Privacy Policy
Last updated: February 2026
1. Introduction
Vibe SIA (“Draftery”, “we”, “us”) operates draftery.ai. This Privacy Policy explains how we collect, use, and protect your personal data when you use our AI email assistant service.
For questions about this policy, contact us at hi@aina.rs.
2. What Data We Collect
- Account data — your name and email address, obtained via Google OAuth sign-in.
- Gmail data — emails, threads, and metadata accessed through Gmail API scopes (
gmail.readonly,gmail.compose,gmail.modify). - Writing style profile — a representation of your writing style derived from your sent emails, stored as vector embeddings.
- Draft & feedback data — AI-generated drafts and any edits you make to them.
- Subscription data — payment and billing information processed by Polar.sh.
- Usage data — classification logs and error tracking collected via Sentry, and anonymous website analytics (page views, traffic sources) via Google Analytics and Ahrefs.
3. How We Use Your Data
- Generate draft replies that match your personal writing style.
- Improve draft quality based on your feedback and edits.
- Process payments and manage your subscription.
- Monitor errors and maintain service health.
4. AI & Your Data
Your emails are processed by Anthropic Claude and OpenAI to generate draft replies. These emails are sent as API calls and are not used to train any AI models.
Your writing style profile is stored as vector embeddings in Pinecone to enable style matching.
We never use your data to train AI models.
5. Third-Party Services
We use the following third-party services to operate Draftery:
- Google Cloud Platform — infrastructure and Pub/Sub messaging.
- Anthropic & OpenAI — draft generation. Your data is not used for model training.
- Pinecone — vector embeddings for writing style matching.
- Polar.sh — payment processing.
- Resend — transactional emails.
- Sentry — error monitoring.
- NeonDB — database hosting.
- Upstash — task queue.
- Vercel — web hosting.
- Google Analytics — anonymous website traffic analytics.
- Ahrefs — SEO performance tracking.
6. Data Security
- OAuth tokens are encrypted at rest with AES-256.
- All data is transmitted over TLS.
- Access tokens are refreshed automatically and never stored in plaintext.
7. Data Retention & Deletion
Your data is retained for as long as your account is active. Upon account closure, all personal data is permanently deleted in accordance with GDPR Article 17.
When you disconnect your Gmail account, your OAuth tokens are immediately revoked and deleted.
8. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the following rights:
- Right to access & data portability (Article 20) — you can export your data from the dashboard.
- Right to erasure (Article 17) — you can delete your account and all associated data.
- Right to withdraw consent — you can disconnect Gmail at any time from your dashboard.
- Right to object & restrict processing — contact us at hi@aina.rs to exercise this right.
9. Cookies
Draftery uses session cookies for authentication (via Better Auth). Google Analytics sets cookies to collect anonymous usage statistics (page views, traffic sources, session duration). Ahrefs uses a lightweight analytics script for SEO tracking. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email. Continued use of the service after changes constitutes acceptance.
11. Contact
If you have any questions about this Privacy Policy, contact us:
- Email: hi@aina.rs
- Entity: Vibe SIA
- Jurisdiction: Latvia