Legal
Last updated: December 5, 2025
Your privacy matters to us. This policy explains what information OwnDraft collects, how we use it, and when we may share it. It applies to our website and to the research and writing tools powered by AI agents that we offer. By using OwnDraft, you accept how we handle your data as described here.
To create an account, we ask only for what you need to sign in and use the Service: your name and your email address. If you sign up with Google or GitHub, we receive the basic profile information that provider shares. That is all. We do not collect tracking data, browsing history, or anything beyond your login details. We never use your information for statistics, advertising, or any purpose you did not agree to, and we never sell it. Your data stays with us.
When you subscribe to a paid plan, our payment processor handles all billing information. We never see or store your credit card details on our servers. Your payment data stays between you and the payment provider.
The Service stores your projects, documents, drafts, uploaded source files, citations, and writing history. Everything is kept in encrypted databases to prevent vulnerabilities and unauthorized exposure. Your files are only accessible to you, and only through temporary pre-signed URLs that remain valid as long as your account is active.
We keep things simple. We do not store your IP address, browser type, device information, or any tracking data. Your session works with temporary data that exists only while you are using OwnDraft. Once you close your session, everything disappears. We do not keep cookies, browsing history, or any record of how you used the site. This is by design: the less data we hold, the safer you are.
When you interact with our AI agents, the messages, prompts, and responses generated during those interactions are stored locally on your device, not on our servers. We have no access to your conversations or to the searches your agent performs on your behalf. The last fifty messages are kept in your browser's local storage so the agent can reference your previous context while you work. This also means that if you open OwnDraft in a different browser, the conversation from another session will not be available. You may delete your entire conversation history at any time from within the application.
We only collect what is necessary to operate the Service. Your usage data, such as the number of AI requests made, searches performed, or documents uploaded, is stored solely to display your current plan consumption and enforce usage limits. We may also publish aggregated statistics about how OwnDraft is used in general, but these never identify you personally. We do not use your data for advertising, profiling, or any purpose beyond running and improving the Service. Data that has been de-identified or aggregated can no longer be linked to you, and it is not treated as personal information under this policy.
Our AI features process your content to generate writing suggestions, citations, and edits. Your data is used to power AI capabilities exclusively for your account. We do not use your content to train public AI models. Your documents, prompts, and generated content are not shared with other users or used for marketing purposes. AI processing is performed by our trusted AI providers under strict data processing agreements.
We do not sell your personal information, and we do not share it with advertisers or other third parties for marketing. Your data is only disclosed in the specific situations below.
We work with a small number of third-party providers that help us run the Service. None of them receive your personal information. The only exception is our payment processor, which receives the billing data strictly necessary to handle your subscription. Cloud hosting and AI processing providers receive only anonymous technical data required to deliver those features. Every provider is bound by strict contractual obligations to keep whatever data they handle safe and to use it for no other purpose. We never sell, rent, or trade your data with any third party.
We limit access to your personal information to our employees and contractors who need it to operate the Service, and they are bound by confidentiality obligations. Some of them may be located outside your country, and by using the Service you consent to this transfer.
If required by law or in response to a valid request from a public authority, we may be compelled to disclose the limited information we hold. In practice, the only data we have is your basic account information, such as your name and email address. We do not store anything else that could be disclosed.
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your personal information.
You can ask us to delete your personal information at any time by contacting support@owndraft.com. When we delete your account, we remove your projects, documents, drafts, uploaded files, citations, and profile. A full deletion closes your account and cannot be undone. If you only want part of your data removed, tell us and we will remove just that.
Deletion is immediate. Once you confirm, your data is removed from our active systems without delay. Our encrypted backups rotate on a regular cycle, and any data remaining in older backups is purged within a short window as part of normal operations. Because deletion is permanent and cannot be undone, we ask you to confirm your decision before proceeding.
We delete everything as soon as you request it, but a few things must stay behind. Payment and transaction records are kept for a short period because tax authorities require them. If there is an active legal dispute or a lawful request from a court or government agency, we retain whatever information is needed to respond. We also keep a minimal note that an account was closed for abuse, so it cannot simply be reopened. Any data that has been aggregated and can no longer be linked to you may be kept for general statistics.
We implement industry-standard security measures to protect your information, including encryption in transit (TLS) and at rest, access controls, regular security audits, and infrastructure monitoring. No system is completely secure, so we cannot promise absolute security. If we become aware of a security breach, we will notify you promptly by email or through a notice on the Service, as required by law.
If you are located in the European Economic Area (EEA), you have the following rights under the General Data Protection Regulation (GDPR). To protect your privacy, we will verify your identity before fulfilling any request:
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). To protect your privacy, we will verify your identity before fulfilling any request:
We use only two types of cookies: one to keep you signed in during your session and one to remember your language preference. These cookies are temporary and exist only while you are using OwnDraft. When you log out, they are deleted immediately. If you close your browser and return after a long period of time, the session will have expired and you will need to log in again. We do not use cookies for analytics, advertising, or any form of tracking.
OwnDraft does not contain links to external websites. The only third-party services we connect to are our payment processor and the AI APIs that power our features. These connections are governed by the strict contractual obligations described in this policy. If this ever changes, we will update this section accordingly.
The Service is not directed to users under 15 years of age, and we do not knowingly collect personal information from anyone under 15. If we become aware that we have collected personal information from someone under 15, we will take steps to delete it promptly.
If you give us your email address, we may occasionally send you messages about new features or ask for feedback. We try to keep these to a minimum. You can opt out of promotional emails at any time. We will still send you transactional emails about your account, such as billing and security notices, because those are necessary to run the Service.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically. If you keep using OwnDraft after the updated policy takes effect, we will treat that as your acceptance of the changes.
For questions about this Privacy Policy or to exercise your data protection rights, contact us at support@owndraft.com.