Who is responsible
Winfluential Digital OÜ (registry code 17578542), Estonia, operates this writing studio and is the controller of the personal data described here. Contact us at hello@draftvox.com with privacy questions or requests.
What we collect
- Account details: your email, a hashed password, name, role, company, niche, and other profile and voice preferences you provide.
- Waitlist details: your email, optional name, company or role, platform, service preference, profile URL, and niche. We also record application status, signup time, UTM campaign fields, referring website host, your referral code, and the code of the person who referred you.
- Content: posts, drafts, edits, conversations, and voice samples you paste, upload, or dictate, plus the outputs you generate.
- Usage events: actions within the studio, related account and post identifiers, model and engine used, token counts, estimated inference costs, and timestamps.
- Authentication cookies and session records needed to keep you signed in. We also store first-touch UTM and referral values in your browser's local storage and submit them with your waitlist application or signup.
Why we use it
We use account and content data to provide the service you request, prepare drafts, adapt writing to your voice, and respond to support requests. The legal basis is performing our contract with you or taking steps at your request before entering one, including managing an access application.
We use usage records to operate and secure the studio, investigate faults, and manage inference costs. We use source and referral information to understand where applications come from and prioritize the founding queue. Our legal basis for these uses is our legitimate interest in running and improving the service and managing access fairly, balanced against your rights. Application review remains a human decision.
Where processing requires consent, we rely on that consent and you may withdraw it at any time without affecting earlier lawful processing. We may retain or disclose information where needed to comply with a legal obligation.
Hosting, AI, and dictation
Our processors include Hetzner for hosting in the EU and Ollama Cloud for AI model inference on submitted text. Text needed for a requested AI operation is sent to Ollama Cloud. Do not submit personal data about others unless you have a lawful reason to do so.
Dictation uses your browser's Web Speech API. Depending on your browser, audio may be sent to the browser vendor for speech recognition under its privacy terms. DraftVox receives the resulting transcript. Microphone access is controlled by your browser.
Hosting in the EU does not mean every AI or browser service processes data only in the EU. Processing outside the EEA requires an applicable GDPR transfer mechanism, such as an adequacy decision or standard contractual clauses. Contact us for details of the arrangements and safeguards applicable to your data.
We do not sell personal data. We do not train our own models on your content.
How long we keep data
We retain account details and saved content while your account is open and the data is needed to provide the studio. We keep waitlist and referral records while your application or participation in the founding cohort is relevant. Usage and security records are retained only as needed for operating costs, troubleshooting, security, and applicable legal obligations.
You can request deletion of your account, content, or waitlist entry at hello@draftvox.com. We remove data that is no longer needed, subject to legal retention requirements or the establishment, exercise, or defence of legal claims. Any retained data is limited to that purpose. Backup copies may remain until the relevant backup is replaced.
First-touch values remain in local storage until you clear this site's browser data. Clearing browser storage does not delete an application already submitted to us. Authentication cookies expire with your session or are removed when you sign out.
Your rights
Under the GDPR, you may request access, rectification, erasure, restriction of processing, or portability of your personal data, subject to the conditions for each right. You can object to processing based on legitimate interests and withdraw consent where we rely on it.
Email hello@draftvox.com to make a request. We may need to verify your identity. We normally respond within one month; if a lawful extension is needed, we will explain why within that month.
You can complain to the Estonian Data Protection Inspectorate or the supervisory authority where you live or work. The European Data Protection Board's guide explains these rights.
Changes to this notice
We update the date above when this notice changes. We will give notice of material changes through the service or by email before new uses of personal data take effect.