Who We Are
DraftPop is operated by DruMan Solutions LLC. This policy describes how we collect, use, share, protect, and retain information when you visit draftpop.ai, create an account, generate content, upload files, connect a social account, schedule or publish social posts, or contact us.
Information We Collect
- Account information, such as your name, email address, login details, plan, and preferences.
- Customer content, such as prompts, uploaded files, source material, generated drafts, images, captions, rationales, and scheduling details.
- Connected-account information that you authorize, such as X profile identifiers, Facebook Page identifiers and names, Instagram professional-account identifiers, TikTok open IDs, display names, usernames and avatars, granted permissions, token expiration details, and access or refresh tokens needed to schedule and publish posts. Sensitive tokens are encrypted at rest.
- TikTok publishing information, such as captions, videos, scheduled times, Direct Post or draft-upload choices, audience and interaction settings, commercial-content and AI-generated-content disclosures, consent timestamps, publish IDs, and processing status.
- Billing information handled through Stripe, including payment status, subscription plan, invoices, receipts, and limited transaction records. We do not store full payment card numbers.
- Usage, device, log, security, and cookie data, such as pages viewed, approximate location, browser type, IP address, timestamps, errors, and product events.
- Support and abuse-report information that you send to us.
How We Use Information
- Provide, operate, secure, troubleshoot, and improve DraftPop.
- Generate, refine, and store content, and schedule, upload, or publish posts to X, Facebook, Instagram, LinkedIn, or TikTok at your direction.
- Process subscriptions, billing, receipts, cancellation requests, refunds, and disputes.
- Respond to support, privacy, safety, and abuse reports.
- Detect, prevent, and investigate fraud, spam, misuse, security incidents, and violations of our policies.
- Comply with legal, tax, accounting, platform, payment, and regulatory obligations.
AI and Customer Content
DraftPop uses customer prompts, uploaded files, connected-account information, and generated drafts only to provide the service, support, security, billing, and compliance. DraftPop does not sell customer content.
DraftPop does not use customer content to train DraftPop-owned AI models unless we ask for permission first. We use third-party AI providers to process prompts, uploaded materials, and instructions to produce outputs. Their processing is governed by their applicable terms, data-processing commitments, and the settings available to us.
- We send only the information needed for the requested generation, refinement, image, scheduling, or context-extraction task.
- DraftPop stores account content so you can return to drafts, schedule social posts, and manage history.
- AI output can be wrong, incomplete, duplicated, biased, outdated, or unsuitable for your audience, so you are responsible for reviewing content before publishing.
- Do not upload passwords, private keys, payment card data, health information, government IDs, or other sensitive information unless you are sure you have the right to process it and it is necessary for your use of DraftPop.
How We Share Information
- Service providers that help us run DraftPop, including hosting, database, AI processing, payments, email, analytics, monitoring, security, and customer support providers.
- X, Meta (including Facebook and Instagram), LinkedIn, and TikTok when you connect an account or ask DraftPop to schedule, upload, publish, or manage content through that account.
- Payment processors, banks, card networks, and fraud-prevention providers for billing and dispute handling.
- Authorities, courts, regulators, or other parties when required by law or needed to protect rights, safety, security, and platform integrity.
- A successor or buyer if DraftPop is involved in a merger, acquisition, financing, restructuring, or sale of assets.
Facebook and Instagram Data
DraftPop uses Meta permissions only for the features you choose. For Facebook Page publishing, these permissions may let DraftPop list Pages you manage, read basic Page information, and create posts. For Instagram publishing, they may let DraftPop read the connected professional account's basic profile information and publish media. DraftPop does not request access to advertising, messages, comments, or insights unless a future feature clearly requires it and you authorize it.
DraftPop sends captions and media to Meta only when you direct us to publish or schedule them. Disconnecting an account removes its locally stored connection and token. Removing DraftPop through Meta also revokes Meta authorization; when Meta sends us the resulting valid deauthorization or deletion request, we delete the related access tokens, connected-account identifiers, and scheduling records tied to that authorization. See Social Account Data Deletion for instructions and automated request status.
TikTok Data
DraftPop uses TikTok permissions only for features you choose. The user.info.basic permission lets DraftPop identify and display the TikTok account you connected. The video.publish permission lets DraftPop send an approved video and the settings you chose as a Direct Post. The video.upload permission lets DraftPop send an approved video to your TikTok inbox as a draft for you to finish and publish in TikTok.
For Direct Post, DraftPop sends your approved video, caption, account identifier, and selected publishing settings to TikTok. For Upload as draft, DraftPop sends only the approved video; you add or paste the caption and complete publishing inside TikTok. DraftPop does not sell TikTok data or use it to train DraftPop-owned AI models. Disconnecting TikTok removes the locally stored TikTok connection and tokens and cancels or removes scheduled posts tied to that connection when you confirm. You may also revoke DraftPop in TikTok's authorized-app settings. See Social Account Data Deletion.
Cookies and Analytics
We may use cookies and similar technologies to keep you signed in, remember preferences, measure site usage, understand product performance, protect against abuse, and improve DraftPop. Your browser may let you block or delete cookies, but some features may not work correctly without them.
Data Retention
We keep information for as long as needed to provide DraftPop, maintain security, resolve disputes, comply with legal and tax obligations, and enforce our agreements. When you delete your account, we aim to delete generated drafts, uploaded files, and other account content within 30 days, except for backups, logs, billing records, legal records, security records, and information we must retain for legitimate business or legal reasons. Backup copies are deleted on their normal rotation schedule.
Your Choices and Privacy Requests
Depending on where you live, you may have rights to access, correct, delete, export, or object to certain uses of your personal information. To make a request, email support@draftpop.ai. We may need to verify your identity before completing a request. Instructions for Facebook, Instagram, and TikTok data are also available at Social Account Data Deletion.
International Use
DraftPop is available worldwide. Your information may be processed in the United States and other countries where we or our providers operate. Those locations may have privacy laws different from where you live.
Security
We use administrative, technical, and organizational safeguards designed to protect information, including encryption for sensitive application data where supported. No online service can guarantee perfect security, so please use a strong password and keep connected accounts secure.
Contact and Abuse Reports
For privacy, support, and customer questions, email support@draftpop.ai. To report abuse, spam, impersonation, illegal content, or platform misuse, email support@draftpop.ai with enough detail for us to investigate.