Privacy Policy

Draftly is a screenplay and stage play formatting tool built for individual writers and for UK schools, colleges and universities. This policy explains what data we collect, why we collect it, and what rights you have under UK data protection law (UK GDPR).

Draftly is operated as a UK based product. If you have any questions about this policy or about how your data is handled, you can contact us at contact@draftlywriter.space.

Account information

When you create an account we collect your name, email address and password (stored only as a hash, never in plain text), and your account type (individual writer or school/class member).

Script and document content

We store the screenplays, stage plays, notes and any other text you enter into the editor so that your work is saved and available across your devices.

Voice transcription

If you use voice input, audio is captured via your browser's Web Speech API and transcribed to text in the browser. Only the resulting text is stored. Audio recordings themselves are never stored or transmitted to Draftly's servers.

School and class data

For Draftly for Schools accounts we store class names, teacher and student membership records, and comments and feedback left on scripts. This data is scoped to the relevant school account.

Payment information

Billing for Draftly for Schools subscriptions is handled entirely by Stripe. Draftly does not store card details. Stripe processes and holds this data under its own privacy policy.

Shared links

If you create a public share link for a script, anyone with that link can view a read-only copy of the script. Shared scripts cannot be edited through the link.

Technical data

We collect standard website analytics and technical data, including browser type, device type, IP address and cookies, to keep the service running and understand how it is used.

Draftly for Schools is provided to schools, sixth forms, FE colleges and universities. The school acts as the data controller for its own students' information, with Draftly acting as a data processor on the school's behalf.

• Schools are responsible for obtaining appropriate parental or guardian consent where required for students under 18.
• Student data (scripts, comments and class membership) is only accessible to the relevant class's teacher and students. This is enforced through database level access controls.
• Draftly does not use student data for marketing purposes.

We use the information we collect to:

• provide and maintain the service
• process school subscription payments
• respond to support enquiries
• improve the product
• send service related communications

Marketing emails are only sent with your consent and always include an unsubscribe option, in line with UK PECR rules.

Under UK GDPR, we process your data on the following bases:

• Contract: to provide the service you have signed up for.
• Legitimate interests: to improve the product and keep it secure.
• Consent: for marketing communications.
• Legal obligation: where we are required to comply with the law.

We use the following third party processors to operate Draftly:

• Supabase: database hosting and authentication.
• Stripe: payment processing for school subscriptions.
• Brevo: email sending for account and service communications.

We do not sell personal data to third parties.

Account and script data is retained for as long as your account is active, and is deleted within a reasonable period after account closure or on request.

School data is retained for the duration of the school's subscription and deleted on request after cancellation, in line with the school's own data retention obligations.

We protect your data with encryption in transit and database level access controls, including row level security, so that one school or class cannot access another's data. Access to student and school data is restricted to authorised users only.

Under UK GDPR you have the right to:

• access the personal data we hold about you
• rectify inaccurate or incomplete data
• request erasure of your data
• restrict how we process your data
• data portability
• object to processing

To exercise any of these rights, email us at contact@draftlywriter.space. If you are unsatisfied with our response, you can complain to the Information Commissioner's Office (ICO).

We use cookies for essential site functions, such as keeping you signed in, and for analytics so we can understand how the site is used. Analytics cookies are not required for the service to work.

Some of our processors (Supabase, Stripe and Brevo) may process data outside the UK. Where this occurs, we rely on appropriate safeguards such as standard contractual clauses.

We may update this policy from time to time. The updated date is shown at the top of this page. Significant changes will be communicated to school account holders by email.

For any privacy queries, contact us at contact@draftlywriter.space. Questions about Draftly for Schools accounts can also be raised through your school's usual point of contact.