Privacy Policy

DraftShaper ("we", "us") operates a voice-to-document service. For the purposes of the UK GDPR and the Data Protection Act 2018, we are the data controller for the personal data described in this policy.

Account data: name, email address, and a securely hashed password (we never store plain-text passwords).

Content data: the audio you upload or record, and the transcripts produced from it. Audio is processed transiently and deleted as soon as transcription finishes; we never archive it. Transcripts stay in your history until you delete them or your account.

AI processing: your audio is sent to a third-party speech-recognition provider and the resulting text to a third-party language-model provider, purely to produce your transcript. Both process the content on our behalf under agreements that restrict its use to providing the service.

Usage data: transcription counts, minutes processed, and timestamps, used to enforce plan limits and improve the product.

Payment data: none. Card details are entered directly into Stripe's hosted checkout, so card numbers never touch our servers. We store only Stripe customer and subscription identifiers.

Contract: processing your account, audio, and transcripts is necessary to provide the service you signed up for.

Legitimate interests: security logging, abuse prevention, and product improvement.

Consent: where required (e.g., optional cookies), we ask first.

Speech-recognition provider: converts your audio into text.

Language-model provider: applies the output style you choose to the transcript.

Stripe, Inc.: payment processing (PCI-DSS Level 1). Stripe acts as an independent controller for payment data.

Upstash, Inc.: rate-limiting infrastructure (IP addresses, short-lived).

Hosting providers: servers located in regions we select; where data leaves the UK/EEA, transfers rely on adequacy regulations or standard contractual clauses.

A current list of sub-processors is available on request from [email protected].

Account data is kept while your account is active. Transcripts remain until you delete them or your account. Audio is deleted as soon as transcription finishes and is never archived by us. Security and audit logs are retained for up to 12 months. When you delete your account, personal data is erased or anonymised within 30 days, except where the law requires us to keep it.

Under the UK GDPR you have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing based on legitimate interests. You can exercise most rights directly from Account settings, or by contacting us.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

We use only strictly necessary cookies: the session cookie that keeps you signed in. We do not use analytics, advertising, or other third-party tracking cookies. If that changes, we will ask for your consent first and update this policy.

The Android app can insert dictated text into the field you are using. It runs only when you enable DraftShaper in Android's accessibility settings and start dictation from the system accessibility shortcut.

The service accesses only the focused input field, to insert the text you dictated. It does not record what other apps display, and you can turn it off at any time in Android settings.

Passwords are stored using strong one-way hashing. Sessions use signed, httpOnly cookies, and sign-in tokens on mobile are held in the Android Keystore. Optional two-factor authentication is available in Account settings. Server-to-server traffic is authenticated, and access to production data is restricted.

We may update this policy; material changes will be announced in the app. Questions about this policy or your data: [email protected].