Privacy policy
Last updated: 13 October 2026
This policy explains what personal data DailyDraft collects, why, and the choices you have. We follow India's Digital Personal Data Protection Act, 2023 (DPDP Act). In this policy, "we" means DailyDraft (DailyDraft, Ahmedabad, Gujarat, India) and "you" means our member or visitor.
What we collect
- Account details: your name, email address and WhatsApp number.
- Your Brand DNA: the answers you give us about your niche, angle, platform, language, tone, voice and (optionally) your audience, offer, beliefs, story, posting days and goals.
- Payment records: amount, date, status and Razorpay payment and subscription IDs. We never see or store your card number, UPI PIN or bank details; Razorpay handles those.
- Usage: the drafts we send you, whether you tap "I posted this", and email delivery status.
- Consent record: the exact wording you agreed to and when.
- Telegram (optional): if you connect Telegram, your Telegram chat ID so our bot can message you.
Why we use it
- To write and deliver your personalised daily drafts by email and (if you choose) Telegram.
- To process payments, renewals and refunds, and to send receipts.
- To send important account messages (welcome, renewal reminders, payment problems).
- To track your posting streak and improve the quality of future drafts.
- To meet legal and tax obligations.
We do not sell your personal data, and we do not use it for advertising.
Who we share it with
Only with service providers who help us run DailyDraft, and only what they need:
- Razorpay: payments and subscriptions.
- Supabase: our database (hosted in Mumbai, India).
- Anthropic (Claude): the AI that writes your drafts, using your Brand DNA. Your data is sent to generate your drafts and is not used to train AI models.
- Resend: sending our emails.
- Hostinger: hosting our website.
- Telegram: only if you connect our bot.
Some of these providers may process data outside India, under appropriate safeguards.
How long we keep it
We keep your data while your membership is active and for up to 12 months after it ends, so you can come back without losing your Brand DNA. Payment and tax records are kept for as long as Indian law requires (usually 8 years). You can ask us to delete your data sooner (see below).
Your rights
Under the DPDP Act you can:
- ask what personal data we hold about you and how we use it;
- correct or update it (you can also edit your Brand DNA any time);
- withdraw consent and ask us to delete your data;
- nominate someone to exercise these rights for you;
- raise a grievance with us, and then with the Data Protection Board of India.
To use any of these rights, email support@getdailydraft.com. Every email we send also has an unsubscribe link.
Security
Data is encrypted in transit (HTTPS). Access to our database is restricted, and secret keys are stored only on our servers. No system is perfectly secure, but we take reasonable steps to protect your data and will tell you promptly if a breach affects you.
Cookies
We only use cookies and similar storage that the website needs to work (for example, remembering your progress in the setup questions). We don't use advertising cookies.
Children
DailyDraft is for people aged 18 and over. We don't knowingly collect data from children.
Changes and contact
If we change this policy in a meaningful way, we'll email you. Questions or grievances: support@getdailydraft.com (Grievance officer: DailyDraft).