Privacy Policy

Data controller

The data controller is Ramiro Montiel (Argentina). For privacy requests, use the contact email at the bottom of this page.

Information we collect

Account data: When you sign in with Google, we receive your user identifier, email address, and basic profile information (such as your name and avatar).

Gmail connection: If you connect Gmail with OAuth, we store refresh tokens needed to create draft emails on your behalf. If you use a Gmail App Password instead, we store that password encrypted and use IMAP only to save drafts. We request the Gmail compose scope for OAuth only — we do not read your inbox or send messages without your action in Gmail.

Campaign data: Company searches, your bio, CV file and metadata, generated email content, and related campaign history.

Payment data: Purchases are processed by Creem. We receive transaction references and credit amounts, not full card details.

Usage data: We may collect analytics events (for example via PostHog) such as page views and product interactions to improve the service.

How we use information

We use your data to authenticate you, run company searches so you can pick recipients, generate personalized email drafts with AI from your bio, save them as Gmail drafts for your review, manage your credit balance, process payments, secure the service, and improve the product. We do not sell your personal data.

Google user data

Draftly's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide and improve user-facing features you request (such as Gmail drafts) and is not used for advertising.

Service providers

We use trusted providers that process data on our behalf, including Supabase (auth and database), Google (OAuth, Gmail, Places, Gemini), Creem (payments), and PostHog (analytics). They may only use your data as needed to deliver their services to us.

International transfers

Your data may be processed in countries other than Argentinawhere our providers operate. We take reasonable steps to protect your information when it is transferred or stored abroad.

Retention

We keep your data while your account is active and as needed to provide the service, comply with law, or resolve disputes. You may request deletion by contacting us.

Your rights

Depending on applicable law (including Argentina's personal data protection framework), you may request access, correction, or deletion of your personal data. We will respond within a reasonable time.

Security

We use industry-standard measures to protect your data, but no online service is completely secure. Use a strong Google account and contact us if you suspect unauthorized access.

Children

Draftly is not intended for users under 18. We do not knowingly collect data from children.

Changes

We may update this policy as the beta evolves. The "Last updated" date below will change when we do. Continued use after updates means you accept the revised policy.