Back to DraftSpark

Privacy Policy

Last updated: 21 July 2026

This Privacy Policy explains how DraftSpark (“DraftSpark”, “we”, “us” or “our”) collects, uses and protects personal information when you visit getdraftspark.com or use the DraftSpark writing service.

1. Information we collect

We may collect:

  • Account information: your name, email address and authentication identifiers when you create an account or sign in with email and password.
  • Content you provide: documents, writing profiles, project information, instructions and other material you submit.
  • Subscription information: your plan, billing status and transaction references. Stripe processes payments; we do not receive or store your complete card details.
  • Technical and usage information: browser and device information, IP address, timestamps, pages viewed, and diagnostic or security events.
  • Communications: information you include when contacting us for support or providing feedback.

2. How we use information

We use personal information to provide and secure DraftSpark, authenticate users, save and analyse writing, generate requested feedback, manage subscriptions, respond to support requests, improve performance and reliability, prevent fraud or misuse, and comply with legal obligations.

3. Writing and AI processing

When you request an evaluation, rewrite or other AI-assisted feature, relevant content and instructions may be sent to an AI service provider to generate the requested result. Do not submit confidential, regulated or sensitive personal information unless you have the right and a suitable reason to do so. AI-generated suggestions may be inaccurate and should be reviewed before use.

4. Legal bases

Where UK data-protection law applies, we process information because it is necessary to perform our contract with you, because we have legitimate interests in operating and improving a secure service, because you have given consent where required, or because we must comply with a legal obligation.

5. Service providers and sharing

We use trusted providers including Supabase for authentication and data infrastructure, Resend to deliver authentication emails, OpenAI for AI-assisted writing features, Stripe for payments, and Vercel for hosting and delivery. They process information on our behalf or under their own terms as applicable. We may also disclose information when required by law, to protect rights and safety, or as part of a business reorganisation. We do not sell your personal information.

6. International transfers, retention and security

Some providers may process information outside the United Kingdom. Where required, we rely on recognised safeguards. We retain information while your account is active and afterwards only where reasonably needed for backups, disputes, enforcement or legal requirements. We use reasonable security measures, although no internet service can guarantee absolute security.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete or restrict the use of your information, object to processing, receive a portable copy, or withdraw consent. These rights can be subject to lawful exceptions.

8. Cookies, analytics and local storage

DraftSpark uses cookies or similar browser storage where needed to keep you signed in, remember service state, support security and operate core features. We use Google Analytics, Microsoft Clarity and Umami Analytics to understand how visitors use the website, including pages viewed, approximate location, device and browser information, clicks, scrolling and other interactions with the service. Google, Microsoft and other third-party services may set their own cookies during analytics, authentication or payment flows.

9. Children

DraftSpark is not directed to children under 18, and we do not knowingly collect their personal information.

10. Changes and contact

We may update this policy and will publish the revised version here with a new date. For privacy questions or requests, email privacy@getdraftspark.com. UK users may also complain to the Information Commissioner’s Office at ico.org.uk.