DraftRank
Legal

Privacy Policy

Your privacy matters. This policy describes what we collect, how we use it, and the choices and rights you have.

Last updated: July 1, 2026


01Overview

This Privacy Policy explains how DraftRank (“DraftRank,” “we,” “us,” or “our”) collects, uses, and protects your information when you use our website and services (the “Service”). It applies alongside our Terms of Service.

In short: we collect what we need to run DraftRank, we do not sell your personal information, and we use trusted providers to process it. The sections below give the detail.

02Information We Collect

We collect the following categories of information:

  • Account information. When you sign in with Google or a magic link, we receive your name, email address, and a profile identifier.
  • Content you provide. Website URLs, keywords, instructions, and the blog drafts and suggestions generated for you.
  • Billing information. When you subscribe, Stripe processes your payment. We store limited billing metadata (such as plan and status) but never your full card number.
  • Usage and device data. Log data such as IP address, browser type, pages viewed, and actions taken, used to operate and secure the Service.
  • Cookies. Essential cookies to keep you signed in and to remember preferences.

03How We Use Your Information

We use your information to:

  • provide, maintain, and improve the Service, including generating and analyzing content;
  • authenticate you and secure your account;
  • process subscriptions and send billing-related messages;
  • send transactional and notification emails, such as when a draft is ready or new ideas are generated;
  • monitor for abuse, debug issues, and comply with legal obligations.

04AI Processing of Your Content

To generate and analyze content, we send your inputs (such as website content, keywords, and instructions) to third-party AI model providers acting on our behalf. We rely on providers whose terms state that data sent through their business APIs is not used to train their public models.

Please avoid submitting sensitive personal information in your prompts, as generated output is stored in your account and processed by these providers.

05How We Share Information

We do not sell your personal information. We share it only with service providers (subprocessors) who help us operate the Service, and only as needed for the purposes below:

ProviderPurposeData shared
GoogleSign-in (OAuth) authenticationName, email, profile ID
StripeSubscription payments and billingBilling details, payment metadata
EmailitTransactional and notification emailsEmail address, message content
AI model providersGenerating and analyzing contentPrompts, website content, generated drafts
Cloud hosting & databaseRunning the Service and storing dataAccount and content data

We may also disclose information to comply with the law, enforce our agreements, protect rights and safety, or as part of a merger, acquisition, or sale of assets, in which case we will notify you of any change in ownership or use of your personal information.

06Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete content or close your account, we delete or anonymize the associated personal information within a reasonable period, except where we must retain it to meet legal, tax, or security obligations.

07Data Security

We use technical and organizational measures such as encryption in transit, access controls, and trusted infrastructure providers to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

08Your Privacy Rights

Depending on where you live (for example, under the GDPR or CCPA), you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. We do not sell personal information or use it for cross-context behavioral advertising.

To exercise any of these rights, email us at [email protected]. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights.

09International Data Transfers

We and our providers may process your information in countries other than your own. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect information transferred across borders.

10Children’s Privacy

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

11Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify you through the Service or by email.

12Contact Us

If you have questions or requests regarding this Privacy Policy or your data, contact us at [email protected].

Questions?

Email us at [email protected] and we will get back to you.

Terms of Service

Read the companion document.