Privacy Policy

Who We Are

DraftPop is operated by DruMan Solutions LLC. This policy describes how we collect, use, share, protect, and retain information when you visit draftpop.ai, create an account, generate content, upload files, connect a social account, schedule or publish social posts, or contact us.

Information We Collect

• Account information, such as your name, email address, login details, plan, and preferences.
• Customer content, such as prompts, uploaded files, source material, brand guidance, generated drafts, images, captions, rationales, and scheduling details.
• Connected-account information that you authorize, such as X profile identifiers, Facebook Page identifiers and names, Instagram professional-account identifiers, TikTok open IDs, display names, usernames and avatars, granted permissions, token expiration details, and access or refresh tokens needed to schedule and publish posts. Sensitive tokens are encrypted at rest.
• TikTok publishing information, such as captions, photos, videos, scheduled times, Direct Post or draft-upload choices, audience and interaction settings, commercial-content and AI-generated-content disclosures, consent timestamps, publish IDs, and processing status.
• Billing information handled through Stripe, including payment status, subscription plan, invoices, receipts, and limited transaction records. We do not store full payment card numbers.
• Usage, device, log, security, and cookie data, such as pages viewed, approximate location, browser type, IP address, timestamps, errors, and product events.
• Support and abuse-report information that you send to us.

How We Use Information

• Provide, operate, secure, troubleshoot, and improve DraftPop.
• Generate, refine, and store content, and schedule, upload, or publish posts to X, Facebook, Instagram, LinkedIn, or TikTok at your direction.
• Process subscriptions, billing, receipts, cancellation requests, refunds, and disputes.
• Respond to support, privacy, safety, and abuse reports.
• Detect, prevent, and investigate fraud, spam, misuse, security incidents, and violations of our policies.
• Comply with legal, tax, accounting, platform, payment, and regulatory obligations.

AI and Customer Content

DraftPop uses customer prompts, uploaded files, connected-account information, and generated drafts only to provide the service, support, security, billing, and compliance. DraftPop does not sell customer content.

DraftPop does not use customer content to train DraftPop-owned AI models unless we ask for permission first. We use third-party AI providers to process prompts, uploaded materials, and instructions to produce outputs. Their processing is governed by their applicable terms, data-processing commitments, and the settings available to us.

When you enable saved brand guidance for a draft, DraftPop sends that guidance to the configured AI provider along with your prompt. You choose whether to use it for each request.

• We send only the information needed for the requested generation, refinement, image, scheduling, or context-extraction task.
• DraftPop stores account content so you can return to drafts, schedule social posts, and manage history.
• AI output can be wrong, incomplete, duplicated, biased, outdated, or unsuitable for your audience, so you are responsible for reviewing content before publishing.
• Do not upload passwords, private keys, payment card data, health information, government IDs, or other sensitive information unless you are sure you have the right to process it and it is necessary for your use of DraftPop.

How We Share Information

• Service providers that help us run DraftPop, including hosting, database, AI processing, payments, email, analytics, monitoring, security, and customer support providers.
• X, Meta (including Facebook and Instagram), LinkedIn, and TikTok when you connect an account or ask DraftPop to schedule, upload, publish, or manage content through that account.
• Payment processors, banks, card networks, and fraud-prevention providers for billing and dispute handling.
• Authorities, courts, regulators, or other parties when required by law or needed to protect rights, safety, security, and platform integrity.
• A successor or buyer if DraftPop is involved in a merger, acquisition, financing, restructuring, or sale of assets.

Facebook and Instagram Data

DraftPop uses Meta permissions only for the features you choose. For Facebook Page publishing, these permissions may let DraftPop list Pages you manage, read basic Page information, and create posts. For Instagram publishing, they may let DraftPop read the connected professional account's basic profile information and publish media. DraftPop does not request access to advertising, messages, comments, or insights unless a future feature clearly requires it and you authorize it.

