Privacy policy

Draftfield processes the data you and your respondents give us only to provide the service. We do not sell personal data and do not use third-party advertising trackers.

What we store

Account data (name, email, hashed password), workspace content you create, usage records for billing limits, and security logs (IP address, user agent) for abuse prevention.

Your controls

Workspace owners can export all workspace data as JSON and permanently delete a workspace or account at any time from Settings → Your data. Deletion removes the data from our primary database immediately.

Third-party AI

AI features run only when a workspace adds its own provider API key. Content you submit to an AI feature is sent to that provider under your agreement with them. API keys are encrypted at rest.

Publishing destinations

WordPress application passwords and webhook signing secrets are encrypted at rest and used only when an admin publishes or schedules an approved article. Delete a destination to delete its credentials.

Contact

Privacy requests: contact support or support@draftfield.invalid.