Privacy Policy

Last updated: March 10, 2026

1. Overview

Draft ("we", "us") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. Self-Hosted Deployments

If you self-host Draft, we collect no data whatsoever. Your code, configuration, and usage data remain entirely on your infrastructure. We have no access to self-hosted instances.

3. Cloud-Hosted Service

For the cloud-hosted version of Draft, we collect:

• Account information: email address, name, and OAuth profile data (Google or GitHub) when you sign up
• Usage data: feature requests submitted, agent execution logs, and billing information
• Code data: code snippets processed by AI agents during feature execution. This data is processed only to provide the Service and is automatically deleted after execution completes.

4. What We Do Not Do

• We do not sell your data to third parties
• We do not use your code to train AI models
• We do not retain your code after execution completes
• We do not share your data with advertisers

5. Third-Party AI Providers

Draft connects to AI providers (Anthropic, OpenAI, etc.) using your API keys. Code snippets sent to these providers are subject to their respective privacy policies. Draft sends only the minimal context each agent needs — not your entire repository.

6. Cookies and Analytics

Our website uses minimal analytics to understand traffic patterns. We do not use advertising cookies or tracking pixels. We do not fingerprint browsers.

7. Data Retention

Account data is retained while your account is active. You may request deletion of your account and all associated data at any time by contacting us.

8. Your Rights

You have the right to access, correct, or delete your personal data. You have the right to export your data. You have the right to withdraw consent at any time. To exercise these rights, contact us at [email protected].

9. Contact

For privacy-related questions, contact [email protected].