What we collect
When you use EngageDraft, we collect the following information:
- Account information — your email address, firm name, preparer name, and credentials. Provided by you during account setup.
- Engagement data — client names, client email addresses, engagement type, fee amounts, payment terms, scope notes, and the AI-generated letters you create. This data is entered by you and stored so you can access it across sessions.
- Authentication data — we use magic link authentication. We store your email address to send login links. No passwords are ever created or stored.
- Usage data — basic information about how you use the app, such as pages visited and actions taken. Used to improve the product.
- Payment and billing information — if you purchase a subscription, payment information is collected and processed by our third-party payment processor. We may receive limited billing information, such as your name, email address, billing address, subscription status, and payment confirmation, but we do not store full credit card numbers.
How we use it
We use your data to operate EngageDraft — to generate engagement letters, send them to your clients for signature, and let you track their status.
We do not sell your data. We do not share your data with third parties for marketing purposes. We do not use your client data to train AI models.
We may use your email address to send product updates or important notices about your account. You can opt out of non-essential communications at any time by contacting support.
Storage & security
Your data is stored in Supabase, a managed Postgres database hosted on AWS infrastructure. Row-level security is enforced — you can only access your own firm's data.
Login links are delivered via Resend, a transactional email provider. Resend does not store or have access to your engagement data.
We take reasonable technical measures to protect your data. No transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately at support@engagedraft.com.
Data retention
We retain your data for as long as your account is active or as needed to provide the service. If you delete your account or request deletion, your data is removed from active systems within 30 days, unless we are required to retain it for legal, security, or legitimate business purposes. Backups are purged within 90 days after deletion.
Children's data
EngageDraft is intended for use by licensed professionals and business entities. Users must be at least 18 years old to create an account. This service is not directed to children under 13, and we do not knowingly collect personal information from children. If we learn that a child has created an account or provided personal information, we will delete the account and associated data promptly.
Third parties
EngageDraft uses the following third-party services to operate:
- Cloud infrastructure providers — database, authentication, hosting, and serverless functions.
- Anthropic — AI letter generation through the Claude API. Text entered into the intake form is sent to Anthropic to generate the letter. We understand this data is processed transiently and is not used to train Anthropic's models.
- Resend — transactional email delivery for login links.
- Payment processor — subscription payments are currently processed by Stripe. We do not store full credit card numbers. Payment information is handled by the payment processor under its own security and privacy practices.
We do not knowingly permit other third parties to access your data except as needed to operate, secure, support, or comply with legal obligations related to the service.
Your rights
You can request a copy of your data, ask us to delete your account and associated data, or ask questions about how your data is handled at any time.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we have collected and the right to request deletion.
To exercise any of these rights, contact us at support@engagedraft.com.
Contact
Questions about this policy? Email us at support@engagedraft.com. We will respond within two business days.