GDPR Compliance
Our Commitment to Data Protection
At DraftMyDocuments, we are committed to protecting your personal data and complying with the General Data Protection Regulation (GDPR). This page explains how we collect, process, and protect your data in accordance with GDPR requirements.
Data Controller Information
DraftMyDocuments acts as the data controller for personal data collected through our services. For any data protection inquiries, please contact our Data Protection Officer at:
dpo@draftmydocuments.com
What Personal Data We Collect
We collect and process the following categories of personal data:
- Account information: Name, email address, and other contact details
- Usage data: Information about how you use our services
- Document content: Information you include in documents you create
- Payment information: When you subscribe to our paid services
- Communication data: Information from your communications with us
Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract performance: Processing necessary for the performance of our contract with you
- Legitimate interests: Processing necessary for our legitimate business interests
- Legal obligation: Processing necessary to comply with legal requirements
- Consent: Processing based on your explicit consent
Your Data Protection Rights
Under the GDPR, you have the following rights:
- Right to access: You can request copies of your personal data
- Right to rectification: You can request that we correct inaccurate information
- Right to erasure: You can request that we delete your personal data
- Right to restrict processing: You can request that we restrict the processing of your data
- Right to data portability: You can request the transfer of your data to another organization
- Right to object: You can object to our processing of your personal data
- Rights related to automated decision making: You have rights regarding automated decision making and profiling
How to Exercise Your Rights
You can exercise your GDPR rights by:
- Emailing us at dpo@draftmydocuments.com
- Using the data export and deletion tools in your account settings
- Contacting us through our support channels
We will respond to all legitimate requests within one month. Occasionally, it may take us longer if your request is particularly complex.
Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including:
- Providing our services to you
- Complying with legal, accounting, or reporting requirements
- Resolving disputes
- Enforcing our agreements
Data Security
We have implemented appropriate technical and organizational measures to secure your personal data, including:
- Encryption of sensitive data
- Regular security assessments
- Access controls and authentication procedures
- Staff training on data protection
- Data breach notification procedures
International Data Transfers
When we transfer your data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, such as:
- Standard contractual clauses approved by the European Commission
- Transfers to countries with an adequacy decision
- Data processing agreements with our service providers
Data Protection Impact Assessment
We conduct Data Protection Impact Assessments (DPIAs) when implementing new technologies or processing activities that may pose high risks to your privacy rights.
Third-Party Service Providers
We use the following third-party service providers who may process your personal data:
- Anthropic: Provider of our AI document generation services
- Supabase: Database and storage provider
- Clerk: Authentication and identity management
- Stripe: Payment processing
All our third-party processors are required to comply with GDPR and have appropriate data processing agreements in place.
Contact Us
If you have any questions about our GDPR compliance or how we handle your personal data, please contact us at:
dpo@draftmydocuments.com
Supervisory Authority
If you are based in the EU and believe that we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection authority.
Last updated: 4/11/2025