Beta · Updated 21 October 2026
Privacy Policy
Draftmere is operated by Spell Shield Pty Ltd ("we", "us"). This policy explains how we handle your information when you visit our website, join an email list or use the writing room. Contact privacy@draftmere.com with privacy questions or requests.
Your writing and your choices
Your writing belongs to you. Our Terms explain the limited permission needed to provide the service. Your device library, optional cloud copies and requested AI assistance are separate choices. We do not sell your manuscripts or personal information, publish your private writing, or use manuscripts to train our own models.
Information we handle
We handle your account email and identifier, sign-in information, beta access, Terms acceptance, service usage and credits, and messages you deliberately send us. Email subscriptions include your address, consent and subscription preferences. Requested cloud or AI features also involve the writing and relevant story information you submit.
Our hosting and service providers process technical information such as IP addresses, browser information and request logs to deliver and secure the service. Draftmere's application diagnostics omit manuscript passages, prompts and credentials. We use account and operational information to provide features, prevent abuse, resolve problems and meet applicable legal obligations.
Device storage and cloud copies
Writing, notes, story records, checkpoints, proposals and imported originals are saved in this browser's account-specific device library. Draftmere does not encrypt this local library. Someone with access to your unlocked device or browser profile may be able to inspect it. Clearing browser data can remove writing; keep exported backups.
Cloud sync is manual. Synced writing, release snapshots and saved AI results are held in our database in Sydney, Australia. Account access controls restrict normal application access to your account. The beta management interface does not display your private writing projects. Authorised operators and service providers may have technical access where necessary to maintain, support or secure the service. Cloud storage does not mean end-to-end encryption.
The Draftmere Collection
Submitting to the Collection is an optional publication choice. We store the piece you submit, your chosen attribution, optional biography and links, publication permission, editorial feedback and review status in our database in Sydney. Your submission is available to you and authorised editors; other writers cannot read unpublished submissions.
When an editor publishes an accepted version, that piece and its approved attribution, biography and links become publicly readable and may be shared or indexed by search engines. Your account email and editorial feedback are not automatically published. Private writing projects are separate from submissions. We do not send Collection submissions to an AI provider as part of the submission or editorial workflow.
You can withdraw a submission or published piece from My submissions. Account exports include your Collection submissions. Account deletion removes them and their public Collection pages; third-party copies, search listings and backups can take time to disappear. The Collection guidelines explain the separate publication permission and your retained rights.
AI assistance
AI runs when you ask. Turning AI assistance On does not itself send your work to an AI provider. Turning it Off blocks new AI requests for that work. When you approve a request, our server processes a temporary work copy and sends the relevant writing context and your request to the provider needed for that feature. Private Notes are excluded from AI requests. Completed AI results and usage records are saved privately for recovery and credit accounting.
Our current AI providers' published terms restrict training on API inputs. We do not opt your writing into provider model training. Provider retention, security review and legal exceptions still apply; we do not promise zero retention. The service-provider information identifies the services, their purposes and their data-handling information. Suggestions remain separate until you choose to use them.
Accounts and email
Accounts require email verification. Optional Google sign-in supplies your verified email, account identifier and basic profile information to authenticate you. We do not request access to Gmail, Drive or contacts.
Newsletter subscriptions are optional and do not create a writing-room account. Earlier launch-update subscriptions have separate consent; creating an account subscribes you to neither list. Newsletter subscriptions require email confirmation. Unsubscribing stops both Draftmere marketing lists while essential account emails continue. We retain the information needed to respect subscription choices and avoid adding unsubscribed addresses again. Deleting a writing-room account also starts removal of its Draftmere marketing memberships; separate subscriptions to our other products are preserved.
Our payment provider handles paid checkout and subscriptions; Draftmere does not receive full card details. We share your account email for checkout and retain customer/subscription identifiers, plan, payment events and credit records to deliver purchases and handle support, refunds and legal obligations. Writing is not sent to our payment provider. Sandbox payments are clearly labelled.
The free continuity check sends only the excerpt you explicitly approve to our AI provider. We store its account-bound result and quota/attempt records so retries do not consume the allowance twice. Like other AI processing, it is optional and may miss issues.
Browser storage and optional analytics
We use browser storage for your device library, sign-in, offline access and preferences. The article editor uses cookies for authenticated previews. These support the features you request; they are separate from optional website analytics.
