Privacy Policy

Who We Are

DraftPop is operated by DruMan Solutions LLC. This policy describes how we collect, use, share, protect, and retain information when you visit draftpop.ai, create an account, generate content, upload files, connect a social account, schedule or publish social posts, or contact us.

Information We Collect

• Account information, such as your name, email address, login details, plan, and preferences.
• Customer content, such as prompts, uploaded files, source material, generated drafts, images, captions, rationales, and scheduling details.
• Connected-account information that you authorize, such as X profile identifiers, Facebook Page identifiers and names, Instagram professional-account identifiers and usernames, granted permissions, token expiration details, and access or refresh tokens needed to schedule and publish posts. Sensitive tokens are encrypted at rest.
• Billing information handled through Stripe, including payment status, subscription plan, invoices, receipts, and limited transaction records. We do not store full payment card numbers.
• Usage, device, log, security, and cookie data, such as pages viewed, approximate location, browser type, IP address, timestamps, errors, and product events.
• Support and abuse-report information that you send to us.

How We Use Information

• Provide, operate, secure, troubleshoot, and improve DraftPop.
• Generate, refine, and store content, and schedule or publish posts to X, Facebook, or Instagram at your direction.
• Process subscriptions, billing, receipts, cancellation requests, refunds, and disputes.
• Respond to support, privacy, safety, and abuse reports.
• Detect, prevent, and investigate fraud, spam, misuse, security incidents, and violations of our policies.
• Comply with legal, tax, accounting, platform, payment, and regulatory obligations.

AI and Customer Content

DraftPop uses customer prompts, uploaded files, connected-account information, and generated drafts only to provide the service, support, security, billing, and compliance. DraftPop does not sell customer content.

DraftPop does not use customer content to train DraftPop-owned AI models unless we ask for permission first. We use third-party AI providers to process prompts, uploaded materials, and instructions to produce outputs. Their processing is governed by their applicable terms, data-processing commitments, and the settings available to us.

• We send only the information needed for the requested generation, refinement, image, scheduling, or context-extraction task.
• DraftPop stores account content so you can return to drafts, schedule social posts, and manage history.
• AI output can be wrong, incomplete, duplicated, biased, outdated, or unsuitable for your audience, so you are responsible for reviewing content before publishing.
• Do not upload passwords, private keys, payment card data, health information, government IDs, or other sensitive information unless you are sure you have the right to process it and it is necessary for your use of DraftPop.

How We Share Information

• Service providers that help us run DraftPop, including hosting, database, AI processing, payments, email, analytics, monitoring, security, and customer support providers.
• X and Meta, including Facebook and Instagram, when you connect an account or ask DraftPop to schedule, publish, or manage content through that account.
• Payment processors, banks, card networks, and fraud-prevention providers for billing and dispute handling.
• Authorities, courts, regulators, or other parties when required by law or needed to protect rights, safety, security, and platform integrity.
• A successor or buyer if DraftPop is involved in a merger, acquisition, financing, restructuring, or sale of assets.

Facebook and Instagram Data

DraftPop uses Meta permissions only for the features you choose. For Facebook Page publishing, these permissions may let DraftPop list Pages you manage, read basic Page information, and create posts. For Instagram publishing, they may let DraftPop read the connected professional account's basic profile information and publish media. DraftPop does not request access to advertising, messages, comments, or insights unless a future feature clearly requires it and you authorize it.

DraftPop sends captions and media to Meta only when you direct us to publish or schedule them. Disconnecting an account removes its locally stored connection and token. Removing DraftPop through Meta also revokes Meta authorization; when Meta sends us the resulting valid deauthorization or deletion request, we delete the related access tokens, connected-account identifiers, and scheduling records tied to that authorization. See Social Account Data Deletion for instructions and automated request status.

Cookies and Analytics

We may use cookies and similar technologies to keep you signed in, remember preferences, measure site usage, understand product performance, protect against abuse, and improve DraftPop. Your browser may let you block or delete cookies, but some features may not work correctly without them.

Data Retention

We keep information for as long as needed to provide DraftPop, maintain security, resolve disputes, comply with legal and tax obligations, and enforce our agreements. When you delete your account, we aim to delete generated drafts, uploaded files, and other account content within 30 days, except for backups, logs, billing records, legal records, security records, and information we must retain for legitimate business or legal reasons. Backup copies are deleted on their normal rotation schedule.

Your Choices and Privacy Requests

Depending on where you live, you may have rights to access, correct, delete, export, or object to certain uses of your personal information. To make a request, email support@draftpop.ai. We may need to verify your identity before completing a request. Instructions for Facebook and Instagram data are also available at Social Account Data Deletion.

International Use

DraftPop is available worldwide. Your information may be processed in the United States and other countries where we or our providers operate. Those locations may have privacy laws different from where you live.

Security

We use administrative, technical, and organizational safeguards designed to protect information, including encryption for sensitive application data where supported. No online service can guarantee perfect security, so please use a strong password and keep connected accounts secure.

Contact and Abuse Reports

For privacy, support, and customer questions, email support@draftpop.ai. To report abuse, spam, impersonation, illegal content, or platform misuse, email support@draftpop.ai with enough detail for us to investigate.