Privacy Policy

DraftYourApp has separate flows for creators and for people who connect an App. Creators sign in with Google to build Apps. People who connect an App do so from ChatGPT. When you connect an App, you may sign in with your email address and a one-time code.

For those App connections, Supabase manages your end-user sign-in account and the permissions granted to the connection. Resend delivers sign-in codes to your email address. Separate secure cookies keep you signed in on the DraftYourApp pages used to connect an App. This sign-in is separate from the Google account you use as a creator.

An App may request approved connection permissions that allow it to receive your email address and profile information. It receives that information only when the connection requests and you approve those permissions; not every App receives your email address.

When you sign in with Google we receive your email address, name and profile picture. We store these to identify you, populate your workspace and send you transactional emails.

We also store:

• Apps, components and configurations you create with the builder.
• API connections you configure. Credentials and OAuth tokens are encrypted at rest using AES-256-GCM.
• Billing data managed by Stripe (we never store payment card details on our servers).
• Aggregated technical logs (timestamps, status codes, error traces) for debugging and abuse prevention.
• App usage metadata: tool name, success or failure, duration and timestamp. We do not store prompts, tool arguments, response content or error text in usage analytics.
• Builder milestones: app creation, successful operation tests and deployed releases, with timestamps and an app, release or document revision reference where available. These records do not establish that an invited user installed or used an app.
• Links to distribution evidence that you explicitly add to a release checklist. You can remove a link by clearing its checklist item.

Saved personal view preferences are stored per App for the verified end-user account. These preferences currently consist of compact view and default page, and DraftYourApp also stores the time they were last updated. Their values do not contain backend passwords, tokens, prompts or credentials.

When you use the App's preference tools, requested preferences are returned to the connected host in ChatGPT. They are not sent to the service configured for the App's request lookups.

Task measurement is optional and off by default. An App owner can enable a measurement policy in the App's analytics settings, but task events are collected only when that current policy is on and the verified end-user account for that App has given explicit per-App permission to measure successful tasks.

Connecting an App through OAuth is independent from task measurement. Approving that connection is neither a task nor an installation, and it does not by itself enable measurement or record a completed task.

Task event rows record the tool name, the server-observed timestamp, an opaque per-App consent key, and owner or environment metadata. They do not include prompts, tool arguments, results or response content, access tokens or credentials.

Task event rows do not include the raw account subject or email address. The separate permission record does retain the verified account subject and the App it belongs to so we can enforce that permission; that limited identity is used only to apply the permission and is not part of task event rows.

App owners see only aggregate counts and summaries for accounts that opted in to measurement. They do not see emails, account subjects, individual histories or identified people or customers.

Task event rows become eligible for deletion 35 days after they are recorded and are removed by a bounded daily cleanup. Rows can remain briefly after the 35-day mark, so we do not promise deletion at the exact instant that period ends.

Saved per-App choices persist until you explicitly change or withdraw them, or until they are invalidated. Authenticated users can open Activity controls at any time to withdraw permission and delete related task history, even after a grant is revoked or the OAuth connection is disconnected.

Changing the owner policy or turning measurement off clears the old permission and related task history. Disconnecting an App stops future authorized collection, but it does not by itself erase task history already retained; withdraw through Activity controls or contact us to remove it.

Account data such as authentication, session, backend and preference records follow a separate retention and deletion lifecycle from task measurement events.

First observed means the earliest task event in the retained history, not necessarily the first-ever task. Returning means tasks recorded on two or more different UTC days.

No installation count is measured or reported. Technical and production counts are separate classifications and are not proof of physical infrastructure isolation.

We process personal data to:

• Authenticate you and operate the Service.
• Deploy the apps you build to our hosting provider.
• Charge your subscription and provide receipts.
• Send transactional emails (sign-in confirmation, billing receipts, trial and renewal notices, security alerts).
• Diagnose errors and improve reliability.

We do not sell your personal data and we do not use the content of your apps to train AI models.

We rely on the following sub-processors to deliver the Service. Each is bound by a data-processing agreement appropriate to the jurisdiction.

• Google (OAuth authentication).
• Supabase (database hosting and authentication backend).
• Vercel (application hosting and edge network).
• Stripe (payment processing).
• Resend (transactional email delivery).
• OpenAI / Anthropic (AI generation, only when explicitly invoked).
• Sentry (error monitoring).
• Upstash (rate limiting).

App usage and builder milestone events become eligible for deletion after 35 days and are removed by a daily cleanup. Links you add to release distribution checklists stop appearing as verified after 180 days and are then removed by the cleanup; you can clear them earlier.

The 35-day cleanup applies to App usage and builder milestone events, not to saved view preferences. Saved view preferences persist across sessions and are removed when the associated App is deleted or the end-user authentication account is deleted. There is no automatic 35-day purge of view preferences. Provider account and session records follow the provider's management and lifecycle.

Disconnecting an App in ChatGPT does not by itself delete the email address, end-user authentication account or saved view preferences held by DraftYourApp.

We retain account and app configuration data while the account is active. If you are a creator, you can delete your builder account from Settings at any time. Deleting your builder account removes your apps, configurations, connections, encrypted credentials and associated analytics and checklist evidence. Stripe and Sentry may retain limited records for legal and accounting purposes.

Under the GDPR, the CCPA and similar regulations you have the right to access, rectify, port and erase your personal data, and to object to or restrict certain processing.

You can exercise these rights directly from the application:

• Export your data: visit Settings → Data & privacy and click Export my data.
• Delete your account: same screen, click Delete account.

The Export my data and Delete account controls on the Settings page apply to a DraftYourApp creator or builder account. They are not a self-service portal for a person whose only account was created by connecting an App.

People who only connected an App can contact us at privacy@draftyourapp.com to request export, correction or deletion of their end-user data.

For other requests, contact us at privacy@draftyourapp.com.

Communications use TLS in transit. Sensitive credentials are encrypted at rest with AES-256-GCM. Database access is restricted via Row Level Security. Webhook payloads are verified with cryptographic signatures.

Our infrastructure runs primarily in the EU and the United States. When data is transferred outside the EEA we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards.

The Service is not directed to children under 16. We do not knowingly collect personal data from minors.

We may update this policy from time to time. Material changes will be notified via email or via a prominent notice in the Service before they take effect.

Questions, requests or complaints? Write to privacy@draftyourapp.com.