This Privacy Policy explains how Superdraft Technologies Inc., doing business as Superdraft ("Superdraft," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you visit our websites, use our software, create an account, interact with our team, or use our AI-assisted marketing workflow product.

Superdraft helps teams collect public signals, match them to brands, generate campaign ideas and email drafts, create and edit images, manage brand and product context, preview and export email templates, review usage and costs, and receive operational notifications.

Plain-English Summary

We want this policy to be understandable.

  • We collect account, workspace, billing, usage, support, device, and security information so Superdraft works.
  • We process the brand, product, prompt, draft, image, website, social-profile, and campaign information you provide so we can generate and organize your work.
  • We use service providers for hosting, authentication, storage, email, billing, AI generation, image generation, signal ingestion, security, and support.
  • We do not sell your personal information. We do not share it for cross-context behavioral advertising as the product is currently designed.
  • We may use optional analytics, advertising, and retargeting cookies or similar technologies, subject to legally required notices and choices.
  • AI features may send prompts, brand context, assets, and draft data to specialized service providers so they can return the requested output.
  • You should not submit sensitive regulated data unless we have agreed in writing.
  • You can contact us to access, correct, delete, export, or object to certain processing of your personal information.

1. Scope and Roles

This Privacy Policy applies to Superdraft websites, apps, software, APIs, docs, emails, support interactions, billing flows, and related services.

For account, website, billing, security, support, and product analytics information, Superdraft generally acts as the business or controller.

For Customer Content that an organization submits to Superdraft, such as brand data, product information, prompts, draft content, logos, uploaded assets, and certain third-party personal information in that content, Superdraft generally acts as a processor, service provider, or contractor on behalf of the customer, to the extent privacy laws use those terms.

If you use Superdraft through your employer or another organization, that organization may control your workspace and may be able to access, export, delete, or restrict your account activity and Customer Content.

2. Personal Information We Collect

Account and Profile Information

We may collect your name, email address, organization, role, account ID, authentication details, approval status, workspace memberships, active brand context, admin status, preferences, sign-in timestamps, last seen timestamps, and related account settings.

Customer Content

We collect and process the information you provide or make available through Superdraft, including:

  • brand names, websites, descriptions, profiles, positioning, tone, constraints, conversion objectives, and notes;
  • logos, screenshots, colour palettes, visual profiles, brand assets, and uploaded or generated images;
  • product names, descriptions, prices, images, URLs, categories, and catalog metadata;
  • social profile links, brand keywords, review links, and location or weather preferences;
  • prompts, instructions, generated drafts, email templates, subject lines, revisions, ideas, feedback, and exported HTML;
  • scheduled draft settings, digest settings, run summaries, and automation history; and
  • files, links, comments, support materials, and other information you submit.

AI, Generation, and Operational Logs

To provide, troubleshoot, secure, and meter the Service, we may store prompts, prompt templates, prompt versions, model parameters, model outputs, generated images, image-generation metadata, provider generation IDs, token counts, latency, cost estimates, usage metrics, run logs, errors, diagnostics, ranking and matching metadata, and other technical records.

Public and Third-Party Signal Information

Superdraft may collect or process public and third-party information from sources such as public websites, online platforms, search or listing services, review or location sources, feeds, data providers, customer-directed sources, and other market or cultural context sources. This may include usernames, display names, post text, review text, profile links, channel names, public metrics, headlines, URLs, timestamps, locations, and other information available from those sources.

Billing and Transaction Information

If you use a paid plan, we and our billing provider may process plan, subscription, checkout, renewal, cancellation, invoice, tax, customer ID, payment status, billing email, and transaction metadata. We do not store full payment card numbers in Superdraft.

Communications

We collect information when you contact us, respond to emails, request support, complete forms, participate in sales conversations, report issues, or provide feedback. This may include message contents, contact details, attachments, call notes, and communication preferences.

We may collect IP address, device identifiers, browser type, operating system, pages and features used, referring pages, timestamps, logs, session information, approximate location derived from IP address, rate-limit keys, error reports, audit events, and similar technical data.

We use cookies, local storage, and similar technologies for authentication, session management, preferences, security, routing, and product functionality. We also may use optional analytics, advertising, and retargeting cookies or similar technologies to measure traffic, understand marketing performance, improve outreach, and improve the Service. Where required, we will provide legally required notices and choices.

3. Sources of Information

We collect information:

  • directly from you and your organization;
  • automatically when you use the Service;
  • from admins and other users in your workspace;
  • from public websites, feeds, APIs, platforms, and data providers;
  • from authentication, billing, email, hosting, analytics, security, and support providers;
  • from connected services that you authorize; and
  • from generated or inferred information created by Superdraft features.

