Privacy Policy

1. Data Controller Information

Legal Entity: Kliment Paskalev Limited
Trading Name: DraftSEO.ai
Website: draftseo.ai
Company Number: 15094793 (England and Wales)
Registered Office: 197B Powerscourt Road, Portsmouth, PO2 7JH, United Kingdom
Email: support@draftseo.ai
Data Protection Officer: Not appointed (not required for our business)

2. Information We Collect

2.1 Personal Information You Provide

• Account Information: Email address, name, password (encrypted)
• Billing Information: Payment details processed through Paddle (not stored by us)
• Content Data: Blog prompts, keywords, generated content
• Communication Data: Support messages, feedback, preferences

2.2 Automatically Collected Information

We collect technical information for service functionality, analytics, and marketing optimization:

• Session Data: Authentication tokens (JWT), session cookies
• Network Data: IP address and user agent information for service delivery, security, and analytics
• Location Data: Approximate geographic location derived from IP address
• Analytics Data: Anonymized usage patterns via Google Tag Manager, Google Analytics, and Microsoft Clarity
• Marketing Data: Interaction tracking via Meta Pixel and similar advertising and analytics tags, which you can manage through our cookie banner (see our Cookie Policy)

2.3 Information We Do NOT Collect

• Detailed browsing history outside our platform
• Precise location data (GPS coordinates)
• Social media profile data beyond authentication
• Biometric data or sensitive personal information

2.4 Third-Party Services & Integrations

YouTube API Services: This application uses YouTube API Services to provide video search and embedding functionality. For information about how Google collects and uses data, please review Google's Privacy Policy.

CMS & Platform Publishing Integrations: When you connect a publishing platform (for example WordPress, Shopify, Wix, Webflow, Ghost, Notion, HubSpot, Blogger, or any of the others listed in the app), we store the connection credentials or access tokens encrypted (AES-256-CBC) and transmit your generated content and images to that platform on your instruction. You can disconnect any platform at any time from your settings.

Google Search Console & Blogger:If you connect Google Search Console or Blogger, we access your Google user data (such as Search Console performance data for your verified sites, or your Blogger blogs) via Google OAuth solely to provide the features you request. DraftSEO's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time from your settings or your Google account.

Website Analysis: When you add a website (and, if you use competitor features, competitor websites), we fetch and analyze publicly available pages of that website to build your site profile and content plan. Extracts of that content may be processed by the AI providers listed below.

Backlink Exchange:If you opt a website into the Backlink Exchange, the content of your published articles is compared against other participating customers' articles (including via AI embeddings) to find relevant matches, and your article titles and URLs are shared with matched participants as inserted links.

Hosted Content Feeds: For integrations that publish via a hosted feed (for example Squarespace, Lovable, Base44, and Replit), your published articles and images are served publicly from our infrastructure and content delivery network to any visitor who has the feed address.

Facebook Page Integration: When you connect your Facebook Page through our platform, we use the Meta (Facebook) Graph API to enable automatic publishing of your blog content to your Facebook Page. We collect and store the following data from Meta:

• Facebook Page ID and Page Name: To identify which Page to publish to
• Page Access Token: Stored encrypted (AES-256-CBC) to authorize publishing on your behalf
• Facebook User ID: To associate the connection with your DraftSEO.ai account
• Publication metadata: Post IDs and URLs of content published to your Page

We use Meta's pages_show_list, pages_read_engagement, and pages_manage_postspermissions solely to list your Pages, read engagement data for publishing verification, and publish content you have explicitly authorized. You can disconnect your Facebook Page and delete all associated data at any time from your Profile > Integrations settings. For more information on how Meta handles your data, please review Meta's Privacy Policy.

3. Legal Basis for Processing

• Contract Performance (Art. 6(1)(b)): Account data, billing data, content generation, publishing to platforms you connect
• Consent (Art. 6(1)(a)): Marketing communications, Meta Pixel tracking, marketing tags
• Legitimate Interest (Art. 6(1)(f)): Analytics and usage data for service improvement

4. Third-Party Data Sharing

We do not sell, rent, or trade your personal information. We share data only with essential service providers (subprocessors):

• OpenAI (USA): AI text generation, embeddings, image generation, and content moderation
• Anthropic (USA): AI text generation (Claude models)
• Google (USA): Gemini image generation; Google APIs for features you connect (Search Console, Blogger, YouTube)
• Fal.ai (USA): FLUX.1 image generation
• Paddle (UK/EU): Payment processing as Merchant of Record
• SendGrid (USA): Transactional and lifecycle emails
• Vercel (USA): Application hosting
• Neon (USA): Database (Postgres) hosting
• Cloudflare R2: Image storage and content delivery
• Serper (USA): Search results used for research and analysis features
• DataForSEO (USA): Keyword and search data used for keyword research
• Microsoft Clarity (USA): User experience analysis
• Google Tag Manager (USA): Analytics and marketing
• Meta Platforms (USA): Advertising measurement (with consent), Facebook Page auto-publishing (with authorization)
• ContentSquare (USA/EU): Session analytics and replay
• Google Analytics & reCAPTCHA (USA): Usage analytics and bot/abuse protection
• Jina AI (USA): Website content extraction when building a site profile or preset from a URL
• Slack (USA): Support-chat messages

5. Your Rights

Under GDPR and CCPA, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at support@draftseo.ai.

California (CCPA/CPRA):You may opt out of the "sale" or "sharing" of personal information. Our advertising cookies and the Meta Pixel may involve "sharing" for cross-context behavioral advertising; we honor the Global Privacy Control (GPC) browser signal as an opt-out. We do not sell personal information for money.

6. Data Retention

• Account Data: Retained while your account is active. To close your account and delete your data, contact support@draftseo.ai — deletion is completed within 30 days of your request
• Generated Content: Retained until you delete it or your account
• Billing Records: 7 years for tax compliance
• Analytics Data: Anonymized, retained for 26 months

7. Data Security

We implement industry-standard security measures including:

• TLS 1.3 encryption for all data in transit
• AES-256-CBC encryption for stored CMS and platform credentials and access tokens
• Secure password hashing (bcrypt)
• Regular security audits
• Access controls and monitoring

8. International Data Transfers

Your data may be transferred to and processed in the United States. We ensure adequate protection through Standard Contractual Clauses and compliance with the EU-U.S. Data Privacy Framework.

9. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on our website.

11. Contact Us

For privacy-related inquiries, contact us:

Email: support@draftseo.ai
Address: Kliment Paskalev Limited, 197B Powerscourt Road, Portsmouth, PO2 7JH, United Kingdom