1. Who we are
DraftYes is a service provided by WeCanDev LLC. We are responsible for your account data. For the client data you add (their names, numbers and quotes), you are responsible, and we process it on your behalf and only to provide the service to you.
2. What we collect
Account data (name, email, phone number if you add it, job title, photo, company name, details and logo). Your optional answers at sign-up and how you found us (campaign link, referring page, country, IP address). The content you create (clients, products, documents, comments). Technical data to run and protect the service (IP address, device and browser type, login times).
3. Payment data
Payment goes through Stripe, and your full card details never reach our servers. We keep only the card brand, its last four digits and the subscription status, and Stripe collects the billing address and tax ID if you enter them, to issue invoices and calculate tax.
4. Your clients' data when they open a document
When your client opens a document link we record the time it was opened, the number of views, the device type and IP address, and on approval or decline: the name they type or the reason for declining, and the time. This data is visible to your team only, and it is your responsibility to inform your clients of it where needed.
5. How we use it
To provide and operate the service, send login links and notifications, prevent abuse and protect accounts, improve the service and understand what suits our customers, and contact you about your account or to help you set up. We don't sell your data, and we don't use the content of your documents for advertising.
6. Who we share it with
With trusted providers that process only the data needed for their role: our hosting provider, Stripe for payments, our email provider to send messages, Slack for our team's internal alerts about account activity (such as a new company signing up, a subscription, or a client approval), and Google Analytics to measure visits to this marketing website only. We may disclose data if the law requires us to.
7. Data transfers
Your data may be processed and stored outside your country, including in the United States, by providers committed to protecting it.
8. Security
Encrypted connections (HTTPS), long random client links that can't be guessed, single-use short-lived login links, permissions by each member's role, and full isolation between companies' data. No system is completely secure, and we will notify you without delay if your data is affected by a breach.
9. Retention and deletion
We keep your data as long as your account exists, and your account and its data remain when you cancel your subscription (on the Free plan). When you ask us to delete your account, we delete its data within 30 days, except billing records the law requires us to keep.
10. Your rights
You can view and correct your data from within the app, and ask for a copy of it, its deletion, or opt out of non-essential messages at any time by email. We will reply to your request within 30 days.
11. Cookies and browser storage
Inside the app we use only the cookies needed for login and session security. On this marketing website we use Google Analytics to measure visits and the most-read pages, we remember your language choice, and we store in your browser for 90 days where your visit came from (the campaign link and referring page) so we know how you found us if you sign up. You can block or clear this in your browser settings.
12. Children
The service is not intended for anyone under 18, and we don't knowingly collect their data.
13. Changes
We may update this policy, and will notify you of material changes by email or within the service.
14. Contact
For any privacy question or to exercise your rights: support@draftyes.com