Privacy Policy
1. Data Collected
We only collect data necessary for the proper functioning of the service:
- • Email, encrypted password (or authentication via Google Auth)
- • Uploaded files (visuals)
- • IP address (security and abuse prevention)
- • Payment information via Stripe (account identifier, payment history)
- • Technical logs related to service usage (hosted by Supabase)
2. Processing Purpose
Data is used for:
- • Authenticating users and managing service access
- • Managing uploaded files and their protection (watermark / preview)
- • Ensuring billing and payment tracking
- • Sending transactional emails (confirmation, notifications)
- • Guaranteeing website security and stability
3. Data Sharing
Some data is shared with third-party services strictly necessary for the website's operation:
- • Stripe: payment processing (no banking data is stored by Drafte)
- • Google Auth: authentication and connection via Google account
- • Supabase: hosting and database management (users, sessions, files)
- • Cloudinary: processing and hosting of uploaded visuals
- • Resend: sending transactional emails (notifications, confirmations)
- • Vercel: website hosting
4. Retention Period
- • Data is retained as long as the user has an active account.
- • In case of account deletion, all personal data is erased within 30 days.
- • Some billing data may be retained longer to comply with legal and accounting obligations.
5. Cookies
- • Strictly necessary cookies are used to maintain user sessions.
- • No advertising or third-party tracking cookies are used.
6. User Rights (GDPR)
In accordance with the General Data Protection Regulation (GDPR), you can at any time:
- • Access your personal data
- • Request their rectification or deletion
- • Withdraw your consent at any time
To exercise your rights: contact@drafte.co
If you believe, after contacting us, that your rights are not being respected, you can file a complaint with the CNIL: https://www.cnil.fr