Privacy Policy

This Privacy Policy explains how OptiDraft (“OptiDraft”, “we”, “us”, “our”) collects, uses, and protects information about you when you use our website, applications, and related services (collectively, the “Service”).

By using the Service, you acknowledge the practices described in this Privacy Policy. Where we rely on your consent (for example, certain cookies or marketing communications), you can withdraw it at any time.

1. Information we collect

1.1 Information you provide to us

• Account information. When you create an account, we may collect your name, email address, username, password (hashed), and related profile details.
• Billing and subscription information. If you purchase a subscription or credits, checkout and payment processing are handled by Stripe, our payment processor. Stripe may collect and process billing details (such as name, billing address, email, payment method details, tax-related details, and transaction information) and may perform fraud and security checks. We typically receive limited information such as transaction IDs, payment status, purchased plan/credits, and basic billing metadata — not full card numbers.
• Content and prompts. When you use the Service, we may process the text, prompts, instructions, and other content you submit, as well as the AI-generated outputs.
• Support communications. If you contact us (e.g., email, chat, WhatsApp, Telegram), we may collect your contact details and any information you choose to provide.

1.2 Information we collect automatically

• Usage data. We may collect information about how you use the Service, such as pages visited, features used, search queries, article generation activity, and timestamps.
• Device and log data. We may collect IP address, browser type, operating system, device identifiers, and other technical details through server logs and similar technologies.
• Cookies and similar technologies. We use cookies and related tools to remember your preferences, maintain sessions, and analyze usage. For more details, see our Cookie Policy. If you complete checkout via Stripe-hosted pages or manage billing through Stripe portals, Stripe may also use cookies or similar technologies under its own notices.

1.3 Information from third parties

We may receive information from third-party services that you connect to OptiDraft (for example, payment providers such as Stripe, analytics tools, or integration partners). The information we receive will depend on the settings and privacy policies of those third-party services.

2. How we use your information

We use the information we collect for purposes including:

• Providing, operating, and maintaining the Service.
• Creating and managing your account.
• Processing subscriptions and payments and associating purchases with your account.
• Generating content and delivering features you request.
• Monitoring performance, usage, and security of the Service.
• Improving and developing new features and functionality.
• Communicating with you about updates, support, and important notices.
• Complying with legal obligations and enforcing our Terms of Service.

3. Legal bases for processing (EEA/UK users)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under one or more of the following legal bases:

• Contract. To provide the Service and perform our obligations under our agreement with you.
• Legitimate interests. To operate and improve the Service, maintain security, and prevent abuse, where these interests are not overridden by your rights.
• Consent. Where required (for example, certain cookies or marketing communications), we rely on your consent, which you can withdraw at any time.
• Legal obligations. To comply with applicable laws, regulations, and legal processes.

4. How we share information

We do not sell your personal information. We may share information in the following circumstances:

• Service providers. With trusted third-party vendors who perform services on our behalf, such as hosting, analytics, and customer support.
• Payment processing and order management. Purchases may be processed by Stripe as our payment processor. Stripe may share order and transaction details with us so we can provide access to the Service, manage subscriptions/credits, provide support, and handle billing-related requests. Stripe’s handling of personal information is described in its privacy and cookie notices.
• Legal and safety. When we believe in good faith that disclosure is reasonably necessary to comply with law, legal process, or government requests; to protect the rights, property, or safety of OptiDraft, our users, or others; or to detect and prevent fraud or security issues.
• Business transfers. In connection with a merger, acquisition, financing, or sale of all or part of our business, information may be transferred as part of that transaction, subject to appropriate confidentiality protections.
• With your consent. We may share information when you direct us to do so or when you provide your explicit consent.

5. Data retention

We retain personal information for as long as reasonably necessary to provide the Service, fulfill the purposes described in this Policy, and comply with legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and how it is used.

6. Data security

We use reasonable technical and organizational measures to protect your information against unauthorized access, loss, misuse, or alteration. However, no system can be guaranteed to be completely secure. You are responsible for maintaining the security of your account credentials.

7. International transfers

Depending on your location, your information may be processed in countries other than your own, which may have different data protection laws. Where required, we take steps to ensure an adequate level of protection in accordance with applicable law.

8. Your rights and choices

Subject to applicable law, you may have rights regarding your personal information, such as:

• Accessing the personal data we hold about you.
• Requesting correction of inaccurate or incomplete data.
• Requesting deletion of certain data.
• Objecting to or restricting certain types of processing.
• Requesting data portability.

You can exercise many of these rights by adjusting your account settings or contacting us. We may ask you to verify your identity before processing certain requests.

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority.

Note: If your request relates to payment data processed by Stripe, you can also use the contact options in Stripe’s Privacy Policy.

9. Cookies and tracking technologies

We use cookies and similar technologies to operate the Service, remember your preferences, and analyze usage. For more information, please review our Cookie Policy. Checkout pages or order portals operated by Stripe may use its own cookies and similar technologies under its cookie policy.

10. Children’s privacy

The Service is not intended for children under 18, and we do not knowingly collect personal information from children. If you believe that a child has provided us with personal information, please contact us so we can take appropriate action.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Where required, we will provide additional notice. Your continued use of the Service after any changes become effective constitutes your acceptance of the updated Policy.

12. Contact information

If you have questions about this Privacy Policy or how we handle your information, please contact us at [email protected].