Privacy Policy

1. Who Is Responsible for Your Data

The controller of your personal data is:

2. Data We Collect

Account data

You create an account with an email address and password, or with Google or Apple. We store your email address, when you signed up, and whether your account has been approved.

• Email and password: your password is handled by our authentication provider, Supabase, which stores only a hashed password. We do not store plain-text passwords.
• Sign in with Google or Apple: no password is created, unless you later set one with “Forgot password”. We receive the details the provider shares with us. Google shares your email address and basic profile (name and profile picture link). Apple shares your email address, which can be a private relay address, and your name if you choose to share it (the iOS app discards the name and does not send it to us). Supabase keeps the details it receives with your account record; Drafto itself uses only your email address. Signing in with Google or Apple using the email address of an existing account links the two.

Account approval

Drafto is invite-only: new sign-ups are reviewed manually before the account is activated. When you sign up, our administrator receives an email with your email address and the time you signed up, and we email you once your account is approved. A sign-up that is not approved may be deleted.

Notes and content

Your notebooks, notes, and attachments are stored in our database and file storage (hosted by Supabase) so they can sync across your devices. Content is associated with your user account. When you edit a note, we keep the earlier versions of its content for 30 days so they can be recovered after an accidental overwrite.

Imports from Evernote (.enex) and TickTick (CSV) are processed from files you upload. We never connect to your Evernote or TickTick account.

Support emails

When you email support@drafto.eu, we receive your email address and name as they appear in your email, your message, its email headers, and any attachments. Section 4 explains who processes support emails.

Device and usage data

Error and performance monitoring on the web

When you use the web app at drafto.eu, we use Sentry to find and fix bugs. Sentry receives crash reports and error data, and performance data for every page load and request: the page and request addresses, timings, and your browser and device type. Request addresses can include what you type into search, and the file names and temporary links of attachments you view, which work for up to 7 days. Error reports can include your internal account ID and, if the email notifying us of your sign-up fails to send, your email address. Sentry is configured not to collect IP addresses.

Session Replay

The web app also uses Sentry Session Replay, which records about 10% of web sessions and every session in which an error occurs. A replay captures page layout, clicks, and the pages and requests you load. All text and form inputs are masked and images are blocked by default, but request addresses are recorded, and these can include search terms and temporary attachment links.

Analytics (not enabled)

The web app's code includes PostHog, a product-analytics tool, but it is not enabled: no PostHog key is configured, so nothing is sent to PostHog. We will update this policy before we turn on any analytics.

iOS, Android and macOS apps

The iOS, Android and macOS apps contain no analytics or crash-reporting SDK. They send no usage analytics or crash reports to Drafto. If our drafto.eu servers fail to handle a request from one of the apps (for example, an account deletion), the server may record that error in Sentry. Apple and Google may separately collect diagnostic data from your device, depending on your device settings and their own privacy policies.

Signing in to the macOS app with Google or Apple, or opening a macOS password-reset link, takes your browser through a drafto.eu page that hands the result to the app. That page is part of the website, so the web monitoring described above, Sentry error and performance monitoring and Session Replay, applies to it.

To check whether you are online, the iOS and macOS apps send a small request to a Google server (clients3.google.com) about once a minute while you are connected. Google receives your IP address and basic device details from that request, but no account or note data.

Hosting and database logs

Vercel, which hosts drafto.eu, processes every request to the website, including your IP address and browser details, and keeps request logs. Supabase, which runs our database, sign-in and file storage, receives the requests the apps and the web app send to it directly, including your IP address and device or browser details, and keeps request and sign-in logs.

Cookies and browser storage

The web app uses cookies only to keep you signed in. It also stores your light or dark theme choice in your browser, and Session Replay keeps a session marker in your browser's session storage. We use no advertising or analytics cookies.

Offline data

The iOS, Android and macOS apps store a local copy of your notes on your device using SQLite for offline access. This data stays on your device and syncs with our servers when you are online. Files you attach while offline stay on the device only until they upload.

The local copy is erased when you sign out or delete your account in that app. Copies on your other devices stay until you sign out on them or uninstall the app. If a device's session ends on its own, for example because you deleted your account on another device, its copy stays until you uninstall the app or a different account signs in on it.

3. How We Use Your Data

We use your data for these purposes, each with its legal basis under the GDPR:

• Provide the Service: store and sync your notes across devices, run your account, send essential account emails (sign-up confirmation, password reset, approval status), export your notes, and give AI assistants you connect access to your notes. Legal basis: performance of our contract with you (Art. 6(1)(b)).
• Review new sign-ups: keep Drafto invite-only and prevent abuse. Legal basis: our legitimate interests (Art. 6(1)(f)).
• Fix issues and keep the Service secure: error tracking, performance monitoring, Session Replay and hosting logs. Legal basis: our legitimate interest in a reliable and secure Service (Art. 6(1)(f)).
• Provide support: answer your emails, with the help of an AI assistant, and track bug reports and feature requests. Legal basis: our legitimate interest in answering you quickly and improving Drafto (Art. 6(1)(f)), or our contract with you when your request is about your account (Art. 6(1)(b)).
• Meet legal obligations: for example, respond to requests to exercise your rights. Legal basis: legal obligation (Art. 6(1)(c)).

You can object to processing based on our legitimate interests at any time (see Your Rights).

4. Data Sharing

We use the following third-party services to operate Drafto. Google and Apple process your sign-in under their own privacy policies, and only if you choose to sign in with them. Separately, the iOS and macOS apps contact a Google server to check your internet connection (see Section 2).

