-protection obligations and process the content only to provide the requested result. You can withdraw permission at any time in Security & privacy; the vault remains usable without AI.
4 Storage and security
Your data is stored in our cloud infrastructure (Supabase). Each workspace is isolated so your documents are visible only to you and the people you explicitly share a link with. Share links can be set to expire and can be revoked at any time.
5 Sharing
We do not sell your personal information or documents. We share data only with service providers needed to operate Draftera: Supabase for hosting and storage, our email-delivery provider, Apple and Stripe for purchases and subscription management, and, only after your permission, Anthropic and OpenAI for the AI action you request. Apple and Stripe process payment details under their own privacy policies; Draftera receives only the limited subscription and transaction information needed to provide access and support. We require processors to protect data and use it only to provide their service, or we disclose data when required by law.
6 Your choices
- You can delete any document or file from your data room at any time.
- You can permanently delete your account and associated private-workspace data from Team settings, or contact us for help.
- You can review or revoke third-party AI permission at any time in Security & privacy. Revoking it blocks all new AI transmissions.
- When you delete your account, active workspace content is removed and backup copies are scheduled to expire within 30 days, unless a longer period is required for security or by law. Security logs are generally retained for up to 90 days. Subscription and transaction records may be retained for up to seven years where required for tax, accounting, fraud prevention, or legal obligations.
7 Contact
Privacy questions or deletion requests: hello@draftera.ai.