Privacy Policy

Last updated: March 2026

What we collect

Draftmark collects the minimum data needed to operate the service:

Accounts

If you create an account, we store your email address for authentication (magic link login) and to associate documents with your account. We do not share your email with third parties.

What we don't collect

API keys & tokens

API keys and magic tokens are stored hashed. We cannot retrieve your original tokens — if lost, you'll need to generate new ones.

Public content & search engines

Public documents are indexed by search engines via our sitemap and SEO landing pages. If you delete a public document or change it to private, we remove it from our sitemap immediately. However, search engine caches may retain content for some time after deletion.

Data retention

Documents and comments are stored until you delete them. Deleted documents are permanently removed from our database.

Self-hosting

If you self-host Draftmark, you control all data. This policy only applies to the hosted version at draftmark.app.

Contact

Questions? Reach out at [email protected].