4. How We Use Personal Information

We use personal information to:

  • provide, operate, secure, maintain, and improve Superdraft;
  • create and manage accounts, workspaces, roles, approvals, memberships, and sessions;
  • ingest, organize, score, rank, match, and display signals;
  • generate, refine, edit, store, preview, export, and manage ideas, drafts, templates, images, and brand assets;
  • run scheduled draft workflows, notifications, digest emails, and operational automations;
  • process payments, subscriptions, renewals, customer portal sessions, invoices, taxes, and billing support;
  • provide customer support, onboarding, troubleshooting, migration, and account administration;
  • meter usage, enforce plan limits, estimate costs, prevent overspend, and detect abuse;
  • monitor reliability, debug errors, maintain logs, protect against fraud and security threats, and enforce policies;
  • communicate about the Service, including security, product, support, billing, and administrative notices;
  • comply with legal obligations, law enforcement requests, disputes, and contractual obligations;
  • create aggregated, de-identified, or anonymized information; and
  • develop and improve features, models, prompts, workflows, ranking rules, templates, and product experience.

We do not sell Customer Content. We do not use Customer Content to train a public foundation model without permission. AI and media features may send Customer Content to specialized service providers so they can provide the requested feature, subject to our provider settings, contracts, and their applicable terms.

Where a legal basis is required, we rely on:

  • contract performance to provide the Service and manage accounts, support, billing, and requested features;
  • legitimate interests, such as securing, improving, debugging, operating, and marketing the Service, unless overridden by your rights;
  • consent, where required for certain cookies, communications, or optional features;
  • legal obligations, such as tax, accounting, sanctions, compliance, and lawful requests; and
  • vital interests or public interest only in rare cases where legally applicable.

6. How We Disclose Personal Information

We may disclose personal information to:

  • service providers and subprocessors that host, store, secure, email, bill, analyze, generate, retrieve, support, monitor, or otherwise help provide the Service;
  • AI, automation, media, and data-processing providers when you use AI-assisted or media features;
  • data retrieval, enrichment, and contextual information providers when needed to retrieve or enrich requested information;
  • billing providers, merchant-of-record providers, payment processors, tax providers, and financial institutions;
  • workspace admins and authorized users according to account permissions;
  • third-party services or integrations you choose to connect, export to, or use;
  • professional advisors such as lawyers, auditors, insurers, accountants, and security consultants;
  • law enforcement, regulators, courts, or others when we believe disclosure is required or appropriate for legal, safety, security, fraud, or rights-protection reasons;
  • counterparties in a merger, acquisition, financing, reorganization, bankruptcy, asset sale, or similar transaction; and
  • others with your consent or at your direction.

We may disclose aggregated, de-identified, or anonymized information where it cannot reasonably identify you.

7. Service Provider Categories

Superdraft uses service providers so the product can operate. We describe these providers by function instead of publishing a full vendor list, source list, model list, or operational map. This keeps the policy clear without turning it into instructions for recreating the product.

Provider categories may include:

Category Purpose
Infrastructure, hosting, and security App hosting, deployment, routing, reliability, monitoring, logging, abuse prevention, and security controls
Database, authentication, and storage Account access, workspace permissions, database operations, file storage, and session management
Billing and payments Checkout, subscriptions, invoices, customer portal, payment status, tax, and billing support
Communications Sign-in emails, transactional messages, operational notices, and support communications
AI and automation Automated analysis, content assistance, classification, generation support, and workflow support
Media processing Media handling, transformation, generation support, and storage
Data retrieval and enrichment Customer-directed source retrieval, contextual information processing, enrichment, deduplication, and normalization
Analytics, support, and operations Product reliability, support, cost controls, usage metering, troubleshooting, diagnostics, and fraud prevention

We may change providers, sources, models, routing, and implementation details over time. If you need a more specific subprocessor list for contracting, security review, or data protection reasons, contact team@superdraft.ai.

8. AI Processing Details

When you use AI-assisted or media features, we may send relevant Customer Content and technical data to specialized service providers. This may include prompts, brand profiles, product information, images, URLs, screenshots, signal details, drafts, revisions, template settings, and instructions.

We do not intentionally send full payment card numbers, account passwords, or unrelated workspace data to specialized service providers used for AI-assisted features. You should avoid submitting highly confidential, regulated, or sensitive personal information to AI features unless we have agreed in writing that the Service is appropriate for that use.

These providers may process data in different regions and under their own technical and legal terms. If your organization needs stricter processing terms, contact us before using the relevant features.

9. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies to:

  • keep you signed in;
  • remember preferences such as selected brand or interface state;
  • secure sessions and prevent abuse;
  • support billing redirects and account flows;
  • route traffic and maintain reliability;
  • understand and improve product performance;
  • measure marketing performance; and
  • support advertising or retargeting where enabled.

You can control cookies through your browser settings. Blocking required cookies may prevent the Service from working correctly.

10. Retention

We keep personal information for as long as reasonably necessary for the purposes described in this policy, including to provide the Service, comply with law, resolve disputes, enforce agreements, maintain security, support backups, and operate our business.

