Privacy Policy

Effective Date: February 1, 2026

1. Introduction

DraftEngine ("we," "us," or "our") operates the draftengine.co website and related services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our platform or use our services.

By using DraftEngine, you consent to the practices described in this policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

2.1 Personal Information

We may collect personally identifiable information that you voluntarily provide, including:

  • Name, email address, and phone number
  • Company name and job title
  • Billing address and payment information (processed securely via Stripe)
  • Professional license numbers (when voluntarily provided for compliance verification)

2.2 Usage Data

We automatically collect certain information when you access our platform:

  • IP address, browser type, and operating system
  • Pages visited, time spent, and navigation paths
  • Device identifiers and screen resolution
  • Referring URLs and search terms

2.3 Plan and Document Data

When you use our services, we process:

  • Plan sets you purchase, download, and view
  • Compliance review requests and results
  • Documents uploaded for AI analysis
  • Credit usage and transaction history

3. How We Use Your Information

We use collected information to:

  • Provide, operate, and maintain our platform and services
  • Process transactions and send billing-related communications
  • Run AI-powered compliance reviews on your plan sets
  • Improve our platform, features, and user experience
  • Send administrative communications (updates, security alerts, support)
  • Send marketing communications (only with your consent; you may opt out at any time)
  • Detect and prevent fraud, abuse, and security threats
  • Comply with legal obligations and enforce our Terms of Service

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

  • Service providers: Stripe (payments), Anthropic (AI processing), Linode/Akamai (hosting), and analytics providers
  • Legal requirements: When required by law, court order, or governmental authority
  • Business transfers: In connection with a merger, acquisition, or sale of assets
  • With your consent: When you explicitly authorize sharing

5. Data Security

We implement industry-standard security measures to protect your information, including:

  • TLS 1.3 encryption for all data in transit
  • AES-256 encryption for data at rest
  • Structured audit logging (CASA Level 2 compliance)
  • Rate limiting and least-privilege access controls
  • Regular security assessments and vulnerability scanning

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. We may retain certain data for longer periods as required by law, to resolve disputes, or to enforce our agreements.

Uploaded documents submitted for AI compliance review are retained for 90 days after processing, then automatically purged.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate data
  • Request deletion of your personal information
  • Object to or restrict certain processing activities
  • Data portability (receive your data in a structured format)
  • Withdraw consent at any time (where processing is based on consent)

To exercise these rights, contact us at privacy@draftengine.co.

8. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. For detailed information about the cookies we use and your choices, please see our Cookie Policy.

9. Third-Party Links

Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Children's Privacy

DraftEngine is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Effective Date" above. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, contact us at: