Draftless ("we", "our", or "us") operates the Draftless platform — an AI-powered creative suite for generating images, videos, audio, and more. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services.

By using Draftless, you agree to the collection and use of information in accordance with this policy.

We collect the following types of information:

• Account Information — Your name, email address, and profile details provided during registration.
• Usage Data — How you interact with our platform, including features used, session duration, and navigation patterns.
• Content You Create — Prompts, generated media (images, videos, audio), workflows, and brand kit configurations.
• Payment Information — Billing details processed securely through Stripe. We do not store your full credit card number. Purchases in our Android app are processed by Google Play Billing: Google receives your payment details, and we receive only a purchase token and order ID.
• Device & Technical Data — Browser type, operating system, IP address, and device identifiers.

We use the information we collect to:

• Provide, maintain, and improve the Draftless platform and its features.
• Process your transactions and manage your account, including credit balances and subscriptions.
• Improve our AI models and generation quality based on aggregated, anonymized usage patterns.
• Communicate with you about updates, new features, and important service changes.
• Detect and prevent fraud, abuse, and security threats.
• Comply with legal obligations.

Your data is stored on secure, encrypted servers. We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL) and at rest.
• Regular security audits and monitoring.
• Access controls limiting data access to authorized personnel only.

We retain your data for as long as your account is active or as needed to provide our services. You may request deletion of your data at any time (see Your Rights below).

We do not sell your personal information. We may share data with:

• Payment Processors — Stripe, for processing payments securely; Google Play Billing, for purchases in our Android app (Google receives your payment details; we receive a purchase token and order ID).
• Error Monitoring — Sentry, for error reports and, for a sample of sessions (and sessions where an error occurs), session replays, so we can find and fix bugs.
• Voice Cloning — ElevenLabs, which receives voice samples you upload to create a cloned voice.
• Cloud Infrastructure Providers — For hosting and delivering our services.
• AI Model Providers — We do not use your prompts, uploads or outputs to train or tune models unless you turn on 'Allow my content to be used for training' (off by default). AI providers receive your content only to fulfil your request. Where a provider offers a no-retention or no-training control we enable it. Some models are offered by providers whose terms allow them to retain or learn from inputs; these are labelled in the app and, if you have not allowed training, run only after you confirm.
• Legal Authorities — When required by law, regulation, or legal process.

The current list is published in our Sub-processors document.

You have the right to:

• Access your personal data and request a copy.
• Correct inaccurate or incomplete information.
• Delete your account and associated data.
• Export your data in a portable format.
• Opt out of marketing communications at any time.

If you are in the EU or EEA, these rights arise from the GDPR and include the right to lodge a complaint with your supervisory authority. To exercise any of these rights, contact us at the email provided below. You can also request deletion of your account and data at draftless.dev/account-deletion.

We use essential cookies for:

• Authentication — Keeping you signed in and maintaining your session.
• Preferences — Remembering your settings such as theme, language and currency.

We may also use analytics tools to understand how users interact with our platform. Full detail, including how to withdraw consent, is in our Cookie Policy.

Draftless is not intended for users under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email or through a prominent notice on our platform. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or your personal data, please contact us at:

Email: privacy@draftless.dev