Privacy, in plain English.

DraftGhost exists to help creators turn rough notes, transcripts, and voice memos into usable drafts. To do that, we have to handle account data, source material, and generated output. This page explains what we collect, why we collect it, and who helps us run the service.

We collect what the product needs

Account details, creator settings, source material, generated drafts, billing state, and basic usage logs.

We use vendors to run the workflow

Authentication, hosting, billing, storage, transcription, and model providers help us deliver DraftGhost.

We do not sell personal information

We use the information we collect to operate, secure, support, and improve the service.

What we collect

Account information, such as your email address, login method, and basic profile details tied to your DraftGhost account.
Creator profile settings, such as your niche, audience, tone, style notes, usual call to action, and phrases you want DraftGhost to avoid.
Source material you submit, including rough notes, transcripts, prompts, uploaded audio files, and any instructions you provide while generating content.
Generated output and workspace history, including saved content packs, generation status, and related metadata needed to show drafts and support regeneration.
Billing and subscription information, such as your plan, billing status, Stripe customer identifiers, and webhook events related to subscription changes.
Technical and security data, such as session state, request metadata, rate-limit events, and operational logs used to protect and maintain the service.

How we use that information

To create, save, and return content packs you request.
To transcribe uploaded audio and keep source material connected to the resulting draft.
To personalize output based on the creator settings you choose to save.
To authenticate you, keep your session active, and protect the app against abuse or unauthorized access.
To process subscriptions, open billing portals, send receipts, and enforce plan limits.
To troubleshoot product issues, monitor reliability, and improve the workflow over time.

Who we share data with

We share information with service providers only when that is needed to run DraftGhost. Today that includes providers for authentication and database hosting, billing, file storage, speech-to-text, hosting, and language-model generation.

In practice, that means providers such as Supabase, Stripe, your configured storage provider, Deepgram when transcription is enabled, and an OpenAI-compatible model provider when AI generation is enabled. We may also disclose information when required by law, to enforce our terms, or to protect users and the service.

Cookies, local storage, and session tools

DraftGhost uses cookies, browser storage, and similar session mechanisms to keep you signed in, remember your workspace state, and protect the app. Some of these tools come from DraftGhost directly and some come from the providers that support authentication, billing, and hosting.

How long we keep information

We keep account records, creator settings, saved drafts, transcripts, uploaded audio references, subscription records, and operational logs for as long as they are needed to run the product, meet legal or accounting obligations, resolve disputes, and protect the service.

If you ask us to delete your account, we will remove or de-identify information unless we need to keep part of it for legal, security, fraud-prevention, tax, or billing reasons. Backup copies may remain for a limited period while they expire in the normal course.

Your choices

You can edit creator settings and prompts inside the product at any time.
You can choose whether to use email login, Google login, or Meta-backed login when those providers are enabled.
You can manage paid subscriptions through the billing portal when billing is enabled for your account.
If you want to request account deletion or have a privacy question, email support@draftghost.io.

Security

We use a mix of technical, organizational, and provider-level safeguards to protect information, but no system can promise perfect security. You are responsible for safeguarding your own login credentials and for reviewing generated output before publication or use.

Children

DraftGhost is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy as DraftGhost changes. When we do, we will update the effective date at the top of the page. If a change materially affects how we handle your information, we will take reasonable steps to let users know.