Privacy Policy

Last updated July 2, 2026

A plain-language summary of how Draftwave handles your data. It's a placeholder ahead of public launch and is not legal advice.

1. Overview

This policy explains what data Draftwave collects, why, and the choices you have. We aim to collect as little as we need to run the Service well.

2. Data we collect

Account data: your name, email, and password hash. Content data: the sites, topics, keywords, and articles you create. Usage data: basic, privacy-friendly analytics about how the Service is used. Payment data: handled by Stripe — we store a customer reference and plan status, not your full card number.

3. How we use it

To provide and improve the Service — running the content pipeline, showing your review queue, publishing on your instruction, billing your plan, providing support, and keeping the Service secure. We do not sell your personal data.

4. AI processing

Generating content sends your prompts, topics, and drafts to the AI and search-data providers that power the pipeline, routed through our gateway. We don't use your private content to train our own models, and we choose providers with appropriate data-handling terms.

5. Payments

Payments are processed by Stripe. Your card details are entered directly with Stripe and are held by Stripe under its own security and privacy terms — Draftwave never receives or stores your full card number.

6. Data retention and deletion

We keep your data for as long as your account is active. You can delete individual content at any time, and you can request deletion of your account and associated personal data by emailing us — we'll delete it (subject to any records we must keep for legal or accounting reasons) and remove it from active systems.

7. Your rights (GDPR / CCPA)

Depending on where you live, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these — including a delete-on-request — email us and we'll respond within the timeframes the law requires. We don't sell personal information as defined by the CCPA.

8. Security

We use industry-standard measures to protect your data — encryption in transit, hashed credentials and API keys, and least-privilege access. No system is perfectly secure, but we work to keep the risk low and to notify you of any material breach affecting your data.

9. Cookies and analytics

We use essential cookies to keep you logged in and privacy-friendly analytics to understand aggregate usage. We avoid invasive cross-site tracking.

10. Changes and contact

We'll update this policy as the Service evolves and note the date at the top. Questions or requests? Email privacy@draftwave.com.