PRIVACY POLICY — Draft.ai (Powered by APG Tech Labs) Effective Date: November 2025 1. Overview This Privacy Policy explains how APG Tech Labs LLC (“we,” “us,” or “our”) collects, uses, and protects your information when you use Draft.ai (“the Service”). By using the Service, you agree to the practices described here. 2. Information We Collect We may collect the following: Account information: Name, email, login credentials User content: Prompts, uploaded files, and AI-generated outputs Payment information: Processed securely via Stripe Usage data: Analytics to improve the Service Technical data: IP address, device, browser type For users under 13: We do not knowingly collect personal information without verifiable parental consent. 3. How We Use Your Information We use your information to: Provide and improve the Service. Manage subscriptions and billing. Communicate important updates or notices. Monitor usage to enhance security and performance. Conduct research and development on AI models using aggregated, anonymized data. 4. Data Retention User-generated content and AI outputs: Stored 30 days, then permanently deleted Account information: Retained while active Billing records: Retained as required by law Analytics/logs: Retained in anonymized or aggregated form 5. Sharing Your Information We do not sell your personal data. We may share data with: Service providers (e.g., Stripe for payments, cloud hosting providers) who comply with privacy and security standards, Legal authorities when required by law, regulation, or to protect rights and safety. Business transfers in the event of a merger, acquisition, or sale of assets. 6. Your Rights (GDPR/CCPA) You may: Request access, correction, or deletion of personal information Withdraw consent or object to certain processing Request data portability Opt out of the sale of personal data (CCPA) To exercise these rights, contact: allison@apgtechlabs.com 7. Security We implement technical, administrative, and physical safeguards to protect your data. While we strive to keep your information secure, no system is completely immune to unauthorized access. 8. Children’s Privacy (COPPA) The Service is not intended for children under 13 unless verifiable parental consent is obtained. Parents can review or request deletion of their child’s data. 9. International Users Your data may be stored and processed in the U.S. by using the Service. EU users’ data transfers comply with GDPR safeguards. 10. AI Output Disclaimer Outputs generated by the AI are based on user-provided prompts. We do not claim ownership over your inputs or generated outputs. AI outputs may contain inaccuracies, biases, or errors; users should review before use.