DraftWise — Privacy Policy

Effective date: 1 July 2026

This policy explains what DraftWise collects, what it deliberately does not collect, and your rights. DraftWise is a product of IjyaLabs, Nagpur, Maharashtra, India ("IjyaLabs", "we", "us"), aligned with the Digital Personal Data Protection Act, 2023 (India) and, where applicable, the GDPR. Contact: support@ijyalabs.in.

1. Core promise — your documents stay yours

Your documents are stored in your own Google Drive. IjyaLabs does not store readable copies of your documents on its servers.
We use the Google drive.file scope: DraftWise can access only the files it creates or that you explicitly open with it. It cannot browse the rest of your Drive.
No document content — text, titles, party names, amounts, file paths, comments, or dictation — is ever sent to our analytics, crash-reporting, or licensing systems.

2. What we collect

Data	Purpose	Basis
Google account id, name, email	Identity / sign-in	Contract (providing the Service)
Licence / entitlement and trial state	Operate your licence	Contract
Hashed device fingerprint (hashed hardware ids + your email)	Licence enforcement, device binding	Contract / legitimate interest
Payment references (via Razorpay)	Process payment	Contract / legal obligation
Product analytics (content-free, opt-in)	Improve the product	Consent
Crash reports (content-free, explicit opt-in, off by default)	Fix crashes	Consent
Consent records	Prove lawful basis	Legal obligation

The hashed device fingerprint together with your account email is personal data even though hashed, because we can link it to your account — it is not anonymous. We process it only to enforce your licence, never for analytics or advertising.

3. What we do not collect

Readable document content of any kind.
Full card or bank details (handled by Razorpay).
Voice / dictation audio (not stored).
Memory dumps containing your content (crash reports are content-free stack traces only).

4. Payments

Payments are processed by Razorpay, a PCI-DSS-compliant payment processor, under its own privacy policy. We receive only payment references and status, not your full card details. See Pricing.

5. Third-party services

Google (Drive and sign-in), Razorpay (payments), and our hosting and diagnostics providers act as processors or sub-processors, each only for the purpose described above. Optional action-voice (the command mic) may use the browser's or operating system's speech service to recognise a command; this is disclosed in the app, it is your choice to enable it, the typed command box is always available instead, and DraftWise stores no audio.

6. Retention and deletion

Product analytics: about 12 months, then deleted or anonymised.
Crash reports: about 90 days.
Consent records: life of the account plus one year.
Licensing and device records: while the licence is active plus one year.
Deletion requests are completed within 30 days.

7. Your rights (DPDP Act 2023 / GDPR)

You may access, correct, or request deletion of your personal data, withdraw consent for analytics or crash reporting at any time (without losing functionality), and lodge a grievance. To exercise these rights, contact support@ijyalabs.in.

8. Special duty to your clients' data

Many users handle their own clients' confidential information. We design even content-free analytics so it can never incidentally capture a client's personal data — for example, an action label never echoes a party name — so you can rely on this when meeting your own confidentiality obligations.

9. Children

DraftWise is not directed at children; we do not knowingly collect children's data.

10. Changes and contact

We may update this policy; material changes are notified in-app or by email. This policy is governed by Indian law, with exclusive jurisdiction at the courts of Nagpur, Maharashtra, India. Contact support@ijyalabs.in; see the IjyaLabs Company Policy for full jurisdiction and notice-serving details.