Privacy policy

Last updated October 12, 2026

Summary

DraftReview analyses spreadsheets inside your browser. We do not receive, store or process the contents of your workbooks. We only process the limited personal data needed to provide accounts, billing and support.

Data we process

• Account data: email address, sign-in timestamps, plan status. Purpose: providing the service (contract).
• Billing data: customer and subscription identifiers from our merchant of record, Creem. Creem processes payment details under its own privacy policy.
• Contact data: what you send through the contact form. Purpose: responding to you (legitimate interest).
• Usage analytics: aggregated, cookieless page statistics via Cloudflare Web Analytics.
• Technical logs: request logs kept by Cloudflare for security and reliability, retained for a limited period.

Workbook contents

Files you analyse are read and processed locally in your browser. They are not transmitted to us or to any third party.

Processors

• Cloudflare, Inc. — hosting, database, analytics.
• Creem — payments and tax (merchant of record).
• Resend — sending sign-in emails.

Retention

Account data is kept while your account is active and deleted on request. Sign-in links expire after 15 minutes. Contact messages are kept for up to 24 months.

Your rights

Depending on where you live (for example under the GDPR or UK GDPR, or the CCPA), you can request access to, correction of, or deletion of your personal data, and object to certain processing. Email support@draftreview.app.

Cookies

We set one strictly necessary cookie when you sign in (dr_session). We do not use advertising or tracking cookies.

Changes

We will update this page when our practices change and revise the date above.