1. Introduction
This Privacy Policy describes how DraftClout (hereinafter "we", "our" or "DraftClout") collects, uses, stores and protects the personal data of users of the DraftClout service (hereinafter "the Service").
In accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act, we are committed to protecting your privacy and personal data.
2. Data controller
The data controller for personal data is DraftClout. For any questions regarding the processing of your data, you can contact us at: contact@draftclout.app
3. Data collected
3.1. Data collected directly
When creating your account, we collect the following data:
- Name
- Email address
- Password (stored securely using bcrypt encryption)
- Username (for MyPages)
For premium subscriptions, we also collect payment information through Stripe (payment processor). DraftClout does not store credit card information directly.
3.2. Data collected automatically
When using the Service, we may automatically collect:
- IP address (for security and rate limiting purposes)
- Browser type and operating system
- Pages visited and visit duration
- Connection data (cookies, session identifiers)
- Login attempts (for security and rate limiting)
3.3. Created content
We store the content you create via the Service, including:
- MyPages (link-in-bio pages) with their customization settings
- Links and social media links associated with your MyPages
- Content generated through our creation tools (chat conversations, stories, posts, etc.)
- Uploaded images and media files
This content is stored to allow you to access, edit, and manage it at any time.
4. Processing purposes
Your personal data is processed for the following purposes:
- Account management: creation, authentication, profile management
- Service provision: access to features, saving your creations
- Service improvement: usage analysis, bug fixes, development of new features
- Communication: sending information related to the Service, responding to your requests
- Legal obligations: compliance with legal and regulatory obligations
5. Legal basis for processing
The processing of your personal data is based on:
- Your consent: for the use of non-essential cookies and sending marketing communications
- Contract performance: for providing the Service and managing your account
- Legitimate interest: for Service improvement and security
- Legal obligations: for compliance with legal and regulatory obligations
6. Data retention
Your personal data is retained:
- For the duration of your account: as long as your account is active
- After account deletion: All data is permanently deleted immediately upon account deletion, except for:
- Legal records (if required by law): maximum 3 years
- Anonymized analytics data (no personal identifiers)
- Connection and security logs: for a maximum period of 12 months for security purposes
- Subscription records: Retained for accounting and legal compliance purposes as required by law
Beyond these periods, your data is permanently deleted or anonymized. When you delete your account, all your MyPages, links, content, and personal data are immediately and permanently removed from our systems.
7. Data sharing and sale
7.1. No data sale or sharing for commercial purposes
We never sell, rent, or share your personal data to third parties for commercial or marketing purposes. Your data belongs to you, and we are committed to protecting your privacy.
We do not:
- Sell your personal information to advertisers or data brokers
- Share your email address with third parties for marketing purposes
- Use your data to create advertising profiles
- Share your content or creations without your explicit consent
7.2. Service providers (strictly necessary)
We may share your data only with service providers who are strictly necessary to provide the Service, and only under strict confidentiality agreements:
- Data hosting providers: To store and host your data securely
- Payment processors (Stripe): To process subscription payments (only payment-related data, not your personal content)
- Email service providers: To send you essential service emails (password resets, account notifications)
All service providers are contractually obligated to protect your data and use it solely for the purpose of providing the Service.
7.3. Legal obligations
We may be required to disclose your data to competent authorities only if required by law or in response to a valid judicial request. We will notify you of such requests when legally permitted.
8. Your rights
In accordance with the GDPR, you have the following rights:
- Right of access: you can request access to your personal data
- Right to rectification: you can request correction of your inaccurate data
- Right to erasure: you can request deletion of your data
- Right to restriction: you can request restriction of processing of your data
- Right to data portability: you can request recovery of your data in a structured format
- Right to object: you can object to the processing of your data for legitimate reasons
- Right to withdraw consent: you can withdraw your consent at any time
To exercise your rights, contact us at: contact@draftclout.app
You also have the right to file a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL): www.cnil.fr
9. Data security
We implement appropriate technical and organizational measures to protect your personal data against:
- Unauthorized access
- Accidental loss or destruction
- Fraudulent use
- Unauthorized disclosure
These measures include in particular:
- Password encryption
- Security protocols (HTTPS)
- Restricted data access
- Regular backups
10. Cookies
DraftClout uses only essential cookies that are strictly necessary for the Service to function properly. We do not use tracking cookies, advertising cookies, or any cookies for analytics or marketing purposes.
Types of cookies used:
- Session cookies: Used to maintain your login session and authenticate your identity. These cookies are deleted when you close your browser.
- Authentication cookies: Used to keep you logged in across different pages of the Service. These cookies are essential for security and account management.
No tracking or analytics: We do not use cookies to track your browsing behavior, create user profiles, or collect analytics data. All cookies used by DraftClout are essential for the basic functionality of the Service.
You can manage your cookie preferences via your browser settings. However, disabling essential cookies may prevent you from using certain features of the Service, such as staying logged in.
11. International transfers
Your data may be transferred and stored in countries located outside the European Union. In this case, we ensure that appropriate safeguards are in place to protect your data in accordance with the GDPR.
12. Third-party content and attributions
Some images and visual content used on DraftClout are provided by third parties under license:
- Homepage images: Images by Daniil Kondrashin from Pixabay. These images are used under the Pixabay License, which allows free commercial and non-commercial use without attribution, though we provide attribution here as a courtesy.
All other content, designs, logos, and visual elements are the property of DraftClout or are used with proper authorization.
13. Policy modifications
We reserve the right to modify this Privacy Policy at any time. Modifications take effect upon their publication on the site. We encourage you to regularly consult this page.
14. Contact
For any questions regarding this Privacy Policy or the processing of your personal data, you can contact us at: contact@draftclout.app
← Back to home