Privacy Policy

1. Introduction

Welcome to FifthDraft ("we," "our," or "us"). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered note-taking platform and services.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us:

• Account information (name, email address, password)
• Profile information and preferences
• Payment and billing information (processed securely through Stripe)
• Subscription and usage data

2.2 Content You Create

• Audio recordings and voice memos
• Transcriptions and notes
• Action items and decisions
• Chat conversations with AI
• Custom templates and preferences

2.3 Automatically Collected Information

• Device information (browser type, operating system)
• Usage data (features used, session duration)
• Log data (IP address, access times, pages viewed)
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Process your audio recordings and generate transcriptions
• Use AI (OpenAI Whisper and Claude Haiku 4.5) to clean and format your notes
• Extract action items and insights from your content
• Manage your account and subscription
• Process payments and prevent fraud
• Send you service updates, security alerts, and support messages
• Respond to your requests and customer support inquiries
• Analyze usage patterns to improve our platform
• Comply with legal obligations

4. AI Processing and Third-Party Services

4.1 AI Service Providers

Your audio recordings and transcriptions are processed by:

• OpenAI Whisper API: For audio-to-text transcription
• Claude Haiku 4.5 API: For text cleanup, formatting, and action item extraction

We have agreements with these providers to ensure they handle your data securely and do not use it to train their models without your consent.

4.2 Other Third-Party Services

• PostgreSQL: Database services hosted on secure VPS
• Stripe: Payment processing including cards, Apple Pay, and Google Pay (we never store your payment information)

5. Data Storage and Security

5.1 Data Storage

• Your data is stored on secure servers hosted on OVHcloud
• Audio recordings are automatically deleted after 48 hours
• Transcriptions and notes are retained as long as you maintain your account
• We implement industry-standard encryption for data in transit and at rest

5.2 Security Measures

• Row-level security policies to protect your data
• Encrypted connections (HTTPS/TLS)
• Regular security audits and updates
• Access controls and authentication

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With your consent: When you explicitly authorize us to share information
• Service providers: With third parties who help us operate our platform (as described above)
• Collaborators: When you explicitly choose to share content with others
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your notes and data in portable formats
• Opt-out: Unsubscribe from marketing communications
• Data portability: Transfer your data to another service

To exercise these rights, please contact us at support@fifthdraft.ai

8. Data Retention

• Audio recordings: Automatically deleted after 48 hours
• Transcriptions and notes: Retained while your account is active
• Account information: Deleted within 30 days of account closure
• Backup data: Removed from backups within 90 days
• Legal or compliance data: Retained as required by law

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Analyze usage patterns
• Improve platform performance

You can control cookies through your browser settings, but some features may not work properly if cookies are disabled.

10. Children's Privacy

Our services are not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

13. GDPR and CCPA Rights

13.1 European Users (GDPR)

If you are located in the European Economic Area, you have additional rights under GDPR:

• Right to object to processing of your personal data
• Right to restrict processing
• Right to lodge a complaint with a supervisory authority
• Right to withdraw consent at any time

13.2 California Users (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it
• Request deletion of your personal information
• Opt-out of the sale of personal information (we do not sell your data)
• Non-discrimination for exercising your rights