DemandDraft Privacy Policy

1. Who we are and what this policy covers

This Privacy Policy explains how Demand Draft, LLC ("DemandDraft," "we," "us") collects, uses, shares and protects personal information when you use our websites, including demanddraft.ai and blog.demanddraft.ai, our letter service, our certified-mail service and our free tools (together, the "Service"). It is part of our Terms of Service.

"Personal information" means information that identifies you or could reasonably be linked to you. The Service is for adults in the United States.

2. Information we collect

Information you give us

• Account information. Your email address, which you use to sign in. We do not use passwords. You may also give us your name, phone number and postal address.
• Your dispute. Your description of what happened, your answers to our questions, your vehicle's license plate, and the name and contact details of the business you are writing to.
• Voice recordings, if you choose to dictate instead of typing (Section 4).
• Uploads, such as photos, invoices and estimates.
• Your letter. The laws you chose, the drafts we prepare, your edits and the letter you approve.
• Mailing details. The recipient's name and address, and your return address.
• Payment records. Our payment processor, Stripe, collects your card details. We receive a record of the payment, such as the amount, date and status. We do not receive or store your full card number.
• Free tools. Your email address, your state, your answers and, if you give it, your phone number.
• Messages you send us, such as support requests.

Information about other people. Your description and letter will usually include information about the business you are writing to and the people who work there. Only give us information you have the right to share (Terms of Service, Section 5).

Information we collect automatically

• Your agreement to our Terms. When you accept our Terms of Service and this policy, we record the date and time, which version you accepted, your IP address and your browser type.
• Usage information. Your IP address, browser and device type, the pages you visit, what you click and which steps of our forms you complete. Our hosting provider and the analytics tools in Section 6 collect this.
• Cookies. See Section 6.

Information from other sources

• Business search. When you search for the business you are writing to, we send the name and area you type to Google Maps Platform to find it. We store the listing you choose.
• Delivery updates. Our mail provider tells us the status of your letter, such as when it was mailed and delivered.
• Payment status from Stripe.

3. How we use your information

• To provide the Service: to run your account, show you laws from your state, prepare your letter, mail it if you ask us to, and send you receipts and updates.
• To keep records of what you were shown, what you chose, what you approved and what we mailed, as our Terms of Service describe.
• To email you. We send emails about your account and orders, and a reminder if you paid for a letter but have not sent it. If you use a free tool, we may send you a short series of emails about your rights and our Service. You can unsubscribe from these emails at any time.
• To understand how people use the Service, fix problems and improve it.
• To prevent fraud and misuse, and to enforce our Terms of Service.
• To comply with the law, respond to legal process, and bring or defend legal claims.

Artificial intelligence. We use AI models from other companies to turn dictation into text, highlight laws that may relate to what you described, and draft letters. We do not use your information to train AI models, and our AI providers are not permitted to use it to train theirs.

4. Voice recordings

If you dictate, your recording goes to OpenAI to be turned into text. We do not store the recording. We keep only the text, which you can read and edit. We do not use your recording to identify you or to create a voiceprint.

5. Who we share it with

We share personal information only as this Section describes. We do not sell it.

Companies that help us run the Service. Each receives only what it needs to do its job, under a contract that limits how it may use your information.

• Supabase stores our database and your uploads, and handles sign-in. It holds the information in Section 2 that we keep.
• Netlify hosts our website. It handles your IP address, browser information and what you submit.
• Modal runs our letter-drafting software. It receives your description, answers, chosen laws and contact details, and the business's details.
• Google (Gemini) drafts letters. It receives the same information as Modal.
• OpenRouter passes requests from our free tools to an AI model, currently Google's. It receives your answers and your state.
• OpenAI turns voice recordings into text.
• Stripe processes payments. It receives your name, email address and payment details.
• Lob prints letters and sends them by certified mail. It receives your letter, the recipient's address and your return address.
• Resend sends our emails. It receives your email address and the content of each email.
• HubSpot holds our customer records. It receives your email address, your state, which free tool you used, which version of our Terms you accepted, and when you create an account or buy a letter.
• Google Workspace and Slack hold our internal records and notifications. They receive copies of letters, customers' names and order status.
• Google Maps Platform finds the business you are writing to. It receives the business name and area you type.
• Google Analytics and Heap measure how the Service is used (Section 6).
• Bubble, our previous platform, still holds records from before this policy took effect. We will delete those records and close that account within 60 days after this policy takes effect.