DraftPop sends captions and media to Meta only when you direct us to publish or schedule them. Disconnecting an account removes its locally stored connection and token. Removing DraftPop through Meta also revokes Meta authorization; when Meta sends us the resulting valid deauthorization or deletion request, we delete the related access tokens, connected-account identifiers, and scheduling records tied to that authorization. See Social Account Data Deletion for instructions and automated request status.

TikTok Data

TikTok is currently unavailable for new connections and publishing. Existing connection data and post history remain subject to the controls described below.

DraftPop uses TikTok permissions only for features you choose. The user.info.basic permission lets DraftPop identify and display the TikTok account you connected. The video.publish permission lets DraftPop send an approved photo or video and the settings you chose as a Direct Post. The video.upload permission lets DraftPop send an approved photo or video to your TikTok inbox as a draft for you to finish and publish in TikTok.

For Direct Post, DraftPop sends your approved photo or video, caption, account identifier, and selected publishing settings to TikTok. For Upload as draft, DraftPop sends the approved media and includes the caption for photos. For video drafts, you add or paste the caption in TikTok. You finish editing and publishing both kinds of drafts inside TikTok. DraftPop does not sell TikTok data or use it to train DraftPop-owned AI models.

Disconnecting TikTok removes its locally stored access and refresh tokens. DraftPop keeps your publishing history, cancelled posts, and the account details that link those records to the disconnected account. When you confirm, DraftPop cancels queued posts tied to that connection; posts already being published may still finish. You may also revoke DraftPop in TikTok's authorized-app settings. See Social Account Data Deletion.

Cookies and Analytics

We use necessary cookies to keep you signed in and remember preferences. With your permission, we use PostHog, hosted in the United States, and Vercel Web Analytics to understand referral channels, page visits, feature use, and errors. Optional analytics starts only after you allow it. We respect Global Privacy Control and Do Not Track.

PostHog receives a pseudonymous account identifier and limited product metadata. We exclude names, email addresses, prompts, captions, uploaded files, payment details, URL query strings, and authentication tokens from this tracking. Error messages are replaced with diagnostic codes. Account analytics preferences also control tracking of confirmed generation, scheduling, and publishing outcomes on our servers.

Session recordings require a separate opt-in and are sampled. Input values and page text are masked; images, video, file inputs, and editable content are blocked. Request bodies, headers, and console logs are excluded. Authentication callback, password recovery, and private review pages are excluded from optional tracking.

Use the Privacy choices button to change or withdraw permission. Your choice is remembered for up to 180 days. Withdrawing stops future optional tracking; it does not automatically erase prior records. Contact us to request deletion. Product analytics is retained for up to one year; recordings use PostHog's configured retention period. Analytics may undercount visitors who decline or block tracking.

Data Retention

We keep information for as long as needed to provide DraftPop, maintain security, resolve disputes, comply with legal and tax obligations, and enforce our agreements. When you delete your account, we aim to delete generated drafts, uploaded files, and other account content within 30 days, except for backups, logs, billing records, legal records, security records, and information we must retain for legitimate business or legal reasons. Backup copies are deleted on their normal rotation schedule.

Your Choices and Privacy Requests

Depending on where you live, you may have rights to access, correct, delete, export, or object to certain uses of your personal information. To make a request, email support@draftpop.ai. We may need to verify your identity before completing a request. Instructions for Facebook, Instagram, and TikTok data are also available at Social Account Data Deletion.

International Use

DraftPop is available worldwide. Your information may be processed in the United States and other countries where we or our providers operate. Those locations may have privacy laws different from where you live.

Security

We use administrative, technical, and organizational safeguards designed to protect information, including encryption for sensitive application data where supported. No online service can guarantee perfect security, so please use a strong password and keep connected accounts secure.

Contact and Abuse Reports

For privacy, support, and customer questions, email support@draftpop.ai. To report abuse, spam, impersonation, illegal content, or platform misuse, email support@draftpop.ai with enough detail for us to investigate.