Privacy Policy

1. Introduction

TailDraft ("we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").

This Privacy Policy complies with Singapore's Personal Data Protection Act 2012 (PDPA) and other applicable privacy laws. By using our Service, you consent to the data practices described in this policy.

If you have any questions about this Privacy Policy, please contact us at artificialreply@gmail.com.

2. Information We Collect

2.1 Personal Information

We collect personal information that you provide directly to us, including:

• Account Information: Name, email address, and authentication details
• Profile Information: Display name, profile picture, and preferences
• Payment Information: Billing details processed through LemonSqueezy (we do not store payment card details)
• Communication Data: Messages you send us and support interactions

2.2 Usage Information

We automatically collect information about how you use our Service:

• Component Generation Data: Prompts, generated components, and usage patterns
• Technical Data: IP address, browser type, device information, and operating system
• Usage Analytics: Pages visited, time spent, and interaction patterns
• Performance Data: Error logs and performance metrics

2.3 Third-Party Information

We receive information from third-party services:

• Authentication Providers: Basic profile information from OAuth providers
• Payment Processors: Transaction details from LemonSqueezy
• Analytics Services: Usage data from analytics providers

3. How We Use Your Information

We use your personal information for the following purposes:

3.1 Service Provision

• Creating and managing your account
• Providing AI component generation services
• Processing payments and managing subscriptions
• Delivering requested features and functionality

3.2 Communication

• Sending service-related notifications and updates
• Responding to your inquiries and support requests
• Providing important security and legal notices

3.3 Improvement and Analytics

• Analyzing usage patterns to improve our Service
• Developing new features and functionality
• Conducting research and analytics
• Ensuring security and preventing fraud

3.4 Legal Compliance

• Complying with applicable laws and regulations
• Enforcing our Terms of Service
• Protecting our rights and interests
• Responding to legal requests and proceedings

4. Legal Basis for Processing (PDPA Compliance)

Under Singapore's PDPA, we process your personal data based on:

• Consent: You have given clear consent for specific purposes
• Contract: Processing is necessary for contract performance
• Legal Obligation: Processing is required by law
• Legitimate Interests: Processing is necessary for our legitimate business interests

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information in the following circumstances:

5.1 Service Providers

• Supabase: Database and authentication services
• LemonSqueezy: Payment processing
• Anthropic: AI model services (Claude 4.0)
• Vercel: Hosting and deployment services

5.2 Legal Requirements

We may disclose your information when required by law or in good faith belief that such action is necessary to:

• Comply with legal process or court orders
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing
• Protect the safety of users or the public

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and your options.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data is encrypted in transit and at rest
• Access Controls: Limited access to authorized personnel only
• Regular Audits: Security practices are regularly reviewed
• Secure Infrastructure: Cloud services with security certifications
• Incident Response: Procedures for handling security breaches

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for different periods depending on the purpose:

• Account Data: Until you delete your account or request deletion
• Usage Data: Up to 2 years for analytics and improvement purposes
• Payment Data: 7 years for tax and accounting purposes
• Communication Data: 3 years for support and legal purposes

We may retain certain information for longer periods if required by law or for legitimate business purposes.

8. Your Rights Under PDPA

Under Singapore's PDPA, you have the following rights:

8.1 Access Right

You can request access to your personal data and information about how it's processed.

8.2 Correction Right

You can request correction of inaccurate or incomplete personal data.

8.3 Withdrawal of Consent

You can withdraw your consent for processing, where consent is the legal basis.

8.4 Data Portability

You can request your data in a commonly used format for transfer to another service.

8.5 Deletion Right

You can request deletion of your personal data in certain circumstances.

To exercise these rights, contact us at artificialreply@gmail.com. We will respond within 30 days as required by PDPA.

9. International Data Transfers

Your personal data may be transferred to and processed in countries other than Singapore. When we transfer data internationally, we ensure appropriate safeguards are in place:

• Transfer to countries with adequate data protection laws
• Contractual clauses ensuring data protection standards
• Certification schemes and codes of conduct
• Service providers with appropriate security measures

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and preferences
• Analyze website usage and performance
• Provide personalized experiences
• Ensure security and prevent fraud

You can control cookie preferences through your browser settings. However, disabling cookies may affect Service functionality.

12. Third-Party Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

13. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by PDPA and other applicable laws, typically within 72 hours of discovery.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending you an email notification
• Displaying a prominent notice on our Service

Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

15. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

16. Complaints

If you believe we have not handled your personal data in accordance with this Privacy Policy or PDPA, you may file a complaint with: