Privacy Policy
1. What We Collect
When you use Draftkiln, we collect:
- Account information: Name, email address, and a hashed password.
- Manuscripts and project files: The content you upload for processing.
- Usage data: Project counts, phase progress, and feature usage for enforcing plan limits.
- Payment information: Processed by Stripe. We do not store card numbers — Stripe handles all payment data directly.
2. How We Use Your Data
- To provide the book production service — processing your manuscripts through the pipeline
- To manage your account and subscription
- To enforce plan limits and usage metering
- To communicate service updates or respond to support requests
3. Your Manuscripts
Your manuscripts are your property. We process them solely to provide the service. We do not read, share, sell, or use your manuscript content for any purpose other than delivering your production pipeline results.
Manuscripts are stored on our servers for the duration of your project. When you delete a project, all associated files are permanently removed.
4. Data Sharing
We do not sell your personal data. We share data only with:
- Stripe: For payment processing
- AI service providers: Manuscript text is sent to AI APIs for editorial processing during pipeline execution. No manuscript data is retained by these providers beyond the processing request.
5. Data Retention
Account data is retained while your account is active. Project files are retained until you delete the project. If you delete your account, all data is permanently removed within 30 days.
6. Security
Passwords are hashed with bcrypt. Authentication uses HTTP-only cookies with JWT tokens. All traffic is encrypted via HTTPS in production.
7. Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and all associated data
- Export your project files via the Download Centre
- Object to data processing
To exercise these rights, contact support@draftkiln.com.
8. Cookies
Draftkiln uses essential cookies only — authentication tokens stored as HTTP-only cookies. We do not use tracking cookies, analytics scripts, or third-party advertising cookies.
9. Changes
We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision.
10. Contact
For privacy-related questions, email support@draftkiln.com.