Privacy Policy
This policy explains how Draftfold handles account data, workspace content, uploaded files, AI-generated artifacts, and Google Sign-In data.
Overview
Draftfold is a browser-based AI workspace for knowledge work. Users can create projects, upload or reference files, ask agents to draft and revise work, and generate documents, slides, spreadsheets, research notes, and related artifacts.
This Privacy Policy applies to Draftfold websites, applications, and related services that link to this policy.
Information We Collect
We collect the information needed to operate the workspace, keep accounts secure, and provide AI-assisted features.
- Account information, such as name, email address, profile image, authentication identifiers, organization membership, and sign-in provider details.
- Google Sign-In information, such as your Google account identifier, name, email address, and profile image when you choose to sign in with Google.
- Workspace content, such as prompts, chat messages, project names, uploaded files, generated files, edits, feedback, and metadata related to those items.
- Usage and diagnostic information, such as device and browser information, IP address, request logs, timestamps, feature usage, error logs, security events, and approximate location inferred from network data.
- Communications you send to us, including support requests, feedback, and other messages.
How We Use Information
- Authenticate users, maintain sessions, and protect accounts.
- Provide, operate, debug, secure, and improve Draftfold.
- Create, edit, store, retrieve, and organize workspace files and generated artifacts at your direction.
- Process prompts, uploaded content, and project context with AI model providers when needed to provide the requested workspace features.
- Send service, security, account, and support communications.
- Detect abuse, enforce our Terms of Service, and comply with legal obligations.
Google User Data
If you sign in with Google, Draftfold uses Google user data only to authenticate your account, maintain access to your Draftfold workspace, display account information, and support account security.
Draftfold does not request access to Google Drive, Gmail, Google Calendar, or other Google Workspace content through basic Google Sign-In. If Draftfold later offers optional integrations with additional Google services, those integrations will request separate consent and will be described in this policy.
Draftfold's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We do not sell Google user data. We do not use Google user data for advertising. We do not use Google user data to train Draftfold models.
Sharing
We share information only when needed to provide the service, comply with the law, protect users, or complete a transaction you request.
- Service providers, such as authentication, hosting, storage, database, security, analytics, support, and AI infrastructure providers.
- Organization administrators or collaborators, when your workspace is part of a shared team or organization.
- Legal, safety, and compliance recipients, when required by law or necessary to protect Draftfold, users, or the public.
- Successor entities, if Draftfold is involved in a merger, acquisition, financing, reorganization, or sale of assets.
Retention
We retain account information and workspace content for as long as needed to provide Draftfold, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and operate backups.
Some logs and backup copies may remain for a limited period after deletion. We may retain limited records where required for security, fraud prevention, accounting, or legal compliance.
Deletion
You can request deletion of your account or workspace data by contacting privacy@draftfold.com. We may need to verify your identity before completing a request.
If you signed in with Google, you can also manage or revoke Draftfold access from your Google Account permissions page. Revoking access may prevent you from signing in with Google, but it may not automatically delete data already stored in Draftfold.
Security
We use administrative, technical, and organizational safeguards designed to protect user data. No online service can guarantee absolute security, so you should use a strong account credential and keep your sign-in provider secure.
Children
Draftfold is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
Changes
We may update this Privacy Policy from time to time. When we make material changes, we will update the date above and take additional steps when required by law.
Contact
Questions about this Privacy Policy can be sent to privacy@draftfold.com.