Privacy Policy

Account details (name, email, role), the change-control records you create, evidence you upload, messages you send to support, and basic operational logs needed to run the service securely. If you enrol a phone for WhatsApp intake, we store that phone number. Gangway attendance stores a name, company, check-in and check-out times, and a location status (see “Location at check-in”). Payments are processed by Stripe; Draft never holds card numbers.

To provide the service, to send transactional messages (sign-in codes, decision and membership notifications), and (in de-identified, aggregated form only) to improve the product. Draft does not sell your data.

Draft relies on a small set of vendors to operate: DigitalOcean (hosting), Supabase (database), Resend (email), Twilio (WhatsApp messaging), Stripe (payments), and Anthropic (the provider powering Draft AI, which drafts and structures change descriptions). These are disclosed subprocessors and process data on Draft’s behalf.

The vessel side owns its record; Draft is custodian. Records stay in live custody during an active yard period. Export is always available. If a record is abandoned, we provide notice and a grace window (export still available) before any deletion, never a silent delete — and after deletion Draft retains only the de-identified aggregate. Support correspondence is part of Draft’s operational records and is retained separately, including after a record or account is closed.

You can access and export your record at any time. A rightful vessel party can request release or transfer of a record, subject to identity verification.

When someone checks in or out at the gangway, the page asks the browser’s own permission prompt for the device’s location and compares it to the vessel’s pinned position. Only the outcome is kept: a status (verified, out of range, or unavailable) and a distance in metres. Raw coordinates are discarded immediately and never stored. There is no movement tracking and no background collection, and declining the prompt never blocks a check-in.

Draft sets only first-party, functional cookies: the signed session cookie that keeps you signed in, a short-lived sign-in cookie that carries your email for a few minutes while your one-time code arrives, a cookie remembering your current project, and two attendance conveniences — one that lets the gangway page greet a returning contractor by name, and one that remembers a walk-up visitor’s name and company on their own phone (kept for around 180 days). No advertising, analytics, or cross-site tracking cookies, ever.

Draft operates under US law and is intended for use outside the EU. EU data-protection (GDPR) coverage is not yet in place; the service is not marketed to EU users.

Privacy questions: [email protected].