Legal

Privacy Policy

Effective date: May 23, 2026

DraftMill ("we", "us", or "our") operates draftmill.co. This policy explains what information we collect, how we use it, and your rights regarding your data. We keep this plain and honest.

1. Information We Collect

Account information: When you register, we collect your name, email address, and a hashed (never plain-text) password.

Usage data: We track how many keyword searches, titles lookups, and content generations you use — this powers your credit balance and plan limits.

Generated content: Ebooks and blog posts you generate are stored temporarily on our servers so you can download them. We do not read, sell, or train AI models on your content.

Billing information: Payment details are handled entirely by Lemon Squeezy. We never see or store your credit card number — only a subscription ID and customer ID for managing your plan.

Log data: Standard server logs including IP address, browser type, and pages visited. Used for debugging and security only.

2. How We Use Your Information

To create and manage your account
To process content generation requests via the Anthropic Claude API
To manage your subscription and credit balance
To send transactional emails (welcome, password reset, billing notifications)
To respond to support requests sent to support@draftmill.co
To detect and prevent abuse or fraudulent activity

We do not send marketing emails without your consent. We do not sell your data to third parties.

3. Third-Party Services

We use the following third parties to operate DraftMill:

Anthropic — processes your niche and keyword inputs to generate content. Subject to Anthropic's Privacy Policy.
Lemon Squeezy — handles all payment processing and subscription management. Subject to Lemon Squeezy's Privacy Policy.
Railway — hosts the application and database on secure cloud infrastructure.
Resend — delivers transactional emails on our behalf.
Cloudflare — provides DNS, CDN, and DDoS protection.

4. Data Retention

We retain your account data for as long as your account is active. Generated files are stored for a reasonable period to allow download; they are not archived indefinitely. If you delete your account, we remove your personal data within 30 days.

5. Security

Passwords are hashed using industry-standard algorithms and never stored in plain text. All data is transmitted over HTTPS. Access to the database is restricted to application infrastructure only.

6. Your Rights

You have the right to access, correct, or delete your personal data at any time. To request a data export or account deletion, email us at support@draftmill.co. We will respond within 30 days.

7. Cookies

We use a single session cookie to keep you logged in. We do not use tracking, advertising, or analytics cookies.

8. Children

DraftMill is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy as the service evolves. We will notify registered users by email of any material changes at least 14 days in advance.

10. Contact

Questions about this policy? Email us at support@draftmill.co. We're a small team and we read every message.