文档Legal & ComplianceGDPR Compliance

GDPR Compliance

How Draftly approaches the GDPR and UK GDPR — legal bases, data subject rights, international transfers, and where to find the full policy.

Overview

This page is a short, practical summary of how Draftly approaches the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the UK GDPR. It is not a substitute for our full [Privacy Policy](/legal/privacy) or [Compliance Overview](/legal/compliance) — those documents are the authoritative source and govern in the event of any conflict.

Legal Bases for Processing

Where the GDPR or UK GDPR applies, Draftly relies on the following legal bases to process personal data:

•Performance of a contract — to create your account, run generations, and deliver the Service you signed up for

•Legitimate interests — securing the platform, preventing abuse, and improving product quality, balanced against your rights

•Consent — for non-essential cookies, marketing communications, and any optional feature that explicitly asks first

See the [Privacy Policy](/legal/privacy) for the full breakdown by data category.

Your Rights Under GDPR

If the GDPR or UK GDPR applies to you, you generally have the right to:

•Access the personal data we hold about you

•Rectify inaccurate or incomplete data

•Erase your data ("right to be forgotten"), subject to legal retention requirements

•Restrict or object to certain processing

•Port your data to another provider in a structured, machine-readable format

•Withdraw consent at any time where processing is based on consent

•Lodge a complaint with your local supervisory authority

To exercise any of these rights, go to your Profile page → Settings & Integrations to export your data or delete your account, or email the address in the Privacy Policy's contact section.

Cookies & International Transfers

Cookies: Non-essential cookies (analytics, marketing) are only set after consent where required in the EEA, UK, and Switzerland — see the [Cookie Policy](/legal/cookies) for the full list of categories and third parties.

International transfers: Draftly's infrastructure may process data outside the EEA/UK. Where GDPR or UK GDPR transfer rules apply, we rely on safeguards such as Standard Contractual Clauses. Details are in our [Data Processing Agreement](/legal/dpa).

Where to Read More

For the complete, legally binding text, see:

•[Privacy Policy](/legal/privacy) — full personal data processing disclosure and your rights

•[Cookie Policy](/legal/cookies) — cookies, analytics, and advertising technologies

•[Compliance Overview](/legal/compliance) — GDPR, UK GDPR, US state law, and security posture

•[Data Processing Agreement (DPA)](/legal/dpa) — for enterprise customers who need a signed DPA

Questions about GDPR or a data subject request can be sent to the contact address listed in the Privacy Policy.

上一页开发者设置下一页Cookie Policy