Privacy Policy

This policy explains what Counterdraft (the web app at counterdraft.com) and the CounterDraft Lens Chrome extension collect, why, and what you can do about it. We collect only what we need to help you capture your thinking and turn it into writing, and we never sell your data.

What we collect

• Account details: your name, email address and profile picture from sign-up.
• Your content: the notes, beliefs, ideas, drafts, files and posts you create, import or sync.
• Connected accounts: if you connect LinkedIn, the access token and profile details needed to import your posts and publish on your behalf.
• Billing details: your plan and payment status. Card details are handled by our payment processors and never reach our servers.
• Usage data: pages visited and features used, so we can improve the product.

CounterDraft Lens (Chrome extension)

Lens only acts when you open it and choose to capture something. When you do, it:

• Reads your Counterdraft sign-in cookie, so the capture is saved to your own account.
• Takes a screenshot of the visible part of the current tab, or of the area you select.
• Reads the page's URL and title, and sends them with your screenshot, your note and the reason you chose to Counterdraft.

Lens does not track your browsing, read pages you don't capture, or send data anywhere except Counterdraft. The data it sends is used only to analyse and store your capture in your account.

How we use your data

• To run the product: store your content, analyse captures, and generate drafts and suggestions.
• To manage your account, subscription and connected platforms.
• To understand usage and fix problems.

We do not sell your data, use it for advertising, or use it to decide creditworthiness or for lending.

Who we share it with

We share data only with the services that run Counterdraft for us, and only what each one needs:

• Clerk for sign-in and account management.
• Supabase for database storage.
• Vercel for hosting.
• AI model providers such as OpenAI to analyse your content and generate text. Their API terms do not allow them to train models on it.
• Tavily for web research you request.
• PostHog for product analytics.
• Razorpay and Dodo Payments for payments.
• LinkedIn, only if you connect it, to import and publish posts.

We may also disclose data if the law requires it.

Retention and deletion

We keep your data while your account is open. You can delete content in the app at any time, and you can disconnect LinkedIn from Settings. To delete your account and all its data, email us and we will do it within 30 days.

Security

Data is encrypted in transit, access to it is restricted, and connected-account tokens are stored server side only.

Changes

If we change this policy, we will update the date above and, for significant changes, let you know in the app or by email.

Contact

Questions or requests: privacy@counterdraft.com.