Your data.
Your rules.

DRAFTSTUDIO PRIVACY POLICY
Last Updated: March 29, 2026

This Privacy Policy describes how DraftPlatforms ("DraftStudio", "we", "us", or "our") collects, uses, and shares information about you when you use our services, including our website located at draftplatforms.com and all related tools and features (collectively, the "Service").

1. INFORMATION WE COLLECT
We collect information you provide directly to us, such as when you create an account, use our features, or contact us for support. This includes your name, email address, and profile picture obtained via Google OAuth authentication. We also collect usage data such as feature interactions, document generation activity, and session metadata to operate and improve the Service. We do not collect student data, personally identifiable information about minors, or any data from Google services beyond basic profile authentication.

2. GOOGLE USER DATA
DraftStudio uses Google OAuth solely for the purpose of authenticating users and creating accounts. The only Google user data we access is your name, email address, and profile picture as provided by your Google account. This data is used exclusively to identify you within the Service and to send service-related communications. We do not access, request, store, or process data from Google Drive, Gmail, Google Docs, Google Calendar, Google Contacts, or any other Google product or service. We do not use Google user data for advertising, analytics profiling, or to train any artificial intelligence or machine learning models. We do not sell, rent, or share your Google user data with any third parties except as required by law or as necessary to provide the Service (e.g., our authentication infrastructure via Supabase).

3. HOW WE USE YOUR INFORMATION
We use the information we collect to provide, maintain, and improve the Service; to authenticate your identity and manage your account; to respond to your comments and questions; to send you technical notices and support messages; and to comply with legal obligations. We do not use your information to build advertising profiles or to train AI models.

4. DATA STORAGE AND SECURITY
Your data is stored using industry-standard encryption at rest and in transit. We use Supabase as our backend infrastructure provider, which maintains SOC 2 Type II compliance. Prompts and generated documents are processed in isolated, ephemeral contexts and are not retained beyond the active session unless explicitly saved by you. We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

5. FERPA COMPLIANCE
DraftStudio is designed for use by educators, not students. Where DraftStudio is used in an educational institution context, it operates as a "School Official" with a legitimate educational interest as defined under the Family Educational Rights and Privacy Act (FERPA), 34 CFR § 99.31(a)(1). We do not knowingly collect, store, or process student education records. Educators are responsible for ensuring their use of DraftStudio complies with their institution's data governance policies.

6. COPPA COMPLIANCE
DraftStudio is intended for use by adults aged 18 and older. We do not knowingly collect personal information from children under the age of 13. If we learn that we have inadvertently collected personal information from a child under 13, we will delete that information as quickly as possible. If you believe we have collected information from a child under 13, please contact us immediately at hello@draftplatforms.com.

7. DATA SHARING AND DISCLOSURE
We do not sell your personal information. We may share your information with third-party service providers who assist us in operating the Service (such as authentication and cloud infrastructure providers), subject to confidentiality obligations. We may disclose your information if required by law, subpoena, or other legal process, or if we believe in good faith that disclosure is necessary to protect our rights or the safety of others.

8. DATA RETENTION
We retain your account information for as long as your account is active or as needed to provide you the Service. You may request deletion of your account and associated data at any time by contacting hello@draftplatforms.com. Upon request, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

9. YOUR RIGHTS
Depending on your location, you may have rights regarding your personal data, including the right to access, correct, or delete your personal information; the right to object to or restrict certain processing; and the right to data portability. To exercise any of these rights, contact us at hello@draftplatforms.com.

10. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated effective date. Your continued use of the Service after any changes constitutes your acceptance of the new policy.

11. CONTACT US
If you have any questions about this Privacy Policy or our data practices, please contact us at:
DraftPlatforms
hello@draftplatforms.com