draftship

Privacy Policy

Last updated: November 4, 2026

This policy explains what Draftship collects when you use draftship.dev and the apps we host, why we collect it, and the choices you have.

What we collect

  • Account details: your email address, name and profile image. If you sign in with Google, Google shares these with us. We don't receive your Google password.
  • Your content: the prompts you write, the code and files generated for you, and the data stored in your apps.
  • Billing details: your plan and subscription status. Our payment provider handles your card details; we never see or store them.
  • Usage and technical data: usage limits, build and error logs, IP address, browser type, and visit statistics for hosted apps.

How we use it

  • To run your account, generate and host your apps, and enforce plan limits.
  • To process payments and send service email such as sign-in and billing messages.
  • To keep the service secure, fix problems and prevent abuse.

We don't sell your personal data and we don't use it for advertising.

Google user data

If you sign in with Google, we request only your basic profile and email address, and use them only to create and identify your account. We don't share this data except with the service providers below as needed to run sign-in, and we don't use it to train AI models. Our use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.

Public projects

Projects on the Free plan are public: anyone can view them in Explore and clone them. Don't put personal or confidential information in a public project. Paid plans can make projects private.

Service providers

We share data only as needed with the companies that help us run Draftship:

  • Clerk: sign-in and account management.
  • OpenRouter and the AI model providers it routes to: your prompts, any images you attach and project code, to generate responses. When you ask about your app's data, the relevant records go too. When the AI searches the web, its search queries also go to OpenRouter's search provider, Exa.
  • Polar: payments, invoices and tax, as merchant of record.
  • Cloudflare: network delivery and security.
  • Resend: transactional email.
  • Context7: the names of libraries an app uses and a short topic, to read their current documentation. You can turn this off in Settings. It doesn't receive your prompts or code.
  • Sentry: reports of errors on our servers, including where the error happened and its message.

These providers may process data outside your country. Our servers are located in Türkiye.

Apps built on Draftship

The owner of each hosted app decides what data that app collects and is responsible for it. For questions about an app's data, contact its owner.

Retention and deletion

We keep your data while your account is active. When you delete a project or ask us to delete your account, we remove the related data. After you delete a project we keep a usage record without its content, such as when a message ran, the model and its cost, for about 35 days so limits stay correct. Copies in backups are overwritten within about 7 days. We may keep billing records for as long as the law requires.

Your rights

Depending on where you live, including under GDPR and Türkiye's KVKK, you can ask to access, correct, export or delete your personal data, or object to how we use it. Email us and we'll respond.

Contact

Questions about this policy: [email protected]. If we make significant changes, we'll update this page and its date.