Privacy Policy

Data controller

The data controller is Ramiro Montiel (Argentina). For privacy requests, use the contact email at the bottom of this page.

Information we collect

Account data: when you sign in with Google, we receive your user identifier, email address, and basic profile information.

Gmail connection: if you connect Gmail with OAuth, we store refresh tokens needed to create draft emails on your behalf. We do not read your inbox or send messages without your action in Gmail.

Campaign data: company searches, your personal description, CV file and metadata, generated email content, and related campaign history.

Payment data: credit purchases are completed on Gumroad. We receive sale references, purchase amounts, and your email when needed to match the payment to your account.

Usage data: we may collect analytics events to improve the service.

How we use information

We use your data to authenticate you, run company searches, generate personalized email drafts with AI from your description, save them as Gmail drafts for your review, manage your credit balance, process payments, secure the service, and improve the product. We do not sell your personal data.

Google user data

Draftly accesses Google user data through Google Sign-In and, if you choose, the Gmail API. This includes your account identifier, email address, name, profile picture, Gmail address, OAuth tokens needed to create drafts, and draft content you generate in the app.

Sharing, transfer, and disclosure: we do not sell Google user data. We only share it with Supabase, Google, and Vercel as needed to operate the service.

Draftly's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Service providers

We use trusted providers including Supabase, Google, Gumroad, and PostHog. They may only use your data as needed to deliver their services to us.

International transfers

Your data may be processed in countries other than Argentina where our providers operate. We take reasonable steps to protect your information.

Retention

We keep your data while your account is active and as needed to provide the service, comply with law, or resolve disputes. You may request deletion by contacting us.

Your rights

Depending on applicable law, you may request access, correction, or deletion of your personal data. We will respond within a reasonable time.

Security

We use industry-standard measures to protect your data, but no online service is completely secure.

Children

Draftly is not intended for users under 18. We do not knowingly collect data from children.

Changes

We may update this policy as the beta evolves. The last updated date below will change when we do. Continued use after updates means you accept the revised policy.