With your permission, we measure visits and email signup requests on selected public pages to understand and improve the website. These events do not measure completed writing-account registrations. The analytics service uses a temporary visitor hash rather than tracking cookies, and provides aggregated statistics such as page visits, referrers, country, browser and device type. The provider discards its visitor identifier after 24 hours. We do not send writing, email addresses or account identifiers as analytics data. The writing room, account, admin, newsletter-confirmation and reset pages are excluded.
Analytics starts off. Allow or decline it in the public-page prompt, and change your choice at any time using Analytics choices in the footer. We remember that choice on this browser for up to 180 days. Declining does not affect writing or email subscriptions. We also honour supported Do Not Track and Global Privacy Control signals. We do not use advertising pixels or session-replay tools.
Service providers and overseas processing
We use providers for hosting, storage, sign-in, requested AI processing, email, payments and public articles. They receive information needed for their role. Our main application database is in Sydney, Australia. Other processing can occur overseas. The details below distinguish configured hosting from support and other operations; Australian-only processing is not promised. We use applicable provider contracts and safeguards.
Who handles information for Draftmere
- Supabase — accounts and cloud storage. Account details, cloud writing, Collection submissions and saved results. Our database and authentication are hosted in Sydney; support and operations may involve the United States, Singapore and the European Union.
- Vercel — website delivery and optional analytics.Website requests, temporary context needed for requested features, technical logs and permitted public-page statistics. Application functions are configured for Sydney; delivery, operations and support also use international infrastructure, including the United States.
- Anthropic — requested AI assistance. Relevant writing, instructions and approved excerpts for AI features. Processing can occur in the United States and other locations used by its service. Standard retention and safety or legal exceptions apply.
- TypeSafe AI — requested story checks. Relevant story information, passages and instructions for structured checks. Services are hosted in the United States; disclosed subcontractors may involve additional locations. No zero-retention arrangement is claimed.
- Resend — account and marketing email. Email addresses, message content, preferences and delivery records. Customer data is stored in the United States; choosing a sending region does not restrict all email data storage to that region.
- Google — optional sign-in. Sign-in requests and basic account information when you choose this method. Processing uses international infrastructure, including the United States. Google also processes information under its own privacy terms.
- Stripe — payments. Checkout, billing and payment information, with international operations including the United States. Writing is not sent to Stripe. It may act independently for legally required payment activities.
- Sanity — public articles. Article content, author information and content-editor accounts. Infrastructure and support include the United States and Europe. Private manuscripts and writing-room accounts are not stored in the article service.
Providers may use their own subcontractors. Contact privacy@draftmere.com for current country, recipient or data-handling details relevant to your information.
We may also disclose information where required by law or necessary to protect the service and address misuse. If the business changes ownership, any transfer of personal information will remain subject to applicable law and appropriate privacy protections.
Business data-processing agreements
We provide data-processing agreements and any required international transfer terms privately. If you need us to process personal information on behalf of your business, contact privacy@draftmere.com to arrange the applicable terms before that processing begins. Existing applicable agreements and their notice commitments remain in force. Covered customers can request a copy of their agreement and current subprocessor information at the same address.
Retention, export and deletion
Device copies remain until you remove them or clear browser data. Cloud writing and saved AI results remain until removed through the beta's deletion process. Account settings let you export device and cloud data separately. An export does not delete anything.
Account deletion is fulfilled by the beta owner. It revokes access and removes the account and application cloud data. A submitted request does not immediately erase data, and browser copies must be cleared separately. Marketing cleanup follows provider processing; minimal suppression information may remain to prevent unwanted emails. Backup copies, historical email records, security logs and legally required records can have separate retention periods. We will explain relevant remaining retention when responding to a deletion request.
Requests and complaints
Contact privacy@draftmere.com to request access, correction, export or deletion, withdraw optional consent, or raise a privacy concern. We may verify your identity before releasing or changing information. We will respond within applicable legal time limits and explain any lawful restriction. Account settings also provide export and request tools.
If you are dissatisfied with our response, you can contact the relevant privacy regulator. In Australia, this is the Office of the Australian Information Commissioner. Additional rights may apply where you live. Where applicable, processing is based on providing the service, consent for optional activities, legitimate operational interests and legal obligations.
Changes
We will update this policy when our practices change and show the revision date here. For material changes affecting your information, we will provide an appropriate notice and request fresh consent where required.