Privacy Policy

Drafty is a single-purpose tool that turns rough writing into polished social-media posts. To do that we need your email and a display name (so you can sign in), and we send the text you paste to our LLM provider for processing. We do not sell your data, do not use it to train models, and do not run third-party advertising or analytics on the polish page.

• Account info — when you sign in with Google or email magic link, we receive and store your email address, an OAuth identifier, and (if Google provides it) your display name and avatar URL.
• Profile info — anything you set on the Settings page (display name, default platform, avatar). You control these.
• Usage metadata — timestamp and a hashed identifier (a hash of IP + user-agent, not your raw IP) per polish request, used only to enforce daily rate limits.
• Drafts you submit — the text you paste into the polish box is sent to our LLM provider for one-off processing. It is not stored on our servers. Your local draft history (if any) lives in your browser's localStorage and is only on your device.

• To run the polish feature (send your text to the LLM, return the result).
• To enforce daily limits (anonymous: 5/day, signed in: 10/day).
• To let you sign in and remember your settings across devices.
• To debug errors in aggregate. We do not look at your drafts as a matter of course.

• Supabase — hosts our user accounts, profiles, and avatar storage. Acts as a data processor on our behalf.
• Third-party AI/LLM provider — processes your draft text to produce the polished version. Your draft is sent to this provider per request and is subject to that provider's own privacy terms. We do not retain the request after the response returns, and your text is not used to train any models.
• Vercel — hosts the website and runs our API routes.
• Google — only when you choose to sign in with Google. We receive your email, name, and avatar URL from Google.
• Paddle — only when you subscribe to Pro. Paddle acts as our Merchant of Record and is the seller on your receipt. Paddle collects your name, billing address, country, and payment details (e.g. the last four digits of your card) directly at checkout — we do not see or store full card details. Paddle handles the charge, taxes, and any refund. Their handling of your data is governed by Paddle's privacy policy. We receive a confirmation that you are a paying subscriber and store only that fact (your plan) on your Drafty profile.

• We do not sell your data.
• We do not use your drafts to train models (and neither do we operate any model).
• We do not run advertising on Drafty.
• We do not run third-party analytics on the polish page.

• Edit your profile — Settings page lets you update your display name, default platform, and avatar.
• Delete your account — email [email protected] from the email on your Drafty account and we will delete your row plus any avatar within 7 days.
• Local history — if you have used the app signed-out or signed-in, drafts cached in your browser's localStorage can be cleared by clearing site data for drafty.ink in your browser settings.

We use a small number of first-party cookies and localStorage entries:

• Auth session cookies set by Supabase (so you stay signed in).
• drafty.history.v1 in localStorage — your last few drafts, on your device only.
• drafty.password_set in localStorage — a flag to suppress the "set a password" banner once you have done so.

We do not use third-party tracking cookies on the polish page.

Drafty is not intended for users under 13. If you are under 13, please do not create an account.

We will update the "Last updated" date when we change this policy. Material changes will be announced on the Drafty home page for at least 14 days.

Questions, deletion requests, or anything else: [email protected].