Privacy Policy
1. Introduction
DraftSOS ("we," "us," "our") operates DraftSOS ("Service"). This Privacy Policy describes how we collect, use, disclose, and protect information when you use our Service.
2. Information We Collect
2.1 Account Information
- Name, email address, company name
- Billing information (processed by third-party payment processors)
- Account credentials (hashed, never stored in plaintext)
2.2 Service Data
- Data you provide to the Service for processing
- Generated reports, analyses, and workflow outputs
- Project history and activity logs
2.3 Usage Data
- Service interaction logs (features used, session frequency)
- Browser type, device information, IP address
- Session data and authentication events
2.4 Communications
- Support requests and correspondence
- Feedback and survey responses
- Mobile phone number (if you opt in to SMS notifications)
3. How We Use Information
We use collected information to:
- Provide the Service: Process your requests, generate outputs, maintain your account
- Improve the Service: Analyze usage patterns, fix bugs, enhance features
- Communicate: Send service notifications, billing information, and updates
- Comply with Law: Meet legal obligations, respond to lawful requests
- Protect Rights: Detect fraud, prevent abuse, enforce our Terms
4. Legal Basis for Processing
- Contract Performance: Processing necessary to provide the Service
- Legitimate Interest: Service improvement, security, fraud prevention
- Consent: Marketing communications and SMS notifications (opt-in only)
- Legal Obligation: Compliance with applicable laws
5. Information Sharing
We do NOT sell personal information. We share information only as follows:
5.1 Service Providers
We use third-party providers for payment processing, cloud infrastructure, email delivery, and analytics (anonymized data only). All providers are bound by data processing agreements.
5.2 Legal Requirements
We may disclose information when required by law, subpoena, court order, or governmental request.
5.3 Business Transfers
In the event of a merger, acquisition, or sale, Customer data may be transferred. We will notify affected Customers before data is subject to a different privacy policy.
6. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Access controls and role-based permissions
- Regular security assessments of our infrastructure
- Audit logging of all data access
- Incident response procedures
Despite these measures, no system is completely secure. We cannot guarantee absolute security of your data.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | Duration of subscription + 90 days |
| Service data and outputs | Duration of subscription + 1 year |
| Billing records | 7 years (legal/tax requirements) |
| Usage logs | 12 months |
| Support correspondence | 3 years |
After retention periods expire, data is securely deleted or anonymized.
8. Customer Rights
Depending on your jurisdiction, you may have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Portability: Receive your data in a structured, machine-readable format
- Objection: Object to certain processing activities
- Restriction: Request restriction of processing
- Withdraw Consent: Withdraw consent for consent-based processing
To exercise these rights, contact privacy@draftsos.com. We respond within 30 days.
9. International Transfers
If we transfer data outside your jurisdiction, we ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms.
10. Children's Privacy
The Service is not directed at individuals under 18. We do not knowingly collect personal information from children.
11. Cookies and Tracking
We use essential cookies for authentication and session management. We use privacy-respecting analytics that do not track users across sites. We do not use advertising cookies or tracking pixels. See our Cookie Policy for details.
12. SMS and Text Messaging
12.1 Program Description
DraftSOS operates an opt-in SMS/text messaging program to send account alerts, draft-day reminders, lineup notifications, and service updates to members who have consented to receive text messages.
12.2 How to Opt In
You consent to receive SMS messages from DraftSOS by explicitly checking the SMS opt-in box during account registration or by enabling SMS notifications in your account settings. Consent to receive SMS messages is not required to purchase or use the Service.
12.3 Message Frequency
Message frequency varies based on your account activity and notification preferences. Transactional messages (account security alerts, billing confirmations) are sent as needed. Members who opt in to promotional communications may receive up to 8 marketing or informational messages per month.
12.4 Opting Out — STOP
To stop receiving SMS messages at any time, reply STOP to any DraftSOS text message. You will receive one final confirmation and will be removed from all SMS lists immediately. To re-enroll, reply START or update your preferences in account settings.
12.5 Getting Help — HELP
For assistance with SMS messaging, reply HELP to any DraftSOS text message or contact us at support@draftsos.com.
12.6 Rates and Charges
Message and data rates may apply. Check with your mobile carrier for details on your plan’s messaging rates. DraftSOS does not charge separately for SMS messages.
12.7 Phone Number Privacy
We do not sell, rent, lease, or share your mobile phone number with third parties for their own marketing or promotional purposes. Your phone number is used solely to provide the DraftSOS SMS program as described in this Privacy Policy.
12.8 Carrier Liability Disclaimer
Mobile carriers are not liable for delayed or undelivered messages. Delivery of SMS messages is subject to your network operator’s effective transmission and coverage.
12.9 Program Terms
Use of the DraftSOS SMS program is subject to our Terms of Service and this Privacy Policy. The DraftSOS SMS program is available to U.S. mobile subscribers only. Supported carriers include all major U.S. carriers (AT&T, Verizon, T-Mobile, and others).
13. California Privacy Rights (CCPA)
California residents have rights to know, delete, and opt out of data sales (we do not sell data). We do not discriminate against users who exercise privacy rights.
14. European Privacy Rights (GDPR)
For EU/EEA residents, our legal bases for processing are described in Section 4. You may lodge a complaint with your local data protection authority.
15. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email at least 30 days before taking effect.
16. Contact
For privacy inquiries: privacy@draftsos.com