Privacy at draftgo

This page summarises how draftgo handles personal data. The legally authoritative document is the full Privacy policy, which describes all processing purposes, legal bases and recipients in detail.

Hosting and encryption

Stored data – database and files – is kept on EU servers in a Frankfurt data centre. For hosting, email delivery and individual features, we also use service providers based in the USA or with worldwide infrastructure; transfers to third countries are safeguarded under Art. 44 et seq. GDPR (EU standard contractual clauses or the EU-US Data Privacy Framework). All connections are encrypted via TLS; stored files and database content are protected by technical and organisational measures pursuant to Art. 32 GDPR. Access to projects, loops and individual files is controlled by permissions and logged.

Commissioned processing

Customers process their own content with draftgo. For this purpose, we conclude a data processing agreement pursuant to Art. 28 GDPR, which forms part of the Terms and Conditions and remains available as a document in the settings at any time. Guest access is limited in time and can be revoked at any time.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Requests may be submitted to service@draftgo.io or via our contact page. Deleted files remain in the recycle bin until it is permanently emptied and are then irrevocably removed from storage.