Privacy Policy
Introduction
This Privacy Policy explains how Draf Technologies, Inc. ("Draf," "we," "our," or "us") collects, uses, and protects personal information in connection with our Chrome Extension, web platform, and related services (collectively, the "Services").
By using the Services, you agree to the practices described in this policy.
Information We Collect
a. Google Account Information
When you install Draf and sign in via Google, we collect:
Your Google email address
Your display name
Your Google ID (for authentication)
We use this information to associate activity with your account, personalize the experience, and provide access to trained bots.
b. Google Drive and Docs Access
With your consent, Draf uses read-only access to your Google Drive to locate and analyze Google Docs you've authored, commented on, or edited recently. Specifically, we access:
Document content
Comments and suggestion threads
Version history metadata (to identify revision behavior)
We filter for relevant documents programmatically (e.g., docs with comment activity, recent edits) and do not access all files indiscriminately.
We never:
Edit or delete your documents
Share your files with third parties
Persist entire documents without consent
c. Usage Data
We may collect anonymized technical and behavioral data, including:
Extension actions (e.g., "Create Bot," "Rewrite Clicked")
Error logs and diagnostics
Browser type and extension version
This data helps us improve functionality, debug issues, and understand usage trends.
How We Use Information
We use your information to:
Authenticate your account and provide access to your feedback bots
Analyze selected Google Docs for training a personalized AI reviewer
Generate rewrite suggestions based on past feedback patterns
Improve and troubleshoot the Services
We may also use anonymized, aggregate insights to improve our models (e.g., most common rewrite types) — never linked to individuals.
Data Retention and Deletion
We retain training data and rewrite outputs linked to your account until you delete them.
We delete document content immediately after training unless you opt to save the reviewer.
You can request data deletion at any time by contacting support@draf.co.
Sharing and Disclosure
We do not:
Sell or rent your data
Share it for marketing or advertising purposes
We may share limited information with:
Cloud hosting providers (e.g., Google Cloud)
Error tracking and analytics tools
All vendors are contractually obligated to process data only on our behalf and under strict confidentiality terms.
We may disclose information if legally required to comply with law enforcement or regulatory authorities.
Security
We follow best practices to secure your data:
OAuth 2.0 authentication
Encryption in transit and at rest
Access restrictions and audit logging
Minimal permissions requested
Your Rights and Choices
You may:
Revoke access via your Google account settings
Delete your bot or training data at any time
Contact us to access, modify, or delete personal data
Residents of the EU, UK, and California may have additional rights under the GDPR or CCPA.
Children's Privacy
Our Services are not intended for children under 16. We do not knowingly collect data from minors.
Changes to this Policy
We may update this Privacy Policy. Material changes will be posted in the extension UI or emailed. Continued use constitutes acceptance.
Contact Us
For privacy questions or data requests, contact:
📧 rifat@draf.co
📍 Draf Technologies, Inc. 1111b South Governors Avenue - Delaware