Privacy Policy
Last updated: January 12, 2026
This Privacy Policy describes how Entropy Hedge, LLC ("we," "us," or "our") collects, uses, and shares information when you use Draftless ("the Service").
1. Company Information
Draftless is operated by:
Entropy Hedge, LLC1111B S Governors Ave STE 37114
Dover, DE 19904
United States
EIN: 37-2187363
For privacy-related inquiries, contact us at: office@entropyhedge.com
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, name, and password when you create an account.
- Organization Data: Organization name, team member information, and role assignments.
- Project Content: Website URLs you submit for cloning, AI editing instructions, and generated HTML content.
- Client Feedback: Comments and approvals submitted through review links, including reviewer names and email addresses.
- Communications: Information you provide when contacting support or providing feedback.
2.2 Information Collected Automatically
- Usage Data: Features used, pages visited, AI edits performed, and clones generated.
- Device Information: Browser type, operating system, and device identifiers.
- Log Data: IP addresses, access times, and referring URLs.
- Cookies: Session cookies for authentication and preferences.
3. How We Use Your Information
We use the collected information to:
- Provide, maintain, and improve the Service
- Process website cloning requests and AI-powered edits
- Generate and host preview URLs and client review links
- Process payments and manage subscriptions (via our payment processor)
- Send transactional emails (account confirmations, password resets)
- Respond to support requests and communicate about the Service
- Analyze usage to improve features and user experience
- Detect and prevent fraud, abuse, and security issues
- Comply with legal obligations
4. AI and Third-Party Services
4.1 AI Processing
To provide AI-powered editing features, we send your editing instructions and page content to third-party AI providers (such as OpenRouter/OpenAI). These providers process your data according to their privacy policies and data processing agreements. We do not use your content to train AI models.
4.2 Payment Processing
Payments are processed by Lemon Squeezy, who acts as the Merchant of Record for all transactions. When you make a purchase, Lemon Squeezy collects and processes your payment information directly. We do not store your credit card details. Lemon Squeezy's privacy policy applies to payment data: https://www.lemonsqueezy.com/privacy
4.3 Other Service Providers
We use trusted third-party services for:
- Cloud hosting and infrastructure
- Email delivery
- Analytics and error monitoring
- Authentication (Google OAuth)
5. Data Sharing
We do not sell your personal information. We share data only in these circumstances:
- Service Providers: With vendors who help operate the Service (hosting, email, analytics).
- Client Review: When you share review links, reviewers can see project content and leave feedback.
- Team Members: Organization members can access shared projects based on their roles.
- Legal Requirements: When required by law, legal process, or to protect our rights.
- Business Transfers: In connection with a merger, acquisition, or sale of assets.
6. Data Retention
We retain your information as follows:
- Account Data: Until you delete your account, plus 30 days for recovery.
- Project Content: Until you or your organization deletes the project.
- Version History: Retained for the life of the project.
- Review Comments: Until the review link or project is deleted.
- Log Data: Up to 90 days for security and debugging purposes.
7. Your Rights and Choices
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data.
- Correction: Update or correct inaccurate information.
- Deletion: Request deletion of your account and associated data.
- Portability: Export your project data in HTML format.
- Opt-out: Unsubscribe from marketing emails (transactional emails are still sent).
To exercise these rights, contact us at office@entropyhedge.com.
8. International Data Transfers
We are based in the United States. If you access the Service from outside the US, your data will be transferred to and processed in the US. We use appropriate safeguards for international transfers, including standard contractual clauses where required.
9. Security
We implement industry-standard security measures to protect your data, including:
- Encryption in transit (TLS/HTTPS)
- Encryption at rest for sensitive data
- Secure password hashing
- Regular security audits
- Access controls and authentication
However, no system is completely secure. You are responsible for maintaining the security of your account credentials.
10. Children's Privacy
The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance.
12. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Entropy Hedge, LLC1111B S Governors Ave STE 37114
Dover, DE 19904
United States
Email: office@entropyhedge.com