Privacy Policy

01Overview

This Privacy Policy explains how DraftRank (“DraftRank,” “we,” “us,” or “our”) collects, uses, and protects your information when you use our website and services (the “Service”). It applies alongside our Terms of Service.

In short: we collect what we need to run DraftRank, we do not sell your personal information, and we use trusted providers to process it. The sections below give the detail.

02Information We Collect

We collect the following categories of information:

• Account information. When you sign in with Google or a magic link, we receive your name, email address, and a profile identifier.
• Content you provide. Website URLs, keywords, instructions, and the blog drafts and suggestions generated for you.
• Billing information. When you subscribe, Creem (our Merchant of Record) processes your payment. We store limited billing metadata (such as plan and status) but never your full card number.
• Analytics data from accounts you connect. If you choose to connect Google Search Console, Google Analytics, or Microsoft Clarity, we read aggregated performance data for the specific properties you select. See Connected Analytics Accounts below.
• Usage and device data. Log data such as IP address, browser type, pages viewed, and actions taken, used to operate and secure the Service.
• How you use DraftRank itself. With your consent, we record how our own pages are used — clicks, scrolls, and the pages you visit — via Google Analytics and Microsoft Clarity, so we can find what is confusing or broken. Clarity replays these as anonymised session recordings and heatmaps; it masks text input and sensitive content by default, and we never use it to read what you type. This is separate from the analytics accounts you connect below.
• Cookies. Essential cookies to keep you signed in and to remember preferences, plus analytics cookies (Google’s _ga, Clarity’s _clck and _clsk) that are set only after you accept them in the cookie banner. Declining, or changing your mind later, stops them being written and clears the Clarity ones.

03How We Use Your Information

We use your information to:

• provide, maintain, and improve the Service, including generating and analyzing content;
• authenticate you and secure your account;
• process subscriptions and send billing-related messages;
• send transactional and notification emails, such as when a draft is ready or new ideas are generated;
• monitor for abuse, debug issues, and comply with legal obligations.

04AI Processing of Your Content

To generate and analyze content, we send your inputs (such as website content, keywords, and instructions) to third-party AI model providers acting on our behalf. We rely on providers whose terms state that data sent through their business APIs is not used to train their public models.

Please avoid submitting sensitive personal information in your prompts, as generated output is stored in your account and processed by these providers.

05Connected Analytics Accounts

DraftRank can read performance data from analytics accounts you own, so it can show you how the articles it wrote are actually doing. Each connection is optional, is made per website, and happens only after you explicitly authorise it.

• Google Search Console. With your permission (the webmasters.readonly scope) we read search performance for the property you select: clicks, impressions, click-through rate, average position, and the queries and page URLs behind them. We never submit sitemaps, request indexing, or change any Search Console setting.
• Google Analytics. With your permission (the analytics.readonly scope) we read aggregated reporting data for the GA4 property you select: sessions, users, page views, engaged sessions, engagement rate, average session duration, key events, landing pages and channel groupings. We also list your properties so you can choose one, and read the property’s website URL to confirm it matches the site being analysed. We never create, edit or delete properties, data streams, or any Analytics configuration, and we do not request user-level or personally identifiable Analytics data.
• Microsoft Clarity. (This is your own Clarity project, and is unrelated to the Clarity we run on DraftRank’s own pages, described above.) If you paste a Clarity Data Export token, we read aggregated on-page behaviour for that project — scroll depth, engagement time, rage and dead clicks, quickbacks, script errors, and the page URLs they occurred on. Because Clarity’s API only exposes the last few days, we take a small daily snapshot and store it so you can see trends over time. We never access session recordings.

How this data is used. It is shown back to you inside your own account, on the Performance screen for the website it belongs to. It is never sold, never shared with third parties for their own purposes, never used for advertising, and never used to train AI models — including ours or any provider’s.

Storage. Access tokens are encrypted at rest and are never sent to your browser. Google responses are cached briefly to stay within Google’s rate limits; Clarity snapshots are retained so your history survives, since Clarity itself discards older data.

Disconnecting. You can disconnect any of these at any time from the Integrations screen. Disconnecting a Google account also revokes DraftRank’s access at Google. You can additionally revoke access from your Google account permissions page. Disconnecting Clarity also deletes the snapshots we collected for that project.

Limited Use. DraftRank’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

06How We Share Information

We do not sell your personal information. We share it only with service providers (subprocessors) who help us operate the Service, and only as needed for the purposes below:

We may also disclose information to comply with the law, enforce our agreements, protect rights and safety, or as part of a merger, acquisition, or sale of assets, in which case we will notify you of any change in ownership or use of your personal information.

07Data Retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete content or close your account, we delete or anonymize the associated personal information within a reasonable period, except where we must retain it to meet legal, tax, or security obligations.

08Data Security

We use technical and organizational measures such as encryption in transit, access controls, and trusted infrastructure providers to protect your information. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

09Your Privacy Rights

Depending on where you live (for example, under the GDPR or CCPA), you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. We do not sell personal information or use it for cross-context behavioral advertising.

To exercise any of these rights, email us at [email protected]. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights.

10International Data Transfers

We and our providers may process your information in countries other than your own. Where required, we rely on appropriate safeguards, such as standard contractual clauses, to protect information transferred across borders.

11Children’s Privacy

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

12Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify you through the Service or by email.

13Contact Us

If you have questions or requests regarding this Privacy Policy or your data, contact us at [email protected].