Privacy Policy

DraftBuddy is a business document platform provided by Freedom Coast Innovations. This Privacy Policy is effective as of July 14, 2026 and describes how DraftBuddy collects, uses, shares, and protects information for accounts, workspaces, documents, templates, assets, clients, company profiles, approvals, activity, usage, exports, settings, and billing.

For account holders, Freedom Coast Innovations acts as the data controller of account, billing, and service data. For business content that users and workspaces store in DraftBuddy — such as client records, company profiles, and document content — the workspace and its owners decide what is stored, and Freedom Coast Innovations processes that content on their behalf to provide the service.

DraftBuddy collects account data such as name, email, authentication identifiers, profile photo, job title, phone, and user settings.

Workspace and team data may include workspace names, roles, permissions, invitations, approvals, activity logs, and member metadata.

Business data may include company profiles, client/contact records, projects, documents, document versions, templates, prompts, AI outputs, structured document fields, uploaded assets/logos/files, exports, and support communications.

Billing and subscription data is processed through Stripe. DraftBuddy stores plan, customer, subscription, status, billing period, and usage metadata. DraftBuddy does not store full card numbers; payment card details are collected and held by Stripe.

Technical data may include device, browser, IP address, session/local storage data, cookies, usage events, logs, and error data generated while operating the service.

DraftBuddy uses data to provide accounts, authentication, workspaces, document generation, previews, exports, templates, assets, approvals, activity, support, security, billing, usage enforcement, troubleshooting, and product improvement.

DraftBuddy may use account and workspace data to communicate about service messages, billing, password resets, security, policy updates, and support.

DraftBuddy does not sell personal information and does not share personal information with third parties for their own advertising.

Prompts, selected workspace context, document content, structured fields, templates, client/company data, and outputs may be sent to AI providers such as OpenAI to generate or transform content.

Users should avoid entering unnecessary sensitive information. AI providers process submitted content according to their applicable terms, data processing terms, and privacy policies.

DraftBuddy shares data only with service providers that help operate the service: Supabase (authentication, database, and file storage), Stripe (payments and billing), OpenAI (AI generation), and the hosting provider that serves the application. See the Subprocessors page for the current list.

Workspace members may be able to view content and activity depending on their roles, permissions, and visibility settings. Workspace owners and admins control membership and roles.

DraftBuddy may disclose information for legal compliance, safety, security, fraud prevention, or a business transfer such as merger, acquisition, financing, or asset sale.

DraftBuddy uses cookies, browser storage, and session tokens to keep users signed in, remember the active workspace, theme, and preferences, provide security, and operate the app. These are required for the service to function and are not used for third-party advertising.

Account and workspace data is retained for as long as the account or workspace remains active.

When an account or workspace is deleted, associated content is deleted from active systems within 30 days and cleared from routine backups within 90 days.

Billing, invoice, and tax records are retained for up to 7 years where required for tax, accounting, and legal compliance. Security and fraud-prevention logs may be retained for up to 12 months.

Users may request access to, correction of, export of, or deletion of their data at any time by emailing marketing@freedomcoastinnovations.com from the email address associated with their account. DraftBuddy verifies each request and responds within 30 days.

Individual accounts can be deleted separately from workspace data. Because a workspace may contain content that belongs to a business and its other members, requests to delete an entire workspace and its content must come from a workspace owner.

Deletion is permanent once completed. Where an export is wanted, request it before or together with the deletion request and it will be provided first. See the Data Deletion page for the full workflow.

Depending on where you live, you may have additional rights over your personal information — including rights to know, access, correct, delete, port, and object to or restrict certain processing under laws such as the California Consumer Privacy Act (CCPA/CPRA), other U.S. state privacy laws, and the EU/UK GDPR.

DraftBuddy honors these rights for all users regardless of location through the same request process: email marketing@freedomcoastinnovations.com. DraftBuddy does not sell or share personal information as those terms are defined under the CCPA, and does not use personal information for cross-context behavioral advertising. You will not be discriminated against for exercising any privacy right.

If you are in the EU/UK and believe your rights have been violated, you may also lodge a complaint with your local supervisory authority.

DraftBuddy uses reasonable technical and organizational security measures, including encrypted connections, role-based workspace access controls, and optional two-factor authentication, but no online service can guarantee absolute security.

DraftBuddy is a business tool, is not directed to children under 16, and does not knowingly collect children's data. Users should not upload children's data or sensitive regulated data unless they are authorized and the use is appropriate for the service.

Data is processed in the United States and in other locations where DraftBuddy's service providers operate.

DraftBuddy may update this Privacy Policy as the service, providers, or legal requirements change. Material changes will be announced through the app or by email, and the effective date on this page will be updated.

Privacy questions and requests should be sent to marketing@freedomcoastinnovations.com.