This Privacy Policy explains how DraftStudio ("we," "us," or "our") collects, uses, and protects information when you use our website and services. We are committed to protecting your privacy.

1. Information We Collect

Account Information

When you sign up for DraftStudio, we collect information such as:

• Email address
• Display name and username
• Profile picture or avatar
• Account creation and modification dates

TikTok Profile Data

When you sign in with TikTok, we receive:

• Your TikTok username and display name
• Your TikTok user ID
• Your profile picture
• Basic public profile information

Usage Data

We automatically collect information about how you interact with DraftStudio:

• Pages and features you access
• Video drafts you create or modify
• AI generation requests and parameters
• Time and date of your activities
• Device type, browser, and IP address

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve DraftStudio
• Authenticate your account and enable TikTok integration
• Generate personalized video drafts and recommendations
• Process payments and manage subscriptions
• Send account updates, newsletters, and service announcements
• Respond to your customer support inquiries
• Prevent fraud, abuse, and security issues
• Analyze usage patterns and improve user experience

3. TikTok Data & Tokens

When you authorize DraftStudio to access your TikTok account, we store:

• TikTok access tokens and refresh tokens
• Token expiration dates and scopes
• Your TikTok user ID and account status

Security: Access tokens are encrypted and stored securely in our database. Tokens are used solely to interact with TikTok APIs to create and manage video drafts on your behalf. You can revoke DraftStudio's access at any time by disconnecting your TikTok account in your settings or through TikTok's official account authorization page.

4. Data Retention

We retain your information for as long as your account is active. After you delete your account, we retain:

• Transaction records (for 7 years, as required by law)
• Aggregated, anonymized analytics data (indefinitely)

TikTok tokens are deleted immediately upon account deletion or disconnection.

5. Data Security

DraftStudio implements industry-standard security measures to protect your data, including:

• HTTPS encryption for all data in transit
• Encrypted storage for sensitive data at rest
• Secure password hashing
• Regular security audits and penetration testing
• Access controls and authentication protocols

However, no security system is completely impenetrable. While we implement strong protections, we cannot guarantee absolute security.

6. Third-Party Services

DraftStudio integrates with the following third-party services:

• TikTok: We use TikTok APIs to create and manage video drafts. Your data shared with TikTok is governed by TikTok's Privacy Policy.
• AI Services: We may use third-party AI providers to generate content. These providers may process your prompts and content according to their own privacy policies.
• Payment Processors: Stripe or similar payment providers process your subscription payments. They are PCI-DSS compliant.

We recommend reviewing the privacy policies of these third-party services.

7. Cookies & Tracking

DraftStudio uses cookies and similar tracking technologies to:

• Keep you logged in to your account
• Remember your preferences
• Analyze website usage and improve performance

You can control cookie settings through your browser. Disabling cookies may limit your ability to use DraftStudio.

8. Your Rights & Choices

Depending on your location, you may have the right to:

• Access: Request a copy of the data we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing emails at any time

To exercise these rights, contact us at privacy@draftstudio.io.

9. Children's Privacy

DraftStudio is not intended for children under 13 years old. We do not knowingly collect information from children under 13. If we discover that we have collected data from a child under 13, we will delete it immediately. If you believe we have collected data from a child under 13, please contact us.

10. International Data Transfers

Your information may be stored and processed in the United States or other countries where we operate. By using DraftStudio, you consent to the transfer of your data to countries outside your country of residence, which may have different data protection laws.

11. CCPA & GDPR Compliance

California Residents (CCPA): You have the right to know, delete, and opt-out of the sale of your personal information. We do not sell your data to third parties for monetary compensation.

EU Residents (GDPR): We process your data based on your consent and legitimate business interests. You have rights to access, rectify, and erase your data. Our legal basis for processing is your explicit consent or contractual necessity.

12. Changes to This Privacy Policy

We may update this Privacy Policy at any time. If we make material changes, we will notify you by email or through the Service. Your continued use of DraftStudio following the update constitutes acceptance of the revised Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

• Email: privacy@draftstudio.io