Privacy Policy

1. Introduction

Draftflow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

Draftflow is currently in beta. This policy may be updated as we refine our service.

2. Information We Collect

2.1 Content You Provide

Your text content is processed entirely in your browser. We do not store, transmit, or access your text content on our servers.

2.2 Analytics Data

We use the following analytics services to improve our service:

• Cloudflare Web Analytics: Collects aggregated traffic data (page views, referrers, device types). No cookies or personal data are collected.
• Microsoft Clarity: Records user interactions and generates heatmaps to help us understand user behavior. Personal data is masked or excluded by configuration. Session tracking cookies may be used.

2.3 Technical Data

We may automatically collect:

• IP address (aggregated or anonymized where possible)
• Browser type and version
• Operating system
• Page visit timestamps
• Referrer URL

3. Legal Basis for Processing (GDPR)

Where applicable (e.g., for users in the European Economic Area), we process your data based on:

• Legitimate interests: To analyze usage patterns, improve our service, and ensure security.
• Consent: Where required by law, such as for non-essential cookies.

You may withdraw consent at any time by adjusting your browser settings or contacting us.

4. How We Use Your Information

We use collected information to:

• Understand how users interact with our service
• Identify and fix bugs or usability issues
• Improve our features and user experience
• Monitor service performance and security

5. Data Sharing and Third Parties

We do not sell or rent your data. We share data only with:

• Cloudflare: For hosting and analytics
• Microsoft: For Clarity analytics

These services process data according to their respective privacy policies and applicable data protection laws.

6. Cookies and Tracking

We use minimal cookies:

• Cloudflare Analytics: No cookies
• Microsoft Clarity: Session tracking cookies

Where required by law (such as in the EU), we will obtain your consent before placing non-essential cookies. You can manage or disable cookies through your browser settings.

7. Data Retention

Analytics data is retained according to each service's policy:

• Cloudflare Analytics: Up to 6 months
• Microsoft Clarity: Up to 30 days (configurable)

Your text content is never stored on our servers and is deleted when you close your browser.

8. Your Rights

Depending on your location, you may have the following rights:

• Access the data we hold about you
• Request correction or deletion of your data
• Object to or restrict processing
• Data portability (where applicable)
• Withdraw consent at any time

Important note: Because we do not store personally identifiable information or user accounts, some of these rights may not be applicable in practice. For example, we cannot delete data we do not hold. However, you can always opt out of analytics by adjusting your browser settings or contacting us.

To exercise your rights or ask questions, contact us at the email below.

9. Security

We take reasonable measures to protect your information:

• HTTPS encryption for all communications
• Client-side processing (your text never leaves your browser)
• Regular security reviews of our infrastructure

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

Draftflow is not intended for users under 13 years old. We do not knowingly collect data from children.

11. International Data Transfers

Our service is hosted on Cloudflare's global network. Data may be processed in various countries. We rely on our service providers' compliance with applicable data protection frameworks (such as EU-US Data Privacy Framework) to ensure appropriate safeguards.

12. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Governing Law and Jurisdiction

This Privacy Policy is governed by the laws of Japan. Any disputes arising from this policy shall be resolved in the courts of Japan.

This choice of law does not affect your mandatory rights under applicable data protection laws (such as GDPR or CCPA) if you are located in a jurisdiction where such laws apply.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: support@trydraftflow.com