Privacy Policy

1. Introduction

Welcome to Draftbox ("Draftbox," "we," "our," or "us"), a product of Virtual Freedom Academy Limited. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and software services at draftbox.ai.

By creating an account or using Draftbox, you agree to the practices described in this Privacy Policy.

2. Information We Collect

Information You Provide Directly

When you register, subscribe, or use Draftbox, we may collect:

• Name and email address
• Account credentials (managed securely via our authentication provider)
• Billing and payment information (processed by Stripe; we do not store card details)
• Style guide preferences (fonts, colours, brand settings)
• Text prompts and descriptions you submit for AI generation
• Images you upload for use in section generation
• Any other information you choose to provide when contacting us

Information Collected Automatically

When you use Draftbox, we automatically collect certain information to improve our services, including:

• IP address
• Browser type and version
• Device information and operating system
• Log data (usage events, timestamps, errors)
• Cookies and similar technologies

Analytics & Usage Tracking

We use analytics tools, including Meta (Facebook) Pixel, to understand how users interact with our application. This includes tracking page views, feature usage, navigation paths, and purchase events. This data helps us improve our product and measure the effectiveness of our marketing.

3. How We Use Your Information

We use your personal and usage information for purposes including:

• Providing, operating, and maintaining Draftbox
• Processing subscriptions, credit purchases, and payments
• Generating AI-powered website sections based on your prompts and style guides
• Storing your generated sections, favourites, and design history
• Improving features, performance, and user experience
• Troubleshooting issues and monitoring service health
• Responding to inquiries and providing customer support
• Sending transactional emails (account verification, billing confirmations)
• Complying with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information only in these circumstances:

• With trusted service providers who help us operate the service (e.g. Stripe for payment processing, Supabase for authentication and data storage, analytics providers)
• With AI processing services to generate your website sections (your prompts and uploaded images are sent to our generation backend)
• To comply with legal obligations or enforce our agreements
• To protect the rights, property, and safety of Draftbox, our users, or others
• With your consent or at your direction (e.g. exporting sections to Figma via To.Design)

5. Third-Party Services

Draftbox integrates with the following third-party services:

• Supabase — Authentication, database, and file storage
• Stripe — Payment processing for subscriptions and credit purchases
• Meta (Facebook) Pixel — Analytics and conversion tracking
• Google Fonts — Typography rendering
• To.Design — Figma export functionality (when you choose to export)

Each of these services has its own privacy policy governing how they handle your data. We encourage you to review their respective policies.

6. Data Security

We implement technical and organisational safeguards to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication with hashed credentials
• Row-level security on database tables
• Restricted access controls on storage buckets
• Regular security audits and updates

While we strive to protect your information, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. Your generated sections, style guides, and chat history are retained for the duration of your account. If you delete your account, we will remove your personal data within a reasonable timeframe, subject to legal retention requirements.

8. Your Rights & Choices

Depending on your location, you may have the right to:

• Access a copy of your personal data
• Correct inaccurate information
• Request deletion of your personal information
• Restrict or object to certain processing activities
• Data portability (receive your data in a structured format)
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at support@draftbox.ai.

9. Cookies

We use cookies and similar technologies for authentication, session management, and analytics. Essential cookies are required for the service to function. Analytics cookies (such as Meta Pixel) help us understand usage patterns. You can manage cookie preferences through your browser settings, though disabling essential cookies may affect functionality.

10. Children's Privacy

Draftbox is not intended for individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries outside your country of residence. As a UK-based company serving international users, we take appropriate measures to ensure data protection in accordance with this Privacy Policy and applicable data protection laws, including GDPR where applicable.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Updates will be effective upon posting with the "Last Updated" date revised. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: