Legal

Privacy Policy

Effective May 11, 2026

This Privacy Policy explains how Change Draft collects, uses, and protects information about you when you use our service. By using Change Draft, you agree to the practices described here.

1. Information We Collect

Account information: When you sign up, we collect your first name, email address, and a hashed password.

Usage data: We collect information about how you use the service, including drafts created, features used, and session activity.

Project content: The project names, customer names, notes, and cost figures you enter to generate Change Drafts.

Payment information: Payment is processed by Stripe. We do not store your full card number. We receive billing status and subscription details from Stripe.

Technical data: IP address, browser type, and device information collected automatically via logs and analytics.

2. How We Use Your Information

  • To provide, operate, and improve the service
  • To process payments and manage your subscription
  • To send transactional emails (account confirmation, password reset)
  • To send product updates and announcements (you may opt out)
  • To detect and prevent fraud or abuse
  • To comply with legal obligations

3. Information Sharing

We do not sell your personal information. We share data only with third-party service providers necessary to operate the service:

  • Supabase — database and authentication hosting
  • Stripe — payment processing
  • Anthropic — AI document generation (your notes are sent to generate drafts)
  • Resend — transactional email delivery
  • Vercel — hosting and infrastructure
  • Sentry — error monitoring

We may disclose your information if required by law or to protect the rights and safety of Change Draft or others.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required by law to retain it.

Generated drafts are stored in your account until you delete them.

5. Security

We use industry-standard security measures including encryption in transit (HTTPS), row-level security on our database, and hashed password storage. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Opt out of marketing emails at any time

To exercise these rights, contact us at hello@changedraft.com.

7. Cookies

We use cookies and similar technologies to maintain your login session and remember preferences. We use Vercel Analytics for aggregate, anonymous usage statistics. No advertising cookies are used.

8. Children

Change Draft is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the application. The effective date at the top of this page indicates when this version took effect.

10. Contact

Questions or concerns about this Privacy Policy? Contact us at hello@changedraft.com.