Privacy Policy

    Privacy Policy


    Last Updated: 4 September 2026


    Introduction


    DraftSanctum AI ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered design platform.


    Information We Collect


    Personal Information

  1. Email address and name when you create an account
  2. Profile information you choose to provide
  3. Payment information (processed securely by Stripe)
  4. Communication preferences and settings

    5. Usage Data

  5. Images you upload for AI processing
  6. Design preferences and settings
  7. Generated designs and transformations
  8. Usage patterns and feature interactions
  9. Technical data including IP address, browser type, and device information

    10. Cookies and Tracking

    We use cookies and similar technologies to:

  10. Maintain your login session
  11. Remember your preferences
  12. Analyze usage patterns
  13. Improve our services

    14. How We Use Your Information


    We use collected information to:

  14. Provide AI design generation services
  15. Process your subscription payments
  16. Send important service notifications
  17. Improve our AI algorithms and features
  18. Ensure platform security
  19. Comply with legal obligations

    20. Data Processing and AI Services


    Image Processing

  20. Images you upload are processed by our AI systems
  21. Images may be temporarily stored for processing
  22. We do not use your images to train our AI models
  23. Processed images are automatically deleted after 30 days

    24. Third-Party Services

    We use the following services:

  24. **Supabase**: Database and authentication
  25. **Stripe**: Payment processing
  26. **External AI APIs**: Image generation and processing

    27. Data Sharing and Disclosure


    We do not sell your personal information. We may share data:

  27. With service providers under strict confidentiality agreements
  28. To comply with legal requirements
  29. To protect our rights and users' safety
  30. In case of business transfers (with notice)

    31. Your Rights (GDPR)


    If you're in the EU/UK, you have rights to:

  31. Access your personal data
  32. Correct inaccurate information
  33. Delete your data (right to be forgotten)
  34. Restrict or object to processing
  35. Data portability
  36. Withdraw consent

    37. Data Security


    We implement industry-standard security measures:

  37. Encryption in transit and at rest
  38. Regular security audits
  39. Access controls and monitoring
  40. Secure payment processing

    41. Data Retention


  41. Account data: Retained while your account is active
  42. Usage data: Retained for analytics (anonymized after 2 years)
  43. Images: Automatically deleted after 30 days
  44. Payment data: Retained per legal requirements

    45. International Transfers


    Your data may be processed in countries outside your residence. We ensure adequate protection through:

  45. Standard contractual clauses
  46. Adequacy decisions
  47. Other appropriate safeguards

    48. Children's Privacy


    Our service is not intended for users under 16. We do not knowingly collect data from minors.


    Changes to Privacy Policy


    We may update this policy occasionally. Material changes will be communicated via email or prominent notice.


    Contact Information


    For privacy questions or to exercise your rights:

  48. **Email**: privacy@d-app.online
  49. **Address**: London, UK

    50. Data Protection Officer


    For GDPR-related inquiries, contact our DPO at: info@d-app.online