1. Scope and who we are
DraftAhead provides an AI-assisted Gmail organization and drafting service. In this policy, “DraftAhead,” “we,” “us,” and “our” refer to the operator of the DraftAhead service. Questions and privacy requests may be sent to [email protected].
This service is offered only in supported locations and is not currently offered in the European Union or the United Kingdom. It is not intended for anyone under 18.
2. Information we collect
- Account information: your name, email address, profile image, Google account identifier, and sign-in session information.
- Gmail information: your Gmail address, message and thread identifiers, subjects, snippets, senders, recipients, timestamps, label identifiers, classifications, draft identifiers, Gmail signature, and operational history.
- Email content: message bodies are fetched when needed for classification, drafting, scheduling, follow-up checks, and writing-style learning. Raw message bodies are not kept as a general mailbox archive unless you explicitly enable evaluation capture and correct or review a classification; those snapshots are encrypted, expire after 90 days, and can be exported or deleted sooner.
- Calendar information: if you separately choose to connect Google Calendar, DraftAhead reads your time zone and free/busy availability when a scheduling request is detected and Calendar drafting is enabled. Calendar access is not requested during signup or the initial Gmail connection.
- Preferences and derived information: email rules, drafting instructions, alternative addresses, scheduling preferences, classification feedback, explicit draft correction types used for contact-specific personalization, compact hashed text features used to recognize similar automated email templates, compact writing-style profiles, and supporting excerpts, claims, and Gmail message IDs in draft explanations so you can trace claims and resolved requests to their source. Draft explanations, claims, preparation questions, submitted answers, commitment evidence, and draft-write recovery metadata are encrypted in the database with record-specific context.
- AI processing information: the model used and token, latency, request, and error metadata needed to meter, troubleshoot, and protect DraftAhead's managed AI service.
- Billing information: Paddle customer and subscription identifiers, plan, price, subscription status, billing periods, and billing event metadata. DraftAhead does not store complete payment-card details.
- Technical information: essential authentication and OAuth cookies, security information, request errors, and limited operational logs needed to run and protect the service.
3. How we use information
We use information to authenticate you, provide and personalize DraftAhead, classify Gmail threads, create reviewable Gmail drafts, identify follow-ups, suggest verified scheduling availability, process subscriptions, provide support, prevent abuse, secure and troubleshoot the service, and comply with law.
DraftAhead does not send email for you. It does not archive, delete, or mark Gmail messages as read. You remain responsible for reviewing every generated draft before sending it.
4. Google user data and Limited Use
DraftAhead's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use Google user data only to provide or improve prominent user-facing DraftAhead features that you request.
- We do not sell Google user data or use it for advertising, retargeting, or credit decisions.
- We do not use Google Workspace data to train a generalized or shared AI or machine-learning model.
- Human access to Gmail content is prohibited except when you affirmatively request support and consent to access, when needed for security or abuse investigation, when required by law, or when data has been aggregated and anonymized for internal operations.
- Relevant Gmail content is transmitted by DraftAhead to OpenAI for classification and drafting. DraftAhead supplies and pays for the AI service; you do not provide an API key. OpenAI requests are configured with storage disabled.
5. When we disclose information
We disclose information only as needed to provide and protect DraftAhead, including to Google for identity, Gmail, and Calendar access; to OpenAI for classification and drafting; to Paddle for checkout, tax, billing, cancellation, and refunds; and to infrastructure providers that host or secure the service.
We may also disclose information when required by law, to protect rights and safety, or as part of a merger, financing, acquisition, or sale, subject to appropriate confidentiality and notice protections. We do not sell personal information or share it for cross-context behavioral advertising.
6. Retention
- Account and subscription records are retained while your account is active and afterward when reasonably necessary for tax, accounting, fraud prevention, dispute resolution, and legal obligations.
- Gmail metadata is retained while the mailbox is connected and is deleted from DraftAhead after a successful Gmail disconnect or account deletion, subject to pending revocation retries, short-lived backups, and legal requirements.
- Full message bodies are fetched for processing and then discarded unless you explicitly enable evaluation capture and correct or review a classification. Captured evaluation snapshots are encrypted, retained for up to 90 days, can be exported or deleted sooner, and are not written to application logs.
- Generated draft text is retained in encrypted form only while DraftAhead tracks an active draft for edit learning, then cleared when the draft is sent or dismissed. Encrypted explanations, claims, questions, and preparation details for old draft records are cleared after 90 days without an update; expired preparation text is cleared without deleting the workflow record.
- Draft-question answers remain encrypted with their preparation record and conversation revision until the preparation is replaced or its private content expires. Encrypted write-recovery copies are deleted after 30 days if left pending and removed sooner after the draft is tracked or an uncertain write is abandoned. Evidence attached to closed commitments is cleared after 365 days.
7. Your choices and data controls
You may change mailbox preferences, turn Calendar-assisted drafting off, enable or disable evaluation capture, export or delete captured evaluation examples, disconnect Google, manage billing, or delete your DraftAhead account from the application. Disconnecting Google attempts to revoke access and deletes DraftAhead's locally stored mailbox data after revocation succeeds; if revocation temporarily fails, cleanup remains pending while access is disabled. Disconnecting does not remove Gmail messages, existing Gmail labels, or drafts already stored in Gmail.
Account deletion immediately ends access, requests immediate cancellation of an active Paddle subscription, revokes connected Gmail credentials when possible, and deletes account and workspace data from DraftAhead. Some billing and legal records may be retained where required. Instructions are available on the Data Controls page.
You may also email [email protected] to request access to or correction or deletion of personal information. We may verify your identity before completing a request.
8. Cookies and browser privacy signals
DraftAhead uses essential cookies for sign-in security, sessions, and Google OAuth state. We do not currently use advertising cookies or track your activity over time across unrelated websites. Because we do not sell personal information or share it for cross-context behavioral advertising, Global Privacy Control and Do Not Track signals do not change our current practices. If our practices change, we will update this policy and honor applicable opt-out requirements.
9. Security
We use safeguards designed to protect information, including encryption of Google provider tokens before database storage, Gmail refresh tokens, tracked draft text, private draft explanations and commitment evidence; server-side protection of service credentials; access controls; authenticated sessions; webhook signature verification; and data minimization. No online service can guarantee absolute security.
10. Changes and contact
We may update this policy as DraftAhead changes. We will post the updated version and effective date, and we will request renewed acknowledgement before using Google user data for a materially new purpose when required.
Contact: [email protected].