DraftloreReturn to the website →YOUR WORK AND YOUR INFORMATION
This Policy explains how Rob Moretti, the operator and privacy contact for Draftlore, collects, uses, discloses, retains, and protects personal information through the Service.
Production review item: insert the operator’s business address and any applicable representative information before launch. Privacy questions and requests may be sent to Rob Moretti at contact@draftlore.ai.
Draftlore and its infrastructure may process IP address, timestamps, browser or device information, request and security logs, authentication attempts, error information, storage health, and feature usage needed to operate, secure, diagnose, and improve the Service.
The application uses cookies for signed-in sessions and security flows. It also uses browser storage, including local storage and IndexedDB, for preferences, offline writing, cached narration, and synchronization. A service worker supports installable and offline behavior.
First-party site analytics uses a random browser identifier in local storage, renewed for up to 90 days, to estimate visits and unique browsers. Standard page names, timestamps, referring domains, and signed-in activity are recorded for the site owner. The analytics store does not include manuscript text, IP addresses, full referring URLs, search parameters, or private share links. Visit records are retained for 90 days; encrypted backups rotate separately. Browsers sending Do Not Track or Global Privacy Control, or blocking local storage, are excluded from this tracking.
Where required, processing may rely on performance of a contract, legitimate interests, consent, or compliance with legal obligations. Counsel should confirm the applicable legal bases and regional disclosures before production.
Draftlore does not use Your Content to train a Draftlore model. When you deliberately invoke Story Buddy, dictation cleanup, memory scanning, narration, transcription, or scanned-document reading, Draftlore sends the information needed for that request to the connected provider. Depending on the feature, this may include a prompt, selected manuscript text, relevant project memory, research excerpts, audio, or document images.
OpenAI and Anthropic process those requests under their API terms and data practices. Your use of a personal provider credential also creates a direct relationship between you and that provider. Review provider settings and policies before connecting an account.
Draftlore may disclose information to service providers only as needed for their functions, including:
We may also disclose information when reasonably necessary to comply with law, respond to valid legal process, protect rights and safety, investigate fraud or security incidents, or complete a business transaction subject to appropriate safeguards and notice.
Draftlore does not sell personal information or manuscripts. With your permission, Draftlore uses Meta Pixel on its marketing and account-entry pages to measure Facebook and Instagram advertising. Meta may receive page URLs, browser and device information, IP address, cookie identifiers, and a free-trial-start event. Meta processes this information under its own data policies. This advertising measurement is separate from Draftlore’s first-party site analytics.
Active account and project information is retained while the account is used and as needed to provide the Service. Project revisions, conversations, research, and related records remain with the project until deleted, restored, or removed through account administration.
Encrypted whole-database snapshots are currently created approximately daily and the newest 14 are retained on the persistent disk. Deleted information may therefore remain temporarily in rotating backups until aged out. Legal, fraud-prevention, security, accounting, or dispute obligations may require longer retention of limited records.
API credentials and Google connection tokens are retained until disconnected, replaced, the account is deleted, or they can no longer be used. Private share links remain until expiration or revocation. Browser-stored offline data may remain on a device until the user clears site data or removes the installed application.
Draftlore provides self-service account deletion in Account Safety. Deleting an account permanently removes the account and active Draftlore data, signs out sessions, disconnects private services, and disables shared manuscript links. Deleted information may remain temporarily in encrypted rotating backups until those backups age out under the retention schedule described above. You may also contact Rob Moretti at contact@draftlore.ai for help with a deletion request. We may verify identity before acting.
Use Advertising preferences on this page to allow or decline Meta advertising cookies, or change your choice later. Meta Pixel is not loaded before you allow it, and is disabled when your browser signals Do Not Track or Global Privacy Control. Your choice is stored locally for up to 180 days. Declining does not prevent you from using Draftlore. Withdrawing permission stops future events; it does not remove information already sent to Meta. We do not load Meta Pixel in the manuscript editor or private review rooms, or intentionally send manuscript content, passwords, API keys, or email addresses in these events.
You can edit project information, export manuscripts, download an emergency account backup, disconnect Google and AI providers, revoke private share links, manage subscription billing, and adjust browser permissions and storage.
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, or information about disclosures, and to appeal or complain to a regulator. You will not be discriminated against for exercising applicable privacy rights. Send requests to contact@draftlore.ai.
If Draftlore later sells or shares information in a manner that creates an opt-out right, appropriate notices and controls—including recognition of legally required preference signals—must be provided before that practice begins.
Draftlore uses measures including salted password hashing, HTTP-only session cookies, per-account authorization, same-origin protections, rate limits, encrypted API credentials and Google tokens, optional two-factor authentication, and encrypted server backups. No method of storage or transmission is perfectly secure.
Draftlore and its providers may process information in the United States and other countries where they operate. Production counsel should confirm required international-transfer terms, regional notices, and processor agreements before offering the Service outside the United States.
Draftlore is intended for adults and is not directed to children under 13. The Terms require users to be at least 18 or the age of legal majority where they live. If you believe a child provided personal information, contact us so we can investigate and delete it when appropriate.
We may update this Policy as the Service or law changes. The updated date will appear above. We will provide notice and seek consent when required for a material change in how existing information is used.
Contact Rob Moretti at contact@draftlore.ai. Never email passwords, API keys, recovery codes, payment-card details, or private manuscript text.