How we handle support emails

Zoho Mail stores messages to support@drafto.eu in its EU data centre. An AI assistant (Claude, made by Anthropic) reads each support email to sort it, answers many questions automatically, and drafts replies. Messages it cannot answer confidently go to a person. Requests to delete your account or to exercise your privacy rights are always handled by a person, and the assistant has no access to your notes or your account.

Bug reports and feature requests

If you report a bug or request a feature, we may file it as an issue in Drafto's public GitHub repository (github.com/JakubAnderwald/drafto), where anyone can read it. The issue usually quotes your message, and replies you later send on the same email thread are posted on the issue as comments.

Any attachments you sent, including screenshots and other files, are uploaded to the same public repository and linked from the issue, and stay in its history even if the issue is later removed. Your email address is stored in hidden metadata on the issue: it is not shown on the issue page, but anyone can read it through GitHub's API.

We do not share your data with any other third parties, except where the law requires it.

5. Connected AI Assistants (API Keys and MCP)

In Settings on drafto.eu you can create API keys that connect an AI assistant of your choice, such as Claude, to your notes through Drafto's MCP server at drafto.eu/api/mcp. This only happens at your direction. Drafto does not send your notes to any AI provider on its own.

• A key gives the assistant read and write access to all of your notebooks and notes. It can list, read and search them; create, edit, move and trash notes; and create, rename and delete notebooks. Deleting a notebook also permanently deletes any notes already in its trash.
• A key does not give access to your attachment files or your account details.
• What the assistant reads is processed by its provider, under your agreement with that provider and its privacy policy.
• Revoking a key in Settings stops it working immediately. Notes the assistant has already read stay with it.
• We store only a hash of each key, its first few characters, the name you give it, and when it was created, last used and revoked.

6. International Transfers

Your account data, notes and attachments are stored in the EU. Several of our providers are based in the United States or may process data there: Vercel, Sentry, Resend, Anthropic, GitHub, Google and Apple. Supabase is also a US company, although it stores our database in Ireland.

When personal data is transferred outside the European Economic Area, we rely on the EU–US Data Privacy Framework for providers certified under it, and otherwise on the European Commission's Standard Contractual Clauses.

7. Data Storage and Security

• Your account data, notes, attachments and note history are stored by Supabase in the EU (West EU, Ireland)
• Requests to drafto.eu are handled by Vercel, whose servers may be outside the EU
• All data is transmitted over HTTPS/TLS
• Attachments are kept in private storage and shown through temporary links that expire after 7 days. Anyone who has such a link can open the file until it expires
• Your sign-in session is kept in cookies on the web, in the iOS Keychain on iPhone and iPad, and encrypted with the Android Keystore on Android. The macOS app keeps it in app-sandboxed local storage (AsyncStorage) on your Mac, not in the macOS Keychain
• Access controls, including database row-level security, limit each account to its own notebooks, notes and attachments

8. Your Rights

You have the right to:

• Access your data at any time through the Service, or ask us for a copy
• Export your notes and attachments in Evernote (.enex) format from the web app's menu. Each export can include up to 1,000 notes and 200 MB of attachments, so export a large account a few notebooks at a time, or ask us for a copy. Notes in the trash and earlier note versions are not included
• Delete your account and the data stored in it at any time from within the app on the web, iOS, Android or macOS. Deletion is immediate. Some data held outside your account is kept (see Data Retention). See how to delete your account. If your account has not been approved yet, email us to delete it
• Correct your information: edit your notes in the app, reset your password with “Forgot password”, and contact support@drafto.eu to change your email address or correct other account data
• Withdraw an AI assistant's access to your notes by revoking its API key in Settings

For EU residents (GDPR): You additionally have the right to data portability, to restrict processing, to object to processing based on our legitimate interests, and to lodge a complaint with a supervisory authority: in Poland, the President of the Personal Data Protection Office (UODO), or the authority where you live.

9. Data Retention

Your data is retained as long as your account is active.

Notes and notebooks

• Notes you move to the trash are permanently deleted from our servers automatically 30 days later. You can also delete them yourself at any time from the Trash (“Delete forever” on the web, “Delete” in the iOS, Android and macOS apps)
• Deleting a notebook deletes it from our servers immediately, together with any notes in its trash
• On iPhone, iPad and Android, a note already synced to the device is not removed when it is deleted on our servers or on another device: it stays in that app until you delete it there or sign out
• Earlier versions of a note's content are deleted automatically after 30 days
• Attachment files of permanently deleted notes may stay in storage until you delete your account

Your account

• When you delete your account in the app, we immediately delete your account, notebooks, notes, attachments and API keys, including note history
• If you use Sign in with Apple and delete your account in the iPhone or iPad app, Apple asks you to confirm, and we then ask Apple to end Drafto's access to your Apple ID. If you delete your account on the web, Android or a Mac, or skip that step, you can remove Drafto yourself in your Apple ID settings (see how to remove Drafto from your Apple ID)
• If you ask us to delete your account by email, we process the request within 30 days
• Revoked API keys are kept (the hash, first few characters, name and dates described above) until you delete your account

Data held outside your account

• Some data is held outside your account and is not deleted with it: error reports in Sentry and request logs at Vercel, which those services delete after their retention periods; emails we have exchanged with you, and notification emails our administrator received about your sign-up or support requests; and GitHub issues filed from your support emails. Ask us at support@drafto.eu to remove your support emails or issues
• Our support system deletes its run logs after 30 days. It keeps the drafts and notes it saved while handling your email, a record of which email address reported which issue (with that email's subject line and Zoho message reference, so our progress updates reply on the same thread), and the email addresses it has sent automatic replies to, until you ask us to remove them

10. Children's Privacy

Drafto is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date.

12. Contact

If you have questions about this Privacy Policy or want to exercise your rights, contact us at: