Privacy Policy
Last updated: June 2026
1. What we collect
Account details (name, email, role), the change-control records you create, evidence you upload, and basic operational logs needed to run the service securely.
2. How we use it
To provide the service, to send transactional messages (sign-in codes, decision and membership notifications), and (in de-identified, aggregated form only) to improve the product. Draft does not sell your data.
3. Subprocessors
Draft relies on a small set of vendors to operate, including Amazon Web Services (hosting and email), Stripe (payments), and Anthropic (the provider powering Draft AI, which drafts and structures change descriptions). These are disclosed subprocessors and process data on Draft’s behalf.
4. Data ownership and retention
The vessel side owns its record; Draft is custodian. Records stay in live custody during an active yard period. Export is always available. If a record is abandoned, we provide notice and a grace window (export still available) before any deletion, never a silent delete. Draft retains only the de-identified aggregate thereafter.
5. Your rights
You can access and export your record at any time. A rightful vessel party can request release or transfer of a record, subject to identity verification.
6. Cookies
Draft uses only essential cookies needed to keep you signed in and to remember your current project. We do not use advertising or cross-site tracking cookies.
7. Jurisdiction
Draft operates under US law and is intended for use outside the EU. EU data-protection (GDPR) coverage is not yet in place; the service is not marketed to EU users.
8. Contact
Privacy questions: noah@draftyachting.com.