This policy explains what Draftera collects and how we use it, whether you use Draftera for personal records or business documents. We keep it minimal: we collect what we need to run your workspace, and we do not sell your data.
1 What we collect
- Account data: your email address, and a sign-in code we send to it.
- Your content: the briefs, brand assets (logo, colors, company details), documents you generate, and files you upload to your data room.
- Usage data: an anonymous visitor identifier, page and CTA activity, referral or campaign source, device, language, timezone, and coarse country or region when available. We link that journey to your email only after you sign in. Landing analytics do not store raw IP addresses or precise GPS location. Shared-room access may record IP for security and audit purposes.
2 How we use it
- To operate your workspace: generate documents, render images, store your data room, and share links you create.
- To send you account email (sign-in codes, a welcome message, and important service notices).
- To keep the service reliable and prevent abuse.
3 AI processing
AI processing is optional and blocked until you give explicit permission. When you request an AI action, Draftera may send Anthropic (Claude) and OpenAI the prompt, brief, or question you enter and only the selected document text, pages, images, or business and financial details needed to produce the requested draft, answer, review, visual, or renewal-date result. We do not send your account email or profile identity to these providers. Your content is not used to train their models. They act as service providers under data-protection obligations and process the content only to provide the requested result. You can withdraw permission at any time in Security & privacy; the vault remains usable without AI.
4 Storage and security
Your data is stored in our cloud infrastructure (Supabase). Each workspace is isolated so your documents are visible only to you and the people you explicitly share a link with. Share links can be set to expire and can be revoked at any time.
5 Sharing
We do not sell your personal information or documents. We share data only with service providers needed to operate Draftera: Supabase for hosting and storage, our email-delivery provider for messages you request or service notices, and, only after your permission, Anthropic and OpenAI for the AI action you request. We require processors to protect data to the same or an equivalent standard and use it only to provide their service, or we disclose data when required by law.
6 Your choices
- You can delete any document or file from your data room at any time.
- You can permanently delete your account and associated private-workspace data from Team settings, or contact us for help.
- You can review or revoke third-party AI permission at any time in Security & privacy. Revoking it blocks all new AI transmissions.
7 Contact
Privacy questions or deletion requests: hello@draftera.ai.