Privacy

What we collect

• Your account: your email address, your name if you give it, and the settings you choose (the institution name for your cover page, your level and citation style, and any formatting requirements you save).
• Your documents: files you upload, the sections, notes and answers you write in DraftNode, the files we produce for you, and your reference library.
• Payments: what you bought, the amount, the date and the payment reference. Paystack handles the payment itself; we never see your card number or M-PESA PIN.
• Usage records: which features you used and when, how long jobs took, and how much AI processing they used. These never contain your document text.

Why

To provide the service you asked for, to keep it working and secure, to stop abuse, and to keep financial records the law requires. We don’t sell your data, show you ads, or use your documents to train AI models.

How long we keep it

• An upload you check but never format is deleted after 24 hours.
• Formatted files are stored for 30 days, then cleared; you can rebuild them from your document at any time.
• Your projects, documents and references stay until you delete them or your account.
• Payment records are kept for as long as tax law requires (five years in Kenya), with your name removed if you delete your account.

Who processes it for us

Supabase (database, sign-in and file storage), Render (our servers), Cloudflare (network and security), Anthropic (AI drafting, only for text you ask us to draft or edit), Paystack (payments), Resend (receipt emails), OpenAlex, Crossref and Open Library (checking references; we send them only the reference details), and Kenya Law (checking and searching Kenyan cases and statutes).

When you use Research, your browser sends your search words straight to OpenAlex and Crossref, the way a library catalogue would. DraftNode doesn’t store your searches; the last few are remembered on your own device only. Kenyan law searches pass through our servers to Kenya Law and are not stored.

Your rights

You can download everything we hold about you, correct it, or delete your account and documents, from your account settings. You can also write to support@draftnodeai.com. If you think we have mishandled your data, you can complain to Kenya’s Office of the Data Protection Commissioner.

Security

Your documents are visible only to you. They are encrypted in transit and at rest by our providers, access is checked on every request, and the admin console we use to run DraftNode never shows document text.