Legal

Privacy Policy

Last updated: May 25, 2026

Draft & Arc ("we", "our", or "us") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and the choices you have. By using our service you agree to the practices described here.

1. Information We Collect

Information you provide

When you create an account we collect your name, email address, and any other details you choose to share. If you complete a purchase we collect billing and payment information, which is processed by our payment provider and never stored on our servers.

Information collected automatically

When you visit Draft & Arc we automatically collect certain technical data including your IP address, browser type, operating system, referring URL, pages viewed, and the time and date of your visit. We use cookies and similar tracking technologies to support this collection - see Section 6 for details.

Information from third parties

If you sign in using a third-party service (e.g. Google), we receive basic profile information such as your name and email address as permitted by that service.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and improve the Draft & Arc platform
  • Personalise your learning experience and AI-generated content
  • Communicate with you about your account, updates, and new features
  • Send you optional marketing emails (you can opt out at any time)
  • Detect, prevent, and respond to fraud or abuse
  • Comply with legal obligations

We do not sell your personal information to third parties.

3. How We Share Your Information

We share your information only in the following circumstances:

  • Service providers. We work with trusted vendors (hosting, analytics, payment processing, email delivery) who process data on our behalf under strict confidentiality agreements.
  • AI model providers. Prompts and learning content you generate may be processed by third-party AI providers. We configure these services to minimise data retention wherever possible.
  • Legal requirements. We may disclose information if required by law, court order, or to protect the rights and safety of Draft & Arc or others.
  • Business transfers. If Draft & Arc is acquired or merges with another company, your information may be transferred as part of that transaction.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you delete your account we will delete or anonymise your data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

5. Data Security

We implement industry-standard technical and organisational measures to protect your information against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over HTTPS. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Cookies and Tracking

We use cookies and similar technologies to:

  • Keep you signed in between sessions
  • Remember your preferences (e.g. blog view layout)
  • Understand how visitors use our site via analytics

We use Google Analytics 4 with Google Consent Mode v2 to measure how visitors find and use our site. By default, analytics and advertising cookies are denied; we only see anonymized, cookieless pings until you accept via the banner shown on your first visit. We also use Microsoft Clarity to capture aggregated session replays and heatmaps that help us improve usability. By default Clarity runs in cookieless mode — it analyzes activity within the current page session but does not set persistent identifiers. After you accept via the banner, Clarity stores cookies so we can recognize returning sessions; see Microsoft's privacy statement for details. You can change your choice at any time by clearing your site data in your browser, and you can control cookies through your browser settings. Disabling cookies may affect some functionality of the service.

7. Your Rights

Depending on your location you may have the following rights regarding your personal information:

  • Access. Request a copy of the personal data we hold about you.
  • Correction. Ask us to correct inaccurate or incomplete data.
  • Deletion. Request that we delete your personal data.
  • Portability. Receive your data in a structured, machine-readable format.
  • Objection. Object to certain uses of your data, including direct marketing.
  • Withdrawal of consent. Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at team@draftandarc.com. We will respond within 30 days.

8. Children's Privacy

Draft & Arc is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

9. International Transfers

Your information may be transferred to and processed in countries other than your own. Where such transfers occur we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes we will notify you by email or by posting a notice on our website at least 14 days before the change takes effect. The "Last updated" date at the top of this page reflects the most recent revision.

11. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, email us at team@draftandarc.com.

This policy was last reviewed on May 25, 2026. Previous versions are available on request.