Privacy Policy

1. Who We Are

DraftMyDoc operates the website at draftmydoc.com. We are the data controller for personal data you provide when using this service. For questions about this policy, contact us at draftdocuk@gmail.com.

2. Data We Collect

• Account data: your email address when you sign up or sign in.
• Document content: the form answers and AI-generated document text you create.
• Payment data: your payment is processed by Stripe. We store only a reference to the Stripe session and payment status — we never see or store your card details.
• Usage data: standard server logs including IP address, browser type, and pages visited.
• Cookies: a single cookie (dmd_market) that stores your market preference (UK or US). We do not use tracking or advertising cookies.

3. How We Use Your Data

• To provide the document generation service.
• To process your payment and deliver your document.
• To send you a copy of your document by email after purchase (via Resend).
• To manage your account and subscription.
• To comply with legal obligations.

We do not sell your personal data. We do not use your document content to train AI models.

4. Third-Party Services

We share data with the following processors only to the extent necessary to provide the service:

• Supabase — database and authentication (data stored in the EU).
• Stripe — payment processing (PCI-DSS compliant).
• Resend — transactional email delivery.
• Anthropic — AI document generation (your form answers are sent to the Anthropic API to generate your document; Anthropic's API usage policy prohibits using API inputs to train models).
• Vercel — hosting and edge infrastructure.

5. Data Retention

We retain your account data and generated documents for as long as your account is active. If you delete your account, your data is deleted within 30 days. Payment records are retained for 7 years as required by UK accounting regulations.

6. Your Rights (UK & EU)

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate data.
• Erase your data (“right to be forgotten”).
• Port your data to another service.
• Object to processing in certain circumstances.

To exercise any of these rights, email draftdocuk@gmail.com. We will respond within 30 days.

7. California Residents (CCPA)

California residents have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. To make a data request, email draftdocuk@gmail.com.

8. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), row-level security on our database, and access controls. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or by posting a notice on the site. Continued use after changes are posted constitutes acceptance.

10. Contact

For privacy-related queries, email draftdocuk@gmail.com.