The business you write to. When you mail or send your letter, the business receives it, including everything the letter says about you. We mail a letter only when you tell us to.

Legal reasons. We may disclose information if the law requires it, to respond to a subpoena or court order, to protect anyone's safety, or to enforce our Terms of Service.

A sale of our business. If DemandDraft is merged, acquired or sold, your information may be transferred to the new owner, who must honor this policy for information collected under it.

With your permission. We may share information in other ways if you ask us to or agree to it.

6. Cookies, analytics and Do Not Track

• Sign-in cookies keep you signed in. The Service does not work without them.
• Google Analytics and Heap tell us which pages people visit, what they click and which steps they complete. We set Heap not to record what you type, and we do not send either tool your description, your name or your email address. Once you sign in, Heap receives an account number we assign, not your name. Google may collect information about your activity on our site and on other websites over time, under Google's own privacy policy.

You can block or delete cookies in your browser settings, but the Service needs sign-in cookies to work. You can stop Google Analytics from collecting your information with Google's browser add-on at https://tools.google.com/dlpage/gaoptout.

We do not use advertising cookies, and we do not allow advertising networks to track you on our site.

Do Not Track. Our site does not currently change how it works when your browser sends a "Do Not Track" or Global Privacy Control signal.

7. No sale and no advertising use

We do not sell your personal information. We do not share it with other companies for their own marketing or for targeted advertising. If that ever changes, we will update this policy and ask for your consent first.

8. How long we keep it

• Account information, your description and your uploads: until you ask us to delete them (Section 9).
• Voice recordings: we do not keep them (Section 4).
• Records of your letters: the letters you approved, the laws you were shown and chose, your acceptance of our Terms, your payments and our mailings. We keep these for 1 year after your last order, because we may need them to answer a legal claim or to meet tax and accounting rules.
• Free-tool sign-ups: until you ask us to delete them. If you unsubscribe, we keep your email address only so that we do not email you again.

Deleted information may stay in our backups for a limited time before it is overwritten.

9. Your choices and rights

• See, correct or delete your information. Email support@demanddraft.ai from the email address on your account. We may ask you to confirm your identity. We will respond within 45 days.
• What deletion covers. We delete your account and your personal information, except the records in Section 8 that we keep for legal reasons. Deleting your information does not recall a letter you already sent; the business you wrote to keeps its copy. Stripe and our mail provider keep their own records of payments and mailings under their own policies.
• Marketing emails. Use the unsubscribe link in any marketing email. We will still send emails about your account and orders.
• Cookies. See Section 6.

We will not charge you more or treat you differently for using these rights. If you live in a state whose privacy law gives you more rights and that law applies to us, we will honor those rights too.

10. Security

We protect your information with reasonable safeguards, including encryption while it travels and while it is stored, private file storage, and access limited to people who need it. No system is perfectly secure. If a security breach affects your personal information, we will notify you as the law requires.

11. Children

The Service is for adults 18 and older. It is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

12. Changes to this policy

We may update this policy. We will post the new version with a new "last updated" date. If we make a material change, we will tell you by email or through the Service before it takes effect. We will not use information we already hold in a materially different way, such as to train AI models, without asking for your consent first.

13. Contact us

Demand Draft, LLC, P.O. Box 5086, Ventura, CA 93005; (805) 895-5037; support@demanddraft.ai.

14. State-specific notices

California. You can see and correct your information as Section 9 describes. Section 6 explains how our site responds to Do Not Track signals. We do not share personal information with other companies for their own direct marketing.

Nevada. We do not sell covered information, as Nevada law defines it. Nevada residents can send a request that we not sell their covered information to support@demanddraft.ai.