Privacy Policy
Effective 31 July 2026 · Version 1.1
Draftly is an Australian building-approval workflow tool — you enter a property address and Draftly researches the site, checks the planning pathway, and helps you assemble a council-ready submission. This policy explains what personal information Draftly collects, why, who it is shared with, and the rights you have under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
The short version
We collect the property addresses you research, the planning documents you upload, and the Google account you sign in with. Uploaded documents are processed by an automated document-reading service to pull out the planning figures they contain. We use trusted providers — Supabase (database & file storage), Google (sign-in, and Google Analytics on the public marketing pages), Stripe (payments) and Anthropic (document reading) — to run the service. We don't sell your personal information, and we don't use your uploaded documents to train any model. You can access, correct or delete your data at any time.
On this page
1. Who we are
Draftly (the “service”, “we”, “us”, “our”) is operated by Gavin Adams, trading as Draftly Info (ABN 83 516 439 814), based in Melbourne, Australia. We are the entity responsible for personal information handled through www.draftly.info and the Draftly Site Intelligence application. For any privacy question, contact admin@draftly.info.
2. What we collect
We only collect information reasonably necessary to run the service. This includes:
| Category | What it includes | Why |
|---|---|---|
| Account & identity | Your name and email address from Google sign-in (Google OAuth), and a Draftly account identifier. | To create your account, save your jobs to the cloud, and let you sign in again. |
| Property & project data | The property addresses you search, lot/site details, the structures and designs you configure, and the planning results generated for them. | To research the site, produce your planning result and assemble your submission. |
| Uploaded documents | Files you choose to upload — e.g. titles, plans of subdivision, planning certificates, surveys, existing drawings — and the figures extracted from them. | To read planning figures out of your own documents and carry them into your results (see section 3). |
| Billing | Your subscription plan and status, and billing details you enter with our payment processor. We never see or store your full card number — that is handled directly by Stripe. | To take payment for a plan and manage your subscription. |
| Technical & usage | Basic technical data (browser type, approximate region, error logs) and de-identified product-usage events (e.g. which step of the flow was reached). | To keep the service working, secure and improving. Usage events contain no addresses, emails or project identifiers. |
You can browse and research without an account; some features (saving jobs to the cloud, billing) require you to sign in and therefore to provide the account information above.
3. Uploaded documents & automated reading
When you upload a planning document, Draftly uses an automated document-reading service provided by Anthropic (the Claude API) to extract the planning figures the document contains — for example a lot number, an easement, a setback or an overlay reference — so you don't have to re-type them.
- The document content is sent to Anthropic solely to extract that information and return it to your job.
- Under Anthropic's commercial terms, your inputs and outputs are not used to train their models.
- Automated reading can make mistakes. Extracted figures are always shown to you as drawn from your document and you are expected to confirm them — official government planning data takes precedence where both exist.
- The automated reading service is never used to invent planning facts. Verified planning facts (council, zone, overlays, controls) come only from official government spatial data; anything that can't be verified is omitted, never guessed.
4. How we use your information
We handle personal information for these purposes (APP 3, APP 6):
- To provide the service — research a site, generate a planning result, size a structure and assemble a submission pack.
- To create and secure your account and save your jobs to the cloud.
- To process payments and manage subscriptions.
- To provide support and respond to your requests.
- To keep the service secure, diagnose faults and improve it.
- To comply with our legal obligations.
We do not use your personal information for any unrelated purpose without your consent.
5. Who we share it with
We don't sell your personal information. We share it only with the service providers we use to run Draftly, and only to the extent needed for them to perform their function:
| Provider | Purpose |
|---|---|
| Supabase | Database and file storage — your account, jobs and uploaded documents are stored here under row-level security (only your account can read your rows). |
| Sign-in (OAuth). We receive your name and email; we don't receive your Google password. Separately, Google Analytics 4 runs on the public marketing pages — see section 10 for what it collects and how to opt out. | |
| Anthropic | Automated reading of documents you upload (section 3). |
| Stripe | Payment processing and subscription billing. Stripe handles your card details directly under its own privacy policy. |
| Vercel | Hosting, and Vercel Analytics for privacy-respecting product analytics (de-identified usage events only — no addresses, emails or project identifiers). |
| Government data sources | Draftly queries official government planning APIs (e.g. VicPlan, NSW ePlanning, QLD schemes, TAS theLIST, ACT ACTmapi) using the address you enter to return verified planning facts. |
We may also disclose personal information where required or authorised by law, or to protect our rights, safety or property or those of others.
6. Overseas storage & disclosure
Some of our providers store or process data on servers located outside Australia (including in the United States). By using Draftly you acknowledge that your information may be handled overseas (APP 8). We take reasonable steps to use reputable providers that maintain appropriate security and privacy protections.
7. Storage & security
Your data is stored with Supabase under row-level security, so only your own account can read or write your rows. Data is transmitted over encrypted connections (HTTPS/TLS). We take reasonable steps to protect personal information from misuse, loss, and unauthorised access (APP 11), but no online service can be guaranteed completely secure.
8. Retention & deletion
We keep your information for as long as your account is active or as needed to provide the service, then only as long as required to meet legal, accounting or reporting obligations. You can ask us to delete your account and its data at any time by emailing admin@draftly.info; we will delete or de-identify it except where we must retain it by law (for example, billing records).
9. Access & correction
You have the right to ask for a copy of the personal information we hold about you, and to ask us to correct it if it is inaccurate, out of date or incomplete (APP 12 & APP 13). Email admin@draftly.info and we will respond within a reasonable period. We may need to verify your identity first. There is normally no charge.
10. Marketing & analytics
If we send you service or product emails, each will include a way to opt out, and you can also opt out at any time by emailing us (APP 7).
We use Google Analytics 4 (GA4) on the public marketing pages
(www.draftly.info) to understand how visitors find and use the site: pages viewed, how you
arrived (for example, a Google search), approximate region, and device/browser type. GA4 sets
first-party cookies (_ga, _ga_*) to tell visits apart. It does
not receive the property addresses you research, your account email, or your project
data, and GA4 does not log or store full IP addresses. Analytics event data is kept only for
the retention period configured in our GA4 property — never more than 14 months — and is then
deleted automatically. You can opt out with
Google's
Analytics opt-out browser add-on or by blocking analytics cookies in your browser.
Our in-product analytics (Vercel Analytics, inside the signed-in app) record only de-identified usage events — no addresses, emails or project identifiers — and we respect your browser's “Do Not Track” signal.
11. Cookies
We use the cookies and local storage needed to keep you signed in and to remember your
preferences, plus Google Analytics' first-party cookies (_ga, _ga_*)
on the public marketing pages (see section 10). We don't use advertising or cross-site
tracking cookies.
12. Children
Draftly is a professional building-approval tool intended for adults. It isn't directed at children and we don't knowingly collect information from anyone under 16.
13. Complaints
If you think we've mishandled your personal information, please contact us first at admin@draftly.info so we can try to resolve it. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
14. Changes to this policy
We may update this policy from time to time. When we do, we'll change the effective date above and post the revised version here. Significant changes will be highlighted where practicable.
15. Contact
Questions, requests or complaints about privacy: admin@draftly.info. This policy is governed by the laws of Australia.