Privacy Policy

What Draftboard stores, where it runs, and which services it sends your data to. Draftboard is in beta and this policy may change as the product does.

TODO: effective date of this document.

TODO: legal entity name and registered address.

What we store

When you use Draftboard, we store:

  • Your account email address.
  • The workspaces and canvas content you create: notes, files, images, links and anything else you put in a workspace.
  • Messages in your conversations with Workspace AI.
  • Feedback you submit from inside the app.
  • Product usage events: which features you used, such as opening a workspace or sending a first AI message. These events never include canvas content, note text, prompts, code or screenshots.

We don't sell personal data.

Sign-in

Sign-in is passwordless. You enter your email and we send you a link; there is no password for us to store. Authentication is handled by Supabase.

Where your data is processed

Draftboard runs on these services:

  • Vercel hosts the application.
  • Supabase provides the database and authentication.
  • Anthropic (Claude) generates Workspace AI replies. When you send a message to Workspace AI, that message and the workspace context it needs are sent to Anthropic.

TODO: confirm the subprocessor list is complete.

Connecting ChatGPT or Claude

When you connect ChatGPT or Claude as an external tool, that tool can read your workspaces and make changes you approve. What those tools do with the data they read is governed by their own terms and privacy policies, not this one. You can disconnect a tool at any time from the app.

Coding tools on your computer

Claude Code and Codex run on your own computer through Draftboard Companion. They read your workspace through Draftboard and work on your local files; those files stay on your machine.

Deleting your data

You can request deletion of your account and all data associated with it.

TODO: data retention period after account deletion.

TODO: contact and support email address.

Your rights

TODO: GDPR/EU representative and whether a data processing agreement is available.

TODO: governing law and jurisdiction.

TODO: minimum age requirement.

Questions

See the Support page for how to reach us, and the Terms of Service for the rest of the agreement.