Privacy Policy

We understand that privacy is a highly important aspect for our customers. In this document we describe how we gather and process customer data.

We gather only the minimum necessary to provide the services and handle it with maximum caution. Keeping our customers' data safe is a major aspect in how we see the professional software business.

Why do we collect your personal data

  • to provide app functionality
  • for payments processing
  • for error investigation
  • to provide support services
  • to contact you about technical matters and product changes

What data we collect about you

  • name, email, profile photo
  • payment details: email, name, address
  • technical analytics: IP address, timezone, browser type
  • the prompts and requests you enter while using Drift

How we store the information we collect

  • we store authentication data in WorkOS
  • we store payments information in Stripe
  • we store account information and prompts in Supabase

How we get the information

  • we get the information from you when you create an account, use the platform, or create a payment session

How we use information we collect

  • we use the information to provide the app's functionality
  • we send the prompts required for your request to AI model providers (OpenAI, Google Gemini, Anthropic); the data is not used to train AI models
  • we use the information to process payments
  • we use the information to send technical emails and product updates
  • we don't use the information for any other purpose

How we protect your data

  • all data is encrypted in transit using industry-standard HTTPS/TLS on every connection between your browser, our backend, and our service providers
  • data stored in our database is encrypted at rest
  • access to user data is protected by authentication and authorization: we verify the identity behind every request, and you can only access data linked to your own account
  • access to production systems and stored data is restricted to authorized personnel, protected by multi-factor authentication
  • we run on infrastructure from trusted, security-compliant providers to store and process data
  • you can request deletion of your data at any time by contacting us

What third-party tools we use

Cloud infrastructure

  • Railway as a cloud infrastructure provider
  • Supabase as a database provider
  • OpenAI API as an AI model provider
  • Google Gemini API as an AI model provider
  • Anthropic Claude API as an AI model provider
  • Vercel for app hosting & analytics
  • WorkOS for authentication
  • Stripe for payments processing

Additional tools

  • PostHog for product analytics
  • Plausible for privacy-friendly website analytics

In what countries the data is stored

  • Database: Ireland
  • Payments data: Europe
  • Authentication data: United States

What rights do you have

  • the right to erasure
  • the right to rectification
  • the right to be informed how we collect and use your personal data
  • the right to access your personal data

In case of any requests or questions regarding Privacy Policy

Please contact us at contact@drift-agent.com.