Effective: 2026-01-01
Privacy Policy
We collect the minimum we need to operate the product. Substitute counsel-reviewed copy before public launch.
What we collect
- Account info — email, name, hashed password (Supabase Auth).
- Workspace data — clients, drafts, voice profiles, research, media.
- OAuth tokens for connected social platforms (encrypted at rest).
- Usage events — page views, button clicks (PostHog), errors (Sentry).
Who processes your data
- Supabase — DB, auth, storage
- Anthropic — text generation (prompts include voice profile data)
- OpenAI — transcription + embeddings
- Stripe — billing
- Resend — transactional email
- Inngest — background job orchestration
- Sentry, PostHog — observability
Your rights (GDPR)
You can export everything via Settings → Account → “Export your data”, and you can delete your account from the same screen. Deletion is permanent after a 30-day grace period.
Cookies
We use a session cookie for authentication and an active-workspace cookie to remember which workspace you last opened. No third-party tracking cookies.
Contact
Privacy questions: privacy@drafft.space.