Privacy Policy
Effective May 11, 2026
This Privacy Policy explains how Change Draft collects, uses, and protects information about you when you use our service. By using Change Draft, you agree to the practices described here.
1. Information We Collect
Account information: When you sign up, we collect your first name, email address, and a hashed password.
Usage data: We collect information about how you use the service, including drafts created, features used, and session activity.
Project content: The project names, customer names, notes, and cost figures you enter to generate Change Drafts.
Payment information: Payment is processed by Stripe. We do not store your full card number. We receive billing status and subscription details from Stripe.
Technical data: IP address, browser type, and device information collected automatically via logs and analytics.
2. How We Use Your Information
- To provide, operate, and improve the service
- To process payments and manage your subscription
- To send transactional emails (account confirmation, password reset)
- To send product updates and announcements (you may opt out)
- To detect and prevent fraud or abuse
- To comply with legal obligations
3. Information Sharing
We do not sell your personal information. We share data only with third-party service providers necessary to operate the service:
- Supabase — database and authentication hosting
- Stripe — payment processing
- Anthropic — AI document generation (your notes are sent to generate drafts)
- Resend — transactional email delivery
- Vercel — hosting and infrastructure
- Sentry — error monitoring
We may disclose your information if required by law or to protect the rights and safety of Change Draft or others.
4. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain it.
Generated drafts are stored in your account until you delete them.
5. Security
We use industry-standard security measures including encryption in transit (HTTPS), row-level security on our database, and hashed password storage. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Opt out of marketing emails at any time
To exercise these rights, contact us at hello@changedraft.com.
7. Cookies
We use cookies and similar technologies to maintain your login session and remember preferences. We use Vercel Analytics for aggregate, anonymous usage statistics. No advertising cookies are used.
8. Children
Change Draft is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the application. The effective date at the top of this page indicates when this version took effect.
10. Contact
Questions or concerns about this Privacy Policy? Contact us at hello@changedraft.com.