In general:

  • account and workspace information is kept while the account is active and for a reasonable period afterward;
  • Customer Content is kept while needed to provide the Service, unless deleted by you, your organization, or us according to the Terms;
  • billing, tax, subscription, and transaction records may be kept as required by legal, tax, and accounting obligations;
  • security logs, audit logs, provider call logs, usage records, and diagnostics may be kept to protect the Service, investigate issues, and manage costs;
  • public signal records may be retained as part of the shared signal library, unless deletion is required by law or source restrictions; and
  • backups may retain deleted information for a limited period before they expire or are overwritten.

If you request deletion, we will delete or de-identify applicable personal information unless we need to keep it for legal, security, fraud-prevention, contractual, backup, or legitimate business reasons.

11. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These may include access controls, role-based permissions, row-level security, environment separation, logging, rate limiting, provider controls, secret-management practices, backup practices, and security reviews.

No system is perfectly secure. If you believe your account or information has been compromised, contact team@superdraft.ai.

12. International Data Transfers

We and our providers may process personal information in the United States, Canada, the European Economic Area, the United Kingdom, and other locations. Data-protection laws may differ from those in your location.

Where required, we use appropriate safeguards for international transfers, such as contractual commitments, data processing terms, and other mechanisms recognized by applicable law.

13. Your Choices and Privacy Rights

Depending on where you live, you may have rights to:

  • access or know what personal information we process;
  • correct inaccurate personal information;
  • delete personal information;
  • export or receive a portable copy of personal information;
  • object to or restrict certain processing;
  • opt out of certain marketing communications;
  • opt out of sale, sharing, or targeted advertising where applicable;
  • limit use of sensitive personal information where applicable; and
  • appeal a decision about a privacy request.

You can make a request by contacting team@superdraft.ai. We may need to verify your identity and authority before completing a request. If you use Superdraft through an organization, we may refer your request to that organization when it controls the relevant workspace or Customer Content.

We will not discriminate against you for exercising privacy rights.

14. Communications Preferences

You may opt out of marketing emails by using the unsubscribe link in those emails or contacting us. You may still receive transactional or administrative emails, such as sign-in links, security notices, billing notices, account notices, support replies, and Service-related notifications.

Workspace admins may control certain scheduled digest or operational notification settings.

15. California and U.S. State Privacy Notice

This section supplements the rest of the policy for residents of California and other U.S. states with similar privacy laws.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising as the Service is currently designed. Although we may use optional analytics, advertising, and retargeting cookies or similar technologies, we do not use them to sell personal information or share it for cross-context behavioral advertising as the Service is currently designed. If this changes, we will update this policy and provide required opt-out rights.

We may collect the following categories of personal information:

Category Examples Purposes Disclosed to providers?
Identifiers Name, email, account ID, customer ID, IP address Account, authentication, billing, support, security Yes
Customer records Billing contact, organization, subscription details Billing, support, accounting, compliance Yes
Commercial information Plan, subscription, invoices, usage, transaction metadata Billing, metering, limits, customer support Yes
Internet or network activity Logs, device data, pages used, feature activity, timestamps Security, troubleshooting, product operation Yes
Geolocation Approximate location from IP address; customer-selected weather or location context Security, localization, weather/signal features Yes
Professional or employment information Organization, role, workspace membership, admin status Workspace management, access control, support Yes
User content Prompts, drafts, brand assets, product data, images, feedback, support messages Service delivery, AI generation, storage, export, support Yes
Inferences Brand matches, signal rankings, recommendations, usage insights Product features, personalization, ranking, cost analysis Yes
Sensitive personal information Account login information handled through authentication providers; any sensitive data you choose to submit Authentication, security, requested processing Yes, only as needed

We use sensitive personal information only for permitted purposes such as authentication, security, providing requested services, and preventing fraud. Do not submit sensitive regulated data unless we have agreed in writing.

We retain these categories as described in the Retention section.

Authorized agents may submit requests where allowed by law. We may require proof of authorization and identity verification.

16. Canada, EEA, UK, and Other Regions

Residents of Canada, the EEA, the UK, and other regions may have additional rights under local law. You may contact team@superdraft.ai to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or information about our processing.

You may also have the right to complain to a local privacy regulator. We encourage you to contact us first so we can try to resolve the issue.

17. Children's Privacy

Superdraft is a business product and is not intended for children. We do not knowingly collect personal information from children under 16. If you believe a child provided personal information to us, contact team@superdraft.ai.

18. Customer Notices and End-User Data

If you use Superdraft to process personal information about your customers, prospects, subscribers, employees, contractors, reviewers, social-media users, or other third parties, you are responsible for providing any required privacy notices, obtaining any required consents, honoring rights requests, and ensuring that your use of Superdraft complies with applicable law.

You should not use Superdraft to generate or export marketing content in a way that violates privacy, anti-spam, advertising, endorsement, consumer-protection, or platform rules.

19. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice through the Service, by email, or by another reasonable method. The updated policy will be effective on the date stated above unless a later date is provided.

20. Contact

Superdraft

Superdraft Technologies Inc.

Ontario, Canada

Contact: team@superdraft.ai