Privacy Policy

This privacy notice for Draft AI Company, a Delaware corporation (“Draft,” “we,” “us,” or “our”), describes how and why we might collect, store, use, and/or share (“process”) your information when you use our services (“Services”), such as when you:

• Visit our website at draftcompany.ai, or any website of ours that links to this privacy notice.
• Engage with us in other related ways, including any sales, marketing, or events.

Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@draftcompany.ai.

You can also write to us at:

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by using our table of contents to find the section you are looking for.

Our Responsibilities

What personal information do we process?

When you visit, use, or navigate our Services, we may process personal information depending on how you interact with Draft and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information?

We do not process sensitive personal information such as racial or ethnic data, religious beliefs, or health information.

Do we receive any information from third parties?

We may receive limited information from payment processors or infrastructure providers, such as transaction confirmations, billing status, or security and fraud signals.

How do we process your information?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

Do we use your data to train AI models?

Draft does not build, train, or fine-tune its own AI models using your uploaded CAD files, design data, or other content. We use third-party AI providers only to perform inference for core functionality, and our agreements prohibit using customer content to train or improve their models. Provider names are available under NDA for enterprise due diligence.

What are your rights?

Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information.

How do you exercise your rights?

The easiest way to exercise your rights is by contacting us at support@draftcompany.ai. We will consider and act upon any request in accordance with applicable data protection laws.

If you are only a visitor to our website, we do not collect account or profile data before you create an account. We may still collect limited technical data such as IP address, device or browser information, and security logs to operate the site, prevent fraud, and maintain service reliability.

From the moment you create an account with Draft, we start collecting data. Sometimes you provide us with data, sometimes data about you is collected automatically.

Here's when and how we do this:

We use your data to provide and operate our Services, maintain security, communicate with you, and improve Draft. Here are the main ways we use your information:

We partner with third-party providers to help us deliver our services. Your data is shared only when strictly necessary and according to the safeguards detailed in this Privacy Policy.

We do not use third-party analytics, support tools, or error tracking services at this time.

Your Choices

• You can choose not to provide us with personal data. If you choose to do this, you can continue to browse our website, but we will not be able to provide our services without an account.
• You can ask us not to use your data for marketing. You can opt out from marketing by emailing us at support@draftcompany.ai.

Your Rights

You can exercise your rights by sending us an email at support@draftcompany.ai.

• Right to access: You have the right to access information we hold about you, including the categories of data, purposes of processing, and how long it will be stored.
• Right to portability: We will provide you with a copy of your data in a machine-readable format (CSV or JSON) so you can transfer it to another service.
• Right to deletion: You can ask us to erase any personal data we hold about you if it is no longer necessary for us to hold for the purposes of your use of Draft.
• Right to correction: You can ask us to correct inaccurate personal information we have collected about you.
• Right to opt out: You can opt out of the sale or sharing of personal information (we do not sell or share personal information).
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

We will respond to your request within 45 days, unless doing so would adversely affect the rights of others.

How Secure Is Your Data?

We have physical, electronic, and managerial procedures to safeguard and secure the information we collect. All data is encrypted in transit and at rest.

However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure. Please remember:

• You provide personal data at your own risk.
• You are responsible for your username and password—keep them secret and safe.
• If you believe your privacy has been breached, please contact us immediately at support@draftcompany.ai.

Where Do We Store Your Data?

Your personal data is stored primarily in data centers located in the United States, operated by our infrastructure providers (Supabase, Google Cloud Platform, Render).

How Long Do We Store Your Data?

We retain your personal data based on the category and purpose:

• Account & profile data: Deleted within 90 days of account closure.
• Project/CAD files: Retained indefinitely unless you request deletion.
• Billing & transaction records: Retained for 7 years to meet tax, accounting, and regulatory obligations.
• Security and access logs: Retained for 12 months for security monitoring and fraud prevention.
• Support communications: Retained for up to 3 years.
• Marketing preferences: Retained until you opt out or close your account.

We may retain data longer if required to comply with legal obligations or to resolve disputes.

Draft is not intended for children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@draftcompany.ai, and we will delete the information.

If you are a California resident, the California Consumer Privacy Act (“CCPA”) provides you with specific rights regarding your personal information:

• Right to Know: Request information about the categories of personal information collected, the sources, the business purposes, and the categories of third parties with whom we share it.
• Right to Access: Request a copy of the personal information we have collected about you during the past 12 months.
• Right to Delete: Request deletion of personal information we have collected from you.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out: Opt out of the “sale” or “sharing” of your personal information.
• Authorized Agent: You may designate an authorized agent to submit requests on your behalf. We may require proof of authorization.
• Non-Discrimination: You are entitled to exercise these rights free from discrimination.

Do We Sell Your Personal Information? We do not sell or share your personal information to third parties.

To exercise your rights under CCPA, contact us at support@draftcompany.ai. We may need to verify your identity before processing your request, and we will respond within 45 days of receiving it.

We use only essential cookies necessary for authentication and session management. These cookies are required for our Services to function properly.

We do not use marketing cookies, tracking cookies, or third-party analytics cookies.

How Can I Block Cookies?

You can block cookies by adjusting your browser settings. However, if you disable essential cookies, certain parts of our Services may not function properly.

We may update this privacy notice from time to time. The updated version will be indicated by an updated “Last update” date and the updated version will be effective as soon as it is accessible.

If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.