Privacy Policy

1. Introduction

Draftlume, Inc. ("the Company," "we," "us," or "our") operates the website draftlume.com (the "Service"). We are based at 11150 Santa Monica Blvd, Suite 700, Los Angeles, CA 90064 and can be reached at [email protected].

Draftlume provides AI-assisted campaign copy generation for B2B marketing and demand-gen teams. Our core product processes brand documentation -- style guides, past campaign materials, and voice guidelines -- submitted by subscribers, and uses that material to generate on-brand campaign drafts including email sequences, ad copy, and landing page content. This Privacy Policy explains what information we collect through the Service, how we use it, and the rights you have regarding that information.

This Policy applies to information we collect through draftlume.com, through direct communications with us, and through your use of the Draftlume platform.

2. Information We Collect

2.1 Information You Provide

We collect information you submit directly, including:

• Account registration details (name, email address, company name) when you create a Draftlume account;
• Contact details (name, email, phone) when you fill out a form, request information, or subscribe to updates;
• Payment information processed through our third-party payment processor (we do not store full card numbers);
• Brand materials you upload to the platform, including style guides, past campaign copy, and voice documentation, for the purpose of generating on-brand drafts;
• Generated content and drafts you create within the Service;
• The content of any messages, support requests, or feedback you send us.

2.2 Information Collected Automatically

When you visit draftlume.com, we automatically collect limited technical information:

• IP address and approximate location (city/region level);
• Browser type, operating system, device class;
• Pages visited, referring URLs, time on page, session duration;
• Cookie and similar identifiers (see Section 5 and our Cookie Policy).

2.3 What We Do Not Collect

We do not use the brand materials, style guides, past campaign content, or AI-generated drafts you submit to train any shared or third-party model. Your brand voice data is used solely to generate your own drafts within your account. We do not sell this content or make it available to other users or organizations.

2.4 We Do Not Knowingly Collect Children's Data

draftlume.com is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact [email protected] and we will delete it.

3. How We Use Information

We use the information we collect to:

• Operate your Draftlume account and provide the campaign copy generation service;
• Process and generate AI-assisted drafts from the brand materials you upload;
• Respond to inquiries, support requests, and provide requested information;
• Process payments and manage your subscription;
• Send service updates, product announcements, and (with your consent where required) marketing communications;
• Maintain revision history and versioning within your account;
• Detect, investigate, and prevent fraud or abuse;
• Comply with legal obligations.

We do not sell personal information for monetary value. Where applicable state law treats certain advertising arrangements as a "sale" or "share," see your state's section below.

4. Sharing of Information

We share personal information only with:

• Service providers acting on our behalf (e.g., cloud hosting, email delivery, payment processing, analytics) under contractual confidentiality terms that restrict their use of data to service delivery purposes;
• Authorities, when required by law or to protect rights, safety, or property;
• A successor entity in the event of a merger, acquisition, or asset sale, subject to this Policy.

We do not sell personal information to third parties. We do not share your uploaded brand materials, style guides, or generated content with other customers or with advertising networks.

5. Cookies and Tracking

We use cookies and similar technologies to operate the site, remember preferences, and measure usage. For details and choices, see our Cookie Policy.

6. Data Retention

We retain personal information only as long as needed for the purposes described, to comply with legal or accounting obligations, and to resolve disputes. Account data is retained for the duration of your subscription and for a reasonable period following account closure to allow for account recovery requests and legal compliance. Inactive marketing-list contacts are purged after 24 months. Server access logs are retained 90 days, then aggregated. Brand materials and generated drafts are retained for the duration of your account; upon account deletion, these are removed from production systems within 30 days.

7. Security

We use administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, restricted-access databases, and least-privilege access controls. Brand materials submitted to the platform are stored in isolated, access-controlled environments not shared across accounts. No system is perfectly secure; we cannot guarantee absolute security.

8. Your General Rights

Depending on your jurisdiction, you may have rights including access, correction, deletion, and the ability to limit certain processing. To make a request, email [email protected]. We will respond within the timeframe required by applicable law.

9. California Residents (CCPA / CPRA)

Under the California Consumer Privacy Act ("CCPA") and the California Privacy Rights Act ("CPRA"), California residents have specific rights regarding personal information collected about them. This section supplements the rest of the Policy.

9.1 Categories We Collect

In the past 12 months, we have collected the following categories of personal information defined under Cal. Civ. Code §1798.140: identifiers (name, email, IP); commercial information (service subscription, billing records, service inquiries); internet activity (browsing on draftlume.com, platform usage); professional or employment-related information (company name, job role provided during registration); and inferences drawn from the above for service-improvement purposes. As part of the platform service, we also process brand documentation and campaign copy materials you upload; this content may contain information about your business and customers, which you control and which we process solely on your behalf to generate drafts.

9.2 Sources, Purposes, Disclosure

We obtain this information from you directly and through automatic site instrumentation. We use it to operate and improve the Service, process your account and subscription, communicate with you, and meet legal obligations. We disclose it only to service providers under written contract and to legal authorities where required.

9.3 Your CCPA / CPRA Rights

• Right to Know: request the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to Delete: request deletion of personal information we collected from you, subject to legal exceptions.
• Right to Correct: request correction of inaccurate personal information.
• Right to Opt Out of Sale or Sharing: we do not sell personal information; we do not "share" it for cross-context behavioral advertising as defined under CPRA.
• Right to Limit Use of Sensitive PI: we do not use sensitive personal information for purposes beyond those permitted without authorization.
• Right to Non-Discrimination: we will not deny services, charge different prices, or provide a different level of service because you exercised a right.

9.4 How to Exercise

Submit a verifiable request by emailing [email protected] with the subject line "California Privacy Request." Include enough detail for us to verify you are the person whose information is the subject of the request. We respond within 45 days, with a possible 45-day extension for which we will notify you.

9.5 Authorized Agents

You may designate an authorized agent to make a request on your behalf. The agent must provide proof of authorization; we may also require you to verify your identity directly.

9.6 "Shine the Light"

California Civil Code §1798.83 entitles California residents to request information regarding our disclosure of personal information to third parties for direct marketing. We do not disclose personal information for third-party direct marketing.

9.7 Do Not Track and Global Privacy Control

Under the California Online Privacy Protection Act (Cal. Bus. & Prof. Code §22575), we disclose how we respond to "Do Not Track" (DNT) browser signals. Because there is no common industry standard for interpreting DNT signals, we do not currently respond differently to them. We do not authorize third parties to collect personally identifiable information about your activity across different websites when you use the Service. We honor an opt-out preference signal sent by a platform or browser that complies with the CPRA, such as the Global Privacy Control (GPC); when we detect a GPC signal, we treat it as a valid request to opt out of the sale or sharing of personal information for that browser or device.

10. Changes to This Policy

We may update this Policy from time to time. Material changes will be reflected by a new "Last updated" date and, where appropriate, a notice on the Service.

11. Contact

Questions, requests, or complaints can